Privacy policy

1Identity of the data controller

The data controller responsible for your personal data is:

• Company name: GoHazz SARL
• Registered office: 1 Lot Zeina, 4ème étage, Espace 6, Bouskoura, Casablanca, Morocco
• Email: contact@gohazz.ma

2Data collected

2.1 Data collected from Customers

• Identification data: Full name, telephone number.
• Trip data: Pick-up and delivery addresses, photos of the goods, description of the goods.
• Location data: Real-time GPS coordinates, solely for the duration of the Trip.
• Activity data: Trip history, ratings, complaints.

2.2 Data collected from Carriers

• Identification data: Full name, telephone number, profile photo, verification selfie. The selfie is visually checked by the GoHazz team when the account is validated, without automated facial recognition.
• Regulatory documents: National ID card (CIN) (number and scan), driving licence (number, category), vehicle insurance (number, expiry date), vehicle registration certificate (registration number).
• Driver data: Name, telephone number and driving licence of the Driver, where the Driver is different from the Carrier.
• Vehicle data: Make, model, year, type, photos of the vehicle (4 sides).
• Location data: Real-time GPS coordinates while the Carrier is logged in and available, and for the duration of the Trip, including the time and position of arrival at the loading point.
• Financial data: Statement of advances and commissions in the Wallet, amounts of commissions deducted, payment receipts and, where advances are refunded, the Carrier's bank account details (RIB).
• Activity data: Trip history, ratings received, complaints, cancellations.

2.3 Data not collected

GoHazz does not collect the following data: Customers' bank or credit card data, health data, political or religious opinions, data relating to ethnic or racial origin, biometric data.

Users are requested not to transmit any data unrelated to the Trip.

3Purposes and legal basis of processing

GoHazz processes your personal data for the following purposes:

4Recipients of the data

Your personal data is accessible to the following persons and entities:

4.1 GoHazz internal teams

According to a strictly defined role-based system: Administration, Operations, Customer Support, Finance and Sales. Each team only accesses the data necessary for the performance of its duties.

4.2 Other Users

In the context of a Trip, certain data is shared between the parties:

• The Customer receives: the surname, first name, profile photo, vehicle type and telephone number of the selected Carrier.
• The Carrier receives: the surname, first name and telephone number of the Customer for the Trip assigned to the Carrier.

These exchanges are limited to the data strictly necessary for the performance of the Trip. The Carrier's identity documents are not published on the Platform.

4.3 Technical service providers (processors)

GoHazz uses service providers for hosting, messaging, geolocation and support. Cash Plus and Berkeley Systems (Binga.ma, Wafacash network) receive the data necessary for the payment of advances on commissions and act in this capacity on behalf of GoHazz; the GoHazz Wallet is solely the internal statement kept by GoHazz. Such access and transmissions are limited to their purpose and governed by contract. Data may be disclosed to the authorities where provided for or required by law.

5Data retention period

Identifying data is retained for the period necessary for the stated purposes. Following a closure request, the Account is maintained for thirty (30) days, in accordance with the Terms of Use; during that period the User no longer has access to his or her history or to the services, unless the Account is reactivated. After the actual closure, only the data necessary for legal obligations, evidence of transactions or the defence of rights is archived with restricted access, and is then deleted or anonymised.

Data that has been irreversibly anonymised may be retained for statistics without identification of Users. Mere pseudonymisation does not constitute anonymisation.

6Your rights

In accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data, you have the following rights regarding your personal data:

6.1 Right of access

You have the right to obtain confirmation as to whether data concerning you is being processed and to obtain a copy thereof, as well as any information relating to the terms of such processing.

6.2 Right to rectification

You have the right to obtain the rectification of inaccurate data concerning you and to have incomplete data completed.

6.3 Right to object

You have the right to object, on legitimate grounds, to the processing of data concerning you, except where such processing is based on a legal obligation. You may furthermore object at any time, free of charge and without having to give reasons for your request, to the use of your data for direct marketing purposes.

6.4 Exercise of rights

Requests may be sent to contact@gohazz.ma or to the postal address indicated in Article 1. GoHazz may request the information strictly necessary to verify the identity of the requester. Justified rectifications are carried out free of charge within ten clear days. Access requests are processed without delay in accordance with the applicable provisions.

7Data security

GoHazz implements appropriate technical and organisational measures to protect your data against any unauthorised access, loss, destruction or disclosure:

• Encryption in transit: All communications between the application and the servers are encrypted via HTTPS/TLS.
• Encryption at rest: Sensitive data (documents, personal data) is encrypted on the servers.
• Secure authentication: OTP (One-Time Password) system for all logins.
• Access control: Access to data restricted by a role-based system (principle of least privilege).
• Audit log: All sensitive actions are logged and time-stamped.
• Data location: Data is stored on secure servers located in Morocco. The application runs on Google Cloud infrastructure; data passing through it for the purposes of the service is processed in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

In the event of an incident, GoHazz takes the necessary measures to limit its effects and provides the notifications required by the regulations or by an applicable decision.

8Cookies and tracking technologies

The GoHazz Application may use tracking technologies (session identifiers, cache data) solely for the proper technical functioning of the application. These technologies are not used for advertising or commercial profiling purposes.

9Changes to the privacy policy

GoHazz may update this Privacy Policy to reflect legal, regulatory or service-related developments. Significant changes will be brought to the attention of Users via the Application or by email. The date of the version in force appears on the document.

10Contact

• GoHazz SARL — Data Protection Department
• Address: 1 Lot Zeina, 4ème étage, Espace 6, Bouskoura, Casablanca
• Telephone: +212 665-722244
• Email: contact@gohazz.ma