1. Introduction

SH350 ("we", "our" or "the Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you access our website https://sh350.com and interact with our educational services.

This policy applies to all visitors, regardless of their geographical location. It complies with the legal requirements of Morocco (Law 09-08), the European Union (GDPR), California (CCPA), and international data protection standards.

2. Data Controller

Responsible Entity: SH350

• Location: Casablanca, Morocco
• Person in Charge: Mehdi Abourached
• Main Contact: contact@sh350.com

3. Legal Compliance

This Platform complies with the following data protection requirements:

• Morocco: Law 09-08 relating to the protection of individuals with regard to the processing of personal data
• European Union: General Data Protection Regulation (GDPR 2016/679)
• California: California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• International: Google Standards (Analytics, AdSense, Firebase)

4. Collected Data

We collect minimal data. Here is what we actually collect:

5. Legal Bases for Processing

We process your data based on the following legal grounds:

• Consent: You accept cookies and tracking via the consent banner
• Legitimate Interest: Site improvement, usage analysis, fraud prevention
• Contractual Obligation: If you create an account, to perform the service
• Legal Obligations: Compliance with data protection laws

6. Purposes of Processing

Your data is processed for the following purposes:

• Provide and improve educational services (quizzes, articles)
• Analyze platform usage (Google Analytics)
• Display relevant ads (Google AdSense)
• Manage contact form submissions
• Manage user profiles and progress
• Provide answers via the AI Q&A system
• Ensure security and fraud prevention

7. Sharing Data with Third Parties

We never sell your data. However, we share certain data with the following third-party services:

8. Data Retention Period

9. Your Rights Regarding Personal Data

How to exercise your rights: Contact us at contact@sh350.com. We will respond within 30 days.

10. Cookies and Tracking

Google Ads Opt-out: Google Ad Settings

11. Artificial Intelligence and Generated Content

12. International Data Transfers

Your data may be transferred outside your country of residence:

• Google Servers: United States and Europe
• AI Providers: United States

For EU users: Transfers are based on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).

13. Data Security

• Encryption: HTTPS/TLS for all transfers
• Firebase Security Rules: Restrictive authentication and authorization
• Passwords: Hashed, never stored in plain text
• Compliance: Google Cloud security standards

14. Children and Minors

This content is not intended for children under 13 years of age.

• SH350 contains advanced educational content designed for adults and teenagers
• We do not knowingly collect data from minors <13 years
• If data of minors is detected, it will be deleted

15. Morocco Compliance (CNDP)

Compliance Law 09-08: SH350 respects Moroccan Law relating to the protection of personal data.

• Data processing is subject to a declaration of compliance with the CNDP
• Right of access and rectification in accordance with Moroccan law
• CNDP Contact: Commission Nationale de Contrôle de la Protection des Données, Rabat, Morocco

16. Changes to this Policy

We may update this Policy at any time. Changes will take effect immediately upon posting. The "Last updated" date indicates the date of the latest modification.