Important Notice: EXXING INTERNATIONAL SARL processes personal data in compliance with Morocco's Law No. 09-08 (CNDP) and the EU General Data Protection Regulation (GDPR) for data subjects located in the European Union. EXXING is not a regulated investment firm.
1. Introduction & Scope
EXXING INTERNATIONAL SARL ("EXXING", "we", "us") operates the website exxing.group and related digital services. This Privacy Policy describes how we collect, use, store, and protect your personal data, and the rights you have in relation to that data.
This policy applies to all users of exxing.group, including visitors, prospective clients, and business contacts. It is governed by Morocco's Law No. 09-08 on the Protection of Personal Data (enforced by the CNDP) and, where applicable, the EU General Data Protection Regulation (GDPR — Regulation 2016/679).
Data Controller: EXXING INTERNATIONAL SARL — Casablanca, Morocco — [email protected]
2. Data We Collect
We collect the following categories of personal data:
- —Contact & Identity Data: Name, email address, phone number, company name, job title — collected via contact forms and business correspondence.
- —Technical & Usage Data: IP address, browser type, operating system, pages visited, time spent on pages — collected automatically via server logs and analytics.
- —Communication Data: Messages sent through contact forms, email inquiries, and business correspondence.
- —Cookie Data: Information stored through cookies and similar tracking technologies. See our Cookie Policy for details.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- —Consent (GDPR Art. 6(1)(a) / LNPDP Art. 4) — for marketing communications and non-essential cookies.
- —Contractual necessity (GDPR Art. 6(1)(b)) — to respond to inquiries and deliver advisory services.
- —Legal obligation (GDPR Art. 6(1)(c)) — to comply with applicable Moroccan and EU regulations.
- —Legitimate interests (GDPR Art. 6(1)(f)) — for website security, fraud prevention, and service improvement.
4. How We Use Your Data
We use collected data exclusively for the following purposes:
- —Responding to inquiries and business development contacts.
- —Delivering advisory services and related communications.
- —Sending sector research, market updates, and thought leadership (with consent).
- —Improving website performance, security, and user experience.
- —Complying with legal and regulatory obligations.
EXXING does not sell, rent, or trade personal data to third parties.
5. Data Retention
6. Your Rights
Under GDPR and Morocco's Law No. 09-08, you have the following rights:
Right of Access
Request a copy of your personal data.
Right to Rectification
Request correction of inaccurate data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Restrict Processing
Request limitation of data processing.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".
7. Data Security
EXXING implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with GDPR Article 32 and LNPDP requirements. These include encrypted data transmission (TLS/HTTPS), access controls, and regular security reviews. No method of electronic transmission is 100% secure; we cannot guarantee absolute security, but we are committed to industry best practices.
8. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and analyse site usage. We obtain your consent before placing non-essential cookies on your device. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
9. International Data Transfers
Personal data is processed and stored in Morocco. Where data is transferred to service providers located in other jurisdictions (e.g., cloud infrastructure providers), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU data subjects and compliance with CNDP authorisation requirements for cross-border transfers.
10. Supervisory Authorities
If you believe we have violated your data protection rights, you may lodge a complaint with the relevant supervisory authority:
- —Morocco: Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) — www.cndp.ma
- —EU (for EU data subjects): The competent Data Protection Authority in your country of residence. edpb.europa.eu
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy regularly.
12. Contact
EXXING INTERNATIONAL SARL
Casablanca, Morocco
General enquiries: [email protected]
Data protection: [email protected]