Privacy Policy · Ecom Polygon

Ecom Polygon is operated by YERISEL SARL AU, a company incorporated under the laws of the Kingdom of Morocco.

This Privacy Policy is established in accordance with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data. In this Privacy Policy, "Ecom Polygon," "we," "our," and "us" refer to YERISEL SARL AU. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services (collectively, the "Services").

DATA CONTROLLER

The data controller is YERISEL SARL AU.

PURPOSE OF DATA COLLECTION

We collect personal data for communication with you, for service improvement, and for user experience optimization, as well as for the certification, account, legal, and operational purposes described in this Privacy Policy.

1. INFORMATION WE COLLECT

1.1 Information You Provide When you apply for certification or create an account, we may collect: • Full name and contact information (email address, phone number) • Business name and website URL • Business details (industry, revenue range, product count, platform used) • Country of residence or business operation • Responses to certification assessment questions • Store and product information submitted for evaluation • Payment information (processed by third-party payment processors; we do not store card details) • Any other information you voluntarily provide

1.2 Information Collected Automatically When you access our Services, we may automatically collect: • IP address • Browser type and version • Device type and operating system • Pages visited and time spent • Referring website • Cookies and similar tracking technologies

1.3 Cookies We use cookies and similar technologies to operate our platform, remember your preferences, and analyze usage. You can manage cookie preferences through your browser settings. Essential cookies are required for the platform to function properly.

2. HOW WE USE YOUR INFORMATION

We use the information we collect to: • Process and evaluate certification applications • Provide certification assessments and issue certificates • Manage your account and provide customer support • Display certified brands on our public directory (with approval) • Send notifications about your certification status • Send service-related communications (assessment results, certificate issuance, renewal reminders) • Improve and develop our Services • Comply with legal obligations • Prevent fraud and ensure security

3. LEGAL BASES FOR PROCESSING

We process your personal information where necessary to: • Perform our contract with you and provide our certification Services • Pursue our legitimate interests in operating, securing, and improving the Services, where permitted by applicable law • Rely on your consent, where required by applicable law • Comply with legal obligations

4. INFORMATION SHARING

We do not sell your personal information. We may share your information with:

4.1 Service Providers Third-party service providers who help us operate our Services, including: • Payment processors (Stripe) • Email service providers (AWS SES) • Hosting providers (Vercel) • Analytics tools

4.2 Public Directory If your organization achieves certification and is approved for the Certified Brands directory, we may publicly display: • Organization name • Certification stages achieved • Certification scores • Certificate identifiers • Date of certification

4.3 Legal Requirements We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of YERISEL SARL AU, our users, or others.

5. DATA SECURITY

We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data. However, no method of transmission over the Internet or electronic storage is completely secure.

6. DATA RETENTION

We retain your information for as long as your account is active or as needed to provide our Services. We may retain certain information after account termination for legal compliance, dispute resolution, or enforcement of our agreements. Assessment data and certification records are retained for a minimum of three years for audit and verification purposes.

7. YOUR RIGHTS

In accordance with Law 09-08, you have the right to access, rectify, and request deletion of your personal data. You may also have further rights under applicable law, which can include: • Access: Request a copy of the information we hold about you • Correction: Request correction of inaccurate information • Deletion: Request deletion of your information, subject to our retention requirements • Portability: Request your data in a portable format, where applicable • Objection or restriction: Object to or ask us to restrict certain processing, where applicable • Withdrawal of consent: Where processing is based on consent

Requests may be made via email at contact@ecompolygon.com. We will respond within a reasonable time in line with applicable law.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in Morocco and in other countries where we or our service providers operate. By using our Services, you acknowledge that your information may be processed outside your country of residence. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

9. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated policy will be posted on our website with a new "Last Updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

11. REGIONAL VARIATIONS

Privacy and data protection laws differ by country and region. Depending on where you live, you may have additional rights or remedies under local law. Nothing in this Privacy Policy is intended to limit those rights where they apply. If you have questions about how this Policy applies to you, contact us using the details below.

12. CONTACT

For any questions about this Privacy Policy or to exercise your rights:

Company: YERISEL SARL AU

Email: contact@ecompolygon.com