Privacy policy.

The controller of personal data collected via groupi.ma is Groupi.

Processing operations follow Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data, under the supervision of the CNDP.

For any question about your data, write to dpo@groupi.ma→.

We only collect data needed for the purposes described below:

• Identification: first name, last name, date of birth, ID document (for pre-reservation and the notarial signing).
• Contact: email address, phone number, postal address.
• Buying project: target city, indicative budget, asset type, status (first-time buyer, MRE, etc.).
• Transactional: Groupi fee payments, payment proofs, pre-reserved unit reference, contract documents.
• Site usage: technical logs, anonymised browsing data and cookies (see the dedicated section below).

• Manage your registration in a buying group and your member space.
• Invite you to the matching Zoom sessions and Open House Days.
• Prepare and follow the pre-reservation, the contract and the notarial signing.
• Liaise with the partner developer and the notary as part of the operation.
• Reply to your information requests and provide support.
• Improve the service (aggregated statistics, anonymised audience measurement).
• Comply with our legal obligations (accounting, tax, anti-money-laundering).

Depending on the purpose, processing relies on:

• Performance of the contract binding us (group registration, file follow-up).
• Your consent (newsletters, non-essential cookies).
• Compliance with legal obligations (accounting archiving, anti-money-laundering).
• Groupi's legitimate interest (site security, fraud prevention, service improvement).

Your data is only shared with:

• The internal Groupi teams entitled to follow your file.
• The partner developer for the operation, only after your pre-reservation.
• The notary appointed to sign the deed.
• Our technical sub-processors (hosting, transactional emails, audience analytics tools), selected for their security level and bound by contract.
• The competent authorities in case of legal obligation.

We never sell or rent any data to third parties for commercial purposes.

• Active member account: throughout the relationship, then three years after the last activity.
• Contract documents (contracts, deeds): ten years from the signing, in line with Moroccan legal obligations.
• Accounting data: ten years.
• Cookies and browsing logs: thirteen months maximum.

In line with law 09-08, you have the following rights over your personal data:

• Right of access and copy.
• Right to rectification of inaccurate data.
• Right to object, on legitimate grounds, to ongoing processing.
• Right to delete data, within the limits of legal obligations.
• Right to withdraw your consent at any time for processing that depends on it.

To exercise these rights, write to dpo@groupi.ma→ with proof of identity. We reply within thirty days at most.

If you disagree with our reply, you can lodge a complaint with the CNDP — National Commission for the Control of the Protection of Personal Data, www.cndp.ma→.

We implement technical and organisational measures aligned with the state of the art: TLS encryption in transit, encryption at rest for sensitive data, access compartmentalisation, logging, regular rights review, team training.

Some technical sub-processors (hosting, emails) may operate from the European Union or the United States. These transfers are framed by standard contractual clauses and, where applicable, by prior CNDP authorisations.

The site uses cookies — small files placed on your device — for three reasons only:

• Essential cookies: they make the site work (keep your session alive, secure exchanges, remember your consent choices). They cannot be disabled.
• Functional cookies: they remember your preferences (language, display) to improve your experience, without tracking you.
• Audience-measurement cookies: they help us understand how the site is used, anonymously and at aggregate level. They are only enabled with your explicit consent.

On your first visit, a banner lets you accept, refuse or customise non-essential cookies. You can change those choices at any time from the site footer, or directly in your browser settings.

Cookies and browsing logs are kept for thirteen months at most. For any question, write to dpo@groupi.ma→.