🔒 Privacy Policy

Last updated: 26 August 2026

1. Introduction

This Privacy Policy explains how AFETOP SA, operating through the AFETOP Petroleum division, processes personal data collected through petroleum.afetop.com and through related communications concerning petroleum, oil and gas, energy trading and professional intermediation activities.

AFETOP Petroleum provides an international professional platform for communication, business development, commercial intermediation and the coordination of qualified buyers, sellers, mandates, representatives, traders, financial parties and other professional stakeholders.

AFETOP is committed to protecting personal data in accordance with applicable law, including Moroccan Law No. 09-08 and, where applicable, the GDPR.

2. Data Controller

AFETOP
Email: contact@afetop.com

3. Personal Data We May Collect

Depending on your interaction with AFETOP Petroleum, we may collect:

• Full name;
• Professional email address;
• Company name;
• Job title or professional capacity;
• Telephone or messaging contact details;
• Country and professional location;
• Buyer, seller, mandate or representative status;
• Information contained in requests for petroleum products or related services;
• Information contained in commercial correspondence;
• Information concerning the professional relationship or business opportunity;
• Technical website information, including IP address and browsing information where analytics or security technologies are used.

AFETOP Petroleum does not seek to collect personal information that is unnecessary for the relevant professional or commercial purpose.

4. Petroleum Business Information

A person contacting AFETOP Petroleum may voluntarily provide information relating to:

• Petroleum products;
• Crude oil or refined products;
• Required quantities;
• Delivery terms;
• Target markets or destinations;
• Commercial requirements;
• Buyer or seller mandates;
• Company representation;
• Transactional or procedural information.

Where such information identifies or can reasonably identify an individual, it may constitute personal data and will be handled accordingly.

Business information relating solely to a legal entity may not constitute personal data under applicable law, although AFETOP may nevertheless treat confidential business information with appropriate care.

5. Purposes of Processing

Personal data may be processed to:

• Respond to petroleum and energy-related inquiries;
• Qualify professional contacts and business requests;
• Communicate with buyers, sellers, mandates and representatives;
• Coordinate professional introductions;
• Facilitate legitimate petroleum and energy transactions;
• Manage commercial correspondence;
• Conduct appropriate professional and compliance-related verification;
• Protect AFETOP and its counterparties against fraud, impersonation and unauthorized use;
• Maintain business records;
• Improve website security and performance;
• Comply with applicable legal and regulatory requirements.

6. Transactional Confidentiality

AFETOP Petroleum may receive confidential commercial information in connection with potential transactions.

Personal data contained in such information will not be used for unrelated purposes.

AFETOP may disclose information to a relevant professional counterparty only where such disclosure is necessary for the requested business process, authorized by the relevant party, required by law, or otherwise permitted under applicable data protection legislation.

Nothing in this Privacy Policy creates an obligation for AFETOP to disclose confidential seller, buyer, mandate or transaction information.

7. Legal Basis

Depending on the circumstances, processing may be based on:

• Consent;
• Steps taken at the request of the individual before entering into a contractual relationship;
• Contractual necessity;
• AFETOP's legitimate interests in managing professional relationships and facilitating legitimate business activities;
• Legal or regulatory obligations;
• Another lawful basis available under applicable law.

8. Third-Party Service Providers

AFETOP Petroleum may use third-party providers for hosting, email, website security, analytics, communications and other technical or professional services.

Where personal data is processed by such providers, AFETOP seeks to ensure that appropriate confidentiality, security and data-processing requirements apply.

AFETOP does not sell personal data.

9. International Processing

Petroleum transactions are inherently international. AFETOP may therefore communicate with professional counterparties and use service providers located in different countries.

Where personal data is transferred, hosted or accessed outside Morocco, AFETOP will seek to comply with applicable Moroccan requirements concerning international data transfers and any other applicable data protection legislation.

10. Cookies and Website Analytics

The website may use strictly necessary cookies and, where enabled, analytics or audience-measurement technologies.

Such technologies may collect technical information such as IP address, browser type, device information, pages visited and access times.

Users may control cookies through their browser or available website controls.

11. Data Retention

AFETOP Petroleum retains personal data only for as long as reasonably necessary for the relevant professional, commercial, legal or administrative purpose.

The appropriate retention period may depend on the nature of the business relationship, transaction, correspondence, legal obligations and legitimate interests involved.

Information that is no longer required will be deleted, anonymized or securely disposed of where appropriate, subject to applicable retention obligations.

12. Security

AFETOP applies reasonable technical and organizational safeguards designed to protect personal data and confidential business information from unauthorized access, loss, alteration or disclosure.

13. Your Rights

Subject to applicable law, you may have rights to:

• Access personal data concerning you;
• Request correction of inaccurate information;
• Request deletion where legally applicable;
• Object to certain processing;
• Request restriction where applicable;
• Withdraw consent where consent is the legal basis;
• Exercise other rights provided by applicable law.

Under Moroccan Law No. 09-08, the principal individual rights include rights of access, rectification and opposition, subject to the conditions provided by law.

Where the GDPR applies, additional rights may apply.

14. Exercising Your Rights

Privacy requests may be sent to:

contact@afetop.com

Please identify the nature of your request and provide sufficient information for AFETOP to process it securely.

AFETOP may request reasonable identity verification before disclosing personal data.

15. Complaints

You may contact AFETOP concerning any concern about the processing of your personal data.

You may also contact the competent supervisory authority, including the CNDP in Morocco, where applicable.

16. Changes

AFETOP may update this Privacy Policy when its services, technology, processing activities or legal obligations change.

The latest version will always be identified by the Last updated date.

17. Contact

AFETOP SA — AFETOP Petroleum
Email: contact@afetop.com

Website: petroleum.afetop.com