TILILA
This policy details how TILILA SCHOOL collects, uses, and protects your personal data.
Article 1
Controller: TILILA SCHOOL
Address: 241 Boulevard Al Machaar Al Haram, Issil, Marrakech
Tel: 0524 309 187 / 0664 773 808 / 0661 205 682
Email: contact@tilila-school.ma
Legal representative: Dr. Othmane Bensaoud — Founder & Director
Article 2
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | First name, last name, email, phone, message | Respond to inquiries | Legitimate interest |
| Pre-registration | Parent + child data (first name, last name, birth date, grade level) | Process admission applications | Contract performance |
| Browsing | IP, pages, duration, browser | Improve user experience | Legitimate interest |
| Cookies | Session identifiers, preferences | Proper functioning | Consent |
| Photos/videos | Student images | Institutional communication | Written parental consent |
Source
Contact form
Data
First name, last name, email, phone, message
Purpose
Respond to inquiries
Legal basis
Legitimate interest
Source
Pre-registration
Data
Parent + child data (first name, last name, birth date, grade level)
Purpose
Process admission applications
Legal basis
Contract performance
Source
Browsing
Data
IP, pages, duration, browser
Purpose
Improve user experience
Legal basis
Legitimate interest
Source
Cookies
Data
Session identifiers, preferences
Purpose
Proper functioning
Legal basis
Consent
Source
Photos/videos
Data
Student images
Purpose
Institutional communication
Legal basis
Written parental consent
Article 3
| Legal basis | Application at TILILA SCHOOL |
|---|---|
| Consent | Analytics cookies, student image use, optional institutional communication. |
| Contract performance | Processing of pre-registration requests and management of the school-family relationship. |
| Legal obligation | Retention of regulatory documents, administrative and tax obligations. |
| Legitimate interest | Site security, service improvement, response to contact requests. |
Legal basis
Consent
Application at TILILA SCHOOL
Analytics cookies, student image use, optional institutional communication.
Legal basis
Contract performance
Application at TILILA SCHOOL
Processing of pre-registration requests and management of the school-family relationship.
Legal basis
Legal obligation
Application at TILILA SCHOOL
Retention of regulatory documents, administrative and tax obligations.
Legal basis
Legitimate interest
Application at TILILA SCHOOL
Site security, service improvement, response to contact requests.
Article 4
| Recipient | Role |
|---|---|
| Vercel Inc. — USA | Browsing data and forms · Covered by standard contractual clauses (SCCs) in accordance with Law 09-08. |
| Schoology/PowerSchool | Educational platform |
| Email provider | Sending confirmations |
| Ministry of National Education | Regulatory reports |
Recipient
Vercel Inc. — USA
Role
Browsing data and forms · Covered by standard contractual clauses (SCCs) in accordance with Law 09-08.
Recipient
Schoology/PowerSchool
Role
Educational platform
Recipient
Email provider
Role
Sending confirmations
Recipient
Ministry of National Education
Role
Regulatory reports
No personal data is sold, rented, or transferred to third parties for commercial purposes.
Article 5
| Category | Duration |
|---|---|
| Contact requests | 1 year |
| Pre-registration files (rejected) | 2 years |
| Enrolled student files | Duration of schooling + 5 years |
| Cookies | 13 months maximum |
| Photos/videos | Duration of consent |
| Invoicing | 10 years |
Category
Contact requests
Duration
1 year
Category
Pre-registration files (rejected)
Duration
2 years
Category
Enrolled student files
Duration
Duration of schooling + 5 years
Category
Cookies
Duration
13 months maximum
Category
Photos/videos
Duration
Duration of consent
Category
Invoicing
Duration
10 years
Article 6
| Right | Description | Exercise |
|---|---|---|
| Access | Obtain confirmation that processing is carried out and receive a copy. | Email to contact@tilila-school.ma, response within 30 days. |
| Rectification | Correct inaccurate or incomplete data. | Email to contact@tilila-school.ma, response within 30 days. |
| Objection | Object to certain processing based on legitimate interest. | Email to contact@tilila-school.ma, response within 30 days. |
| Erasure | Request deletion of data when legally possible. | Email to contact@tilila-school.ma, response within 30 days. |
| Portability | Receive data in a structured, commonly used format. | Email to contact@tilila-school.ma, response within 30 days. |
| Withdraw consent | Withdraw consent at any time for concerned processing. | Email to contact@tilila-school.ma, response within 30 days. |
Right
Access
Description
Obtain confirmation that processing is carried out and receive a copy.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Right
Rectification
Description
Correct inaccurate or incomplete data.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Right
Objection
Description
Object to certain processing based on legitimate interest.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Right
Erasure
Description
Request deletion of data when legally possible.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Right
Portability
Description
Receive data in a structured, commonly used format.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Right
Withdraw consent
Description
Withdraw consent at any time for concerned processing.
Exercise
Email to contact@tilila-school.ma, response within 30 days.
Article 7
Article 8
| Measure | Description |
|---|---|
| HTTPS | Encryption of exchanges between browser and site. |
| Access control | Restricted access to systems and data based on authorizations. |
| Passwords + 2FA | Enhanced authentication for sensitive accounts. |
| Backups | Regular backups and restoration tests. |
| Staff training | Ongoing awareness of security and privacy best practices. |
| Data breach procedure | Management and notification to the CNDP according to applicable obligations. |
Measure
HTTPS
Description
Encryption of exchanges between browser and site.
Measure
Access control
Description
Restricted access to systems and data based on authorizations.
Measure
Passwords + 2FA
Description
Enhanced authentication for sensitive accounts.
Measure
Backups
Description
Regular backups and restoration tests.
Measure
Staff training
Description
Ongoing awareness of security and privacy best practices.
Measure
Data breach procedure
Description
Management and notification to the CNDP according to applicable obligations.
Article 9
Certain subcontractors (Schoology/PowerSchool, Vercel) may be established outside Morocco (USA, Europe). TILILA SCHOOL ensures that these transfers are governed by appropriate safeguards in accordance with Law 09-08.
Article 10
| Category | Usage | Consent | Duration |
|---|---|---|---|
| Strictly necessary | Session, security, language | Always active | Session to 12 months |
| Analytics | Google Analytics or equivalent | Consent required | 13 months |
| Functional | Preferences | Consent | 12 months |
Category
Strictly necessary
Usage
Session, security, language
Consent
Always active
Duration
Session to 12 months
Category
Analytics
Usage
Google Analytics or equivalent
Consent
Consent required
Duration
13 months
Category
Functional
Usage
Preferences
Consent
Consent
Duration
12 months
Article 11
TILILA SCHOOL has declared its processing to the CNDP. Declaration number:
Complaints: www.cndp.ma · Angle Avenue Annakhil et Allée des Princesses, Hay Riad, Rabat.
Article 12
TILILA SCHOOL reserves the right to modify this policy at any time. Significant changes will be notified by email or via a visible notice on the Site.
Last updated: 2026 — Version 1.0 · contact@tilila-school.ma · 241 Boulevard Al Machaar Al Haram, Issil, Marrakech, Morocco · Compliant with Moroccan Law 09-08 — CNDP Morocco
