Who we are
This website is operated under the business name Atlas Connect Trade Services (ACTS), based in Marrakech, Morocco. ACTS provides import-support services for business, commercial, entrepreneurial, and professional projects, including sourcing support, supplier research, quotation coordination, shipment support, document coordination, and related import-operation assistance.
Privacy/CNDP contact: privacy@atlasconnecttrade.com. General contact: contact@atlasconnecttrade.com.
What this notice covers
This notice explains how ACTS collects, uses, stores, shares, protects, and otherwise processes personal data when you visit our website, use our forms, contact us, request information or a quotation, become a prospect or client, provide information or documents for a service, or communicate with ACTS as a supplier, service provider, or business contact.
Personal data we may collect
Depending on the request or service, ACTS may collect contact and business-identification information; request and case information; product, supplier, sourcing, budget, shipment, customs, compliance, certification, inspection and logistics information; quotations, approvals, Service Confirmations, acceptance evidence, invoices, payment-status records and important correspondence; documents or attachments needed for the agreed service; and technical website information generated by the website or hosting environment.
ACTS does not seek identity documents, bank information, signatures, tax identifiers, or similarly sensitive documents merely 'just in case'. Such information should be collected only where there is a defined and legitimate need for the service, legal compliance, payment verification, dispute handling, or another justified purpose.
Why we use personal data
ACTS may use personal data to receive, review, classify and respond to inquiries; assess service fit; prepare quotations and Service Confirmations; perform agreed sourcing, shipment, document, finance and operational support; coordinate with relevant trade actors; maintain case records, approvals, audit trails, invoices and compliance evidence; protect systems and accounts; handle complaints, disputes and privacy-rights requests; comply with legal obligations; and improve internal processes and service quality using appropriately controlled operational information.
ACTS does not use client documents for unrelated marketing, unrelated projects, demonstrations, or training datasets without a separate lawful basis and appropriate disclosure or consent where required.
Digital tools, automation, and AI assistance
ACTS uses digital and automated tools to help organize and process business cases. Some workflows use external artificial-intelligence services for tasks such as classification, summarization, analysis, comparison, drafting, and operational preparation.
ACTS applies a data-minimization rule: only information reasonably necessary for the assigned task should be placed into AI/model context. Where practical, ACTS uses case references and task-specific summaries instead of full client files. Passwords, API keys, authentication secrets, payment-card data, and other authentication credentials must not be placed into AI/model context. Identity documents, bank records, signatures, and similarly sensitive files should not be routed to AI services merely because they exist in the case file; there must be a defined task-specific need.
AI may assist with analysis, organization, calculation, comparison, recommendations, and drafts, but ACTS retains human control over consequential external actions. AI does not independently authorize payments, accept commercial offers, make legal commitments, or send external communications without the applicable human approval.
Who may receive personal data
Personal data may be accessed or received only where reasonably necessary for the relevant purpose. Recipient categories may include authorized ACTS personnel and ACTS-controlled operational systems; website hosting, email, cloud-storage, document, workflow, communications, security, and AI service providers; suppliers and manufacturers; freight forwarders, carriers, customs brokers or declarants, inspection or quality-control providers, laboratories, certification bodies, insurers, warehouses, local transporters, banks or payment providers, accountants, and other relevant trade-service actors; and legal, regulatory, judicial, customs, tax, or other competent authorities where disclosure is required or legally justified.
ACTS follows a need-to-know sharing rule. The entire client file is not automatically forwarded to an outside actor. ACTS should share only the fields, documents, and information reasonably necessary for that actor's assigned task. ACTS does not sell personal data.
International processing and transfers
Some service providers used by ACTS for hosting, email, communication, storage, workflow management, and AI processing may process or store personal data outside Morocco.
ACTS manages applicable international processing and transfer requirements under Moroccan Law No. 09-08 and applicable CNDP procedures. A specific CNDP receipt, declaration, authorization, or transfer reference will be published only after that exact reference has been verified against official evidence and is appropriate to disclose publicly.
Data minimization
ACTS seeks to collect, use, store, and share only the information reasonably needed for the particular service and stage of the case. If an outside actor requests information that appears excessive or unrelated to its role, ACTS should review the request rather than automatically disclose the information. Where practical, unnecessary identifiers and unrelated attachments should be removed before a specialist, provider, or outside actor receives the information.
Data retention
ACTS applies retention periods according to the type and status of the record. Test, spam, and clearly rejected inquiries are normally deleted or anonymized within 30 days. Prospect inquiry records are normally retained for up to 24 months after the last useful contact unless a shorter period is appropriate for the record. Active client information is retained while reasonably required for the service. Closed client operational and contractual records are retained according to applicable legal and business-record obligations.
Temporary or highly sensitive documents, such as identity documents, bank details, and signatures, should be removed when their specific operational or legal purpose ends unless a legal, accounting, dispute, or other justified retention requirement applies. A deletion request does not override a legal retention duty, accounting requirement, or active-dispute preservation need. Backup copies expire through the normal backup lifecycle rather than being kept as a permanent hidden archive.
Cookies and similar technologies
The website may use essential cookies and limited analytics or technical tools where enabled. Where applicable, consent will be requested before non-essential cookies are placed.
Data security
ACTS uses reasonable administrative and technical measures designed to protect personal data, including role-based access, account controls, strong authentication where available, limited sharing, protected storage, and audit trails where practical. No online system can be guaranteed completely secure.
Your rights
Subject to applicable law, you may request access to personal data ACTS holds about you; correction of inaccurate or incomplete information; objection to certain processing where legally applicable; clarification about how your information is used; deletion, blocking, or restriction where legally applicable; and withdrawal of consent where processing is based on consent.
ACTS may verify the requester's identity proportionately before releasing or changing personal information. If a request cannot be fully satisfied because of a legal retention duty, accounting requirement, dispute, or another lawful reason, ACTS will explain the reason where appropriate. To exercise a privacy right, contact privacy@atlasconnecttrade.com and state that your request concerns personal data or privacy.
CNDP information
ACTS processes personal data under the Moroccan data-protection framework, including Law No. 09-08 and applicable CNDP procedures.
ACTS submitted by post to the CNDP, on May 21, 2026, an initial dossier concerning its personal-data processing and transfers to foreign service providers. On October 7, 2026, the CNDP sent ACTS scanned decisions concerning that dossier. ACTS is preparing a corrected resubmission in accordance with the decisions communicated. CNDP receipt, declaration, authorization, or transfer reference numbers will be published only after verification against official evidence.
Third-party links and independent services
The ACTS website or communications may link to third-party websites or platforms. Their own privacy practices are governed by their applicable terms and privacy notices. When ACTS coordinates an independent supplier, freight provider, customs professional, insurer, certification body, or other trade actor, that actor may also have its own legal responsibilities concerning information it receives.
Changes to this notice
ACTS may update this Privacy Notice when its services, systems, providers, legal requirements, or processing practices change. Material changes will be versioned and dated. Previous material versions will be preserved in ACTS records so ACTS can reconstruct which notice was in force at a particular time.
Contact
Privacy / CNDP: privacy@atlasconnecttrade.com
General contact: contact@atlasconnecttrade.com
Atlas Connect Trade Services — Marrakech, Morocco