Privacy policy

1. Controller

The controller of the personal data described in this policy is LU&NA CONSULTING SARL A.U. (brand: Lu&Na Consulting), registered in Morocco under Registre de Commerce (RC) 73171, Kenitra, ICE 003510212000066, IF 65941504, with registered office at 47 Rue Amr Ibn Ass, Résidence Ismail, Bureau N°4, Kenitra, Morocco. Contact: contact@luandnaconsulting.com.

2. What we collect

We only collect the data that a visitor sends us voluntarily by email or phone: name, company, contact details and the content of the enquiry. When a transaction advances, we also collect the counterparty documentation described on the compliance page.

The public site does not use cookies, analytics or tracking tools. The private administration area uses session cookies for authorised staff only.

3. Purpose and legal basis

We process this data to answer the enquiry, to qualify counterparties (KYB/KYC and sanctions screening) before any introduction, and to comply with our legal obligations.

The legal bases are the steps taken prior to a contract at the request of the person concerned, our legitimate interest in preventing fraud, and compliance with legal obligations.

4. Recipients

We do not sell personal data. Data is shared only with the counterparty of a transaction after qualification and a signed confidentiality agreement, with the service providers that host our systems, and with authorities when the law requires it.

5. Retention

We keep data for the duration of the relationship and for the periods required by law. Enquiries that do not progress are deleted within a reasonable period.

6. Your rights

You may request access, rectification, erasure, objection and restriction of processing by writing to contact@luandnaconsulting.com.

These rights are recognised by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data and, for residents of the European Union, by the General Data Protection Regulation (GDPR).

7. Security

We apply reasonable technical and organisational measures to protect the data we hold against unauthorised access, loss or alteration.

8. Updates

This policy may be updated. The date of the current version is 6 September 2026.