Privacy Policy

MediaCaris, the publisher of the medical practice management software MyCabinet, is the data controller for personal data collected through the platform accessible at mycabinet.ma.

For any questions regarding the protection of your data, you may contact us at: privacy@mycabinet.ma

In the course of using MyCabinet, we collect:

• Identification data: name, surname, professional email address, phone number.
• Professional data: medical specialty, registration number, practice information (clinic, address).
• Usage data: login logs, actions performed on the platform, browsing data.
• Patient data (hosted on behalf of the practitioner): medical records, appointments, prescriptions, billing history. This data remains under the practitioner's responsibility; MyCabinet acts as a data processor.

Data is processed for the following purposes, in compliance with Law 09-08:

• Providing the practice management service (contract performance).
• Customer relationship management, billing and technical support (legitimate interest / contract performance).
• Platform improvement and aggregated usage analysis (legitimate interest).
• Sending service-related communications (updates, security alerts) (legitimate interest).
• Compliance with applicable legal and regulatory obligations (legal obligation).

All data is hosted in Morocco, in compliance with the requirements of the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

MyCabinet implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, disclosure or alteration, including:

• Encryption of data in transit (TLS) and at rest.
• Strict role-based access control.
• Regular backups and business continuity plan.
• Access logging and periodic security audits.

• Account data: retained for the duration of the contractual relationship, then 3 years for evidential purposes.
• Patient data: retained in accordance with applicable legal obligations for medical records in Morocco (minimum 10 years), or until contract termination with transfer or deletion at the practitioner's request.
• Browsing data: retained for a maximum of 13 months.

Under Law 09-08, you have the following rights regarding your personal data:

• Right of access: obtain a copy of data relating to you.
• Right of rectification: correct inaccurate or incomplete data.
• Right to object: object to processing based on legitimate interest.
• Right to erasure: request deletion of your data within legal limits.

To exercise these rights, send your request to privacy@mycabinet.ma. We commit to responding within 30 days.

MyCabinet uses cookies strictly necessary for the service (authentication, language preferences) and aggregated analytical cookies to improve the platform (Google Analytics / Google Tag Manager).

You may configure your browser to refuse non-essential cookies without impact on the main service features.

MyCabinet does not transfer your data outside Morocco without appropriate safeguards. Where a sub-processor is located outside Moroccan territory, a data processing agreement compliant with Law 09-08 is systematically concluded.

For any question or complaint regarding the protection of your data, you may contact our data protection contact at privacy@mycabinet.ma.

You also have the right to lodge a complaint with the CNDP: www.cndp.ma.

MyCabinet reserves the right to update this policy at any time. In the event of a material change, you will be notified by email or in-app notification at least 15 days before the changes take effect.