Confidentiality agreement
Last updated: November 3, 2026
This confidentiality agreement is entered into between SEM AGENCY, which provides the Boki.ma service, and each business holding a Boki.ma account. It sets out SEM AGENCY’s commitments to keep the data of the business and its clients or patients confidential, as well as the commitments of the business. It applies automatically as soon as the account is created.
1. Purpose of the agreement
This agreement defines the confidentiality obligations that apply to all information and data entrusted to SEM AGENCY by the business when using Boki.ma.
It supplements Boki.ma’s terms of use and privacy policy.
2. Confidential information
All data of the business and of its clients or patients is considered confidential: contact details, appointments, files, notes, documents (ID cards, prescriptions, X-rays…), receipts, cash desk data, team information and any other information stored in Boki.ma.
Health data and other sensitive data receive particular care and are stored privately, without ever being made public.
3. SEM AGENCY’s commitments
SEM AGENCY undertakes to keep all data of the business and of its clients or patients strictly confidential.
SEM AGENCY undertakes never to sell, rent or share this data with third parties, and never to use it for commercial or advertising purposes.
Data is used solely to provide the Boki.ma service, in accordance with the business’s instructions and Law No. 09-08.
4. Limited staff access
Access to data by SEM AGENCY staff is limited to authorised persons only, and only when necessary for support or maintenance, for example when the business asks for help.
All authorised persons are bound by a duty of confidentiality. Technical providers involved in hosting or sending e-mails are subject to the same obligations.
5. Security measures
SEM AGENCY applies reasonable and adapted measures to protect data: encrypted connections (HTTPS), hashed passwords, access rights per team member, sign-in history, private storage of documents and backups.
These measures are reviewed regularly to keep pace with evolving risks and technologies.
6. Incident notification
In the event of a security incident affecting a business’s data, SEM AGENCY undertakes to inform the business concerned as soon as possible, describing the nature of the incident and the measures taken to limit its consequences.
SEM AGENCY will assist the business so that it can meet its own obligations towards its clients or patients.
7. Commitments of the business
The business undertakes to protect its passwords and those of its team, not to share them and to give each member only the access rights they need.
It undertakes to promptly remove access for members who leave the team and to report any suspicious use of its account to support@boki.ma.
It remains responsible for obtaining its clients’ or patients’ consent and for respecting medical or professional secrecy.
8. End of the agreement: return and deletion
When the relationship ends, the business may request the return of its data in a usable format, followed by its deletion.
SEM AGENCY deletes or anonymises the data within a reasonable time, except for documents that must be kept by law, such as invoices.
9. Duration of obligations
The confidentiality obligations in this agreement apply throughout the use of Boki.ma and survive the end of the agreement, whatever the reason.
10. Applicable law and contact
This agreement is governed by Moroccan law. Any dispute falls under the competent courts of Casablanca, after an amicable solution has been sought.
For any question about the confidentiality of your data, write to support@boki.ma.