Privacy Policy — Moroccan Youth Diplomats

Last updated: 3 August 2026

Moroccan Youth Diplomats (“MYD”, “we”, “us”) is a youth-led nonprofit based at 9 Bis Egypt St., Tangier, Morocco. This policy explains what personal data we handle when you use youthdiplomats.ma, contact us, or apply to one of our programs.

We keep this short and specific on purpose. If something here is unclear, write to contact@youthdiplomats.ma and we will answer it plainly.

1. What we collect

When you use the contact form

Your name, email address, subject line and message. Nothing else. It reaches the MYD inbox and the Head of Registrations & Admissions, and it is used to reply to you.

When you apply to a program

Applications run through Google Forms, not through this website. What you submit there — typically name, date of birth, contact details, school or university, motivation and language ability — is collected and stored by Google on our behalf, and reviewed by the members of the Executive Board responsible for admissions. For international delegations we may later need passport details, emergency contacts and dietary or medical information; we ask for those separately, only for delegates who have been selected, and only because conference organisers, airlines or consulates require them.

When you simply visit the site

Our hosting provider records standard server logs — IP address, timestamp, requested page, browser user-agent — for security and troubleshooting. We do not run Google Analytics, advertising pixels, or any third-party behavioural tracking on this site.

Cookies

This site sets one cookie, PHPSESSID, which is a technical session cookie required for pages to function. It carries no advertising or profiling data and expires when you close your browser. The Instagram posts embedded on our Our Work page are delivered through a third party (Behold) and may set their own cookies once that content loads; that is outside our control and governed by their policies.

2. Why we use it

To reply to you — the only use of contact form data.
To run admissions — reviewing applications, forming delegations, and communicating with applicants about outcomes.
To organise travel and participation — registering delegates with conference organisers and meeting visa, airline and venue requirements.
To keep members informed — announcements about programs you have joined or applied to.
To keep the site working and secure — server logs only.

We do not sell personal data, we do not rent it, and we do not share it with advertisers. Ever.

3. Applicants under 18

Many of our members are secondary-school students. Where an applicant is a minor under Moroccan law, we ask for a parent or guardian's written consent before they take part in any program that involves travel, and we require a guardian's contact details for the duration of that program. A parent or guardian may contact us at any time to see, correct or withdraw their child's data using the same routes set out in section 7.

4. Who else sees it

A short and complete list:

Google (Forms, Workspace) — holds application responses and our email.
Our hosting provider — operates the servers this site and our mail run on, and therefore holds server logs and stored email.
Behold — delivers the Instagram feed on Our Work. It receives no data about you from us.
Conference organisers, airlines, hotels and consulates — only for selected delegates, only the details that specific journey requires, and only after we have told the delegate.
Moroccan authorities — where we are legally obliged to respond to a valid request.

Some of these providers operate outside Morocco, which means your data may be processed abroad. We use established providers whose contractual terms commit them to protecting it.

5. How long we keep it

Contact form messages — up to 24 months, then deleted.
Unsuccessful applications — until the end of the following academic year, so applicants can reapply without starting over.
Member and delegate records — for as long as the person is active with MYD, plus three years for our own accountability and alumni records.
Travel documents — deleted once the journey is complete and any organiser deadline has passed.
Server logs — as retained by our host, typically a matter of weeks.

6. How we protect it

The site is served over HTTPS with HSTS. Access to application data is limited to the board members who need it for admissions. Our executive portal is currently offline pending a rebuild. No system is perfect, and we would rather say that than claim otherwise — if we ever become aware of a breach affecting your data, we will tell you.

7. Your rights

Under Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, you have the right to:

Access — ask what data we hold about you and receive a copy.
Rectification — have anything inaccurate or incomplete corrected.
Deletion — ask us to erase your data, unless we are required to keep it.
Objection — object to a particular use, on legitimate grounds.
Withdraw consent — at any time, without needing to give a reason.

Write to contact@youthdiplomats.ma with “Data request” in the subject line. We will respond within 30 days. If you are not satisfied with our answer, you may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

8. Changes to this policy

If we change how we handle personal data, we will update this page and move the date at the top. Material changes affecting current members or applicants will also be sent by email.

9. Contact

Moroccan Youth Diplomats
9 Bis Egypt St., Tangier, Morocco
contact@youthdiplomats.ma · +212 621-701015