1. Data Controller
The personal data controller is the legal operator identified in the legal notice, registered under Enterprise Identification Number (ICE) 004032665000060, headquartered in Casablanca, Morocco.
For any data privacy questions or to exercise your rights under applicable privacy legislation, contact our Data Protection Officer by email at: contact@hygiopulse.com.
2. Data Collected & Purposes
In accordance with data minimization principles, we only collect data that is strictly necessary for operating the cleaning traceability service:
- Managers & Account Owners: Name, professional email address, company or HOA legal name, telephone number, and facility descriptors (address, city).
- Intervention Records: Timestamp of completed tasks, checklist items marked as performed, and optional maintenance incident flags.
3. Worker Privacy: Technical Identifier & No Surveillance
HygioPulse is engineered to provide positive proof of quality work while completely preserving worker dignity and privacy:
Technical identifier only: Field cleanings are associated with a technical, pseudonymized tag. HygioPulse never requires intrusive personal profiles for cleaning personnel.
Location check at scan only: Geographical verification occurs solely at the exact instant the cleaner scans the physical QR code to sign off on their checklist. There is no continuous GPS tracking, no background tracking, and no real-time employee monitoring.
4. Data Retention: 12 Months Maximum
Passage logs, inspection sign-offs, and digital timestamps are preserved for a maximum rolling period of 12 months.
Following the 12-month retention window, historical records are automatically purged or archived in secure format from active production databases.
5. Zero Sale of Personal Data
HygioPulse does not sell, rent, license, or monetize any customer or worker data to third-party data brokers or advertising networks.
Data is strictly accessible only to authorized users configured by the facility owner (HOA board, property manager, authorized contractor).
6. Regulatory Compliance: CNDP, GDPR & CCPA
Our platform architecture adheres to leading international data privacy frameworks:
CNDP Morocco
Compliant with Dahir n° 1-09-15 / Law 09-08 on individual data protection.
GDPR (Europe)
Compliant with EU Regulation 2016/679: rights of access, rectification, portability, and erasure.
CCPA (United States)
Compliant with California Consumer Privacy Act: transparent data categories, right to delete, no sale opt-out.
7. Security & Exercising Your Rights
All network communications are secured using modern TLS/HTTPS encryption standards. Data is hosted in SOC-compliant cloud facilities with automated daily backups.
To exercise your rights of access, correction, or deletion, simply submit a request to contact@hygiopulse.com.