Privacy policy

1. Data controller

The personal data collected on the ServOrbit website (hereinafter the « Site ») is processed by MEGALOGI, a SARL under Moroccan law whose registered office is located at 4, rue oued ziz, apt 7, Agdal, Rabat Maroc, in its capacity as data controller. The processing is carried out in accordance with law no. 09-08 relating to the protection of individuals with regard to the processing of personal data and its implementing texts.

2. Data collected

The data strictly necessary for the purposes described below is collected:

• Identification data: surname, first name, email address, telephone, and, for professionals, company name, address and ICE;
• Order and billing data: subscribed services, invoices, payment history — banking data is processed exclusively by the approved payment providers and is never retained by the Company;
• Domain name holder data: when a domain name (in particular in .ma) is ordered, the identity of its holder — who may be a third party distinct from the account holder — is collected as required by the applicable regulations: for an individual, the type and number of an identity document (CIN, passport or residence permit) and the address; for a company, the company name, the ICE and the address. This information is transmitted to the competent registry (the ANRT for .ma) for the sole purpose of registering the domain;
• Promotional email tracking data: for users who have activated the « Promotional notifications » option only (consent, disabled by default), the measurement of engagement with these emails — opens (tracking pixel) and clicks (signed redirect links), with the associated timestamp, IP address and browser. Transactional emails (orders, invoices, security) are never concerned and no third-party tracking tool is used;
• Prospecting data (capture forms): when you voluntarily sign up via a capture form — domain name availability alert, quote request (VPS, dedicated server), newsletter subscription or download of a guide — your email address, the context of the request (for example the domain searched for or the product concerned) and, if you accept it via a separate checkbox, your telephone number with a view to being contacted by WhatsApp. This registration is optional, is based on your consent and can be withdrawn at any time;
• Data submitted to AI assistance tools: when you use an assistance tool relying on artificial intelligence (domain name suggestions, presentation-page generator), the search term, the product description or the link that you voluntarily submit — transmitted without an account identifier — as well as, for the generator’s anti-abuse capping, an anonymised (hashed) technical fingerprint of the IP address;
• Technical data: connection logs and browsing data, for security and audience-statistics purposes.

3. Purposes of processing

The data is processed for:

• the creation and management of the client account;
• the processing of orders, billing and collection;
• the provision of services (registration of domain names, hosting, VPS) — including the transmission to the competent registries and bodies of the information required for the registration of a domain name;
• client assistance and support;
• compliance with the legal and regulatory obligations of the Company;
• subject to the user’s consent, the sending of commercial communications;
• subject to this same consent, the measurement of the effectiveness of these commercial communications (open and click rates) in order to improve their relevance;
• subject to your consent obtained during a voluntary registration, commercial prospecting and its personalised follow-up (sending relevant information according to your interest until a possible first order), where applicable by email and, if you have accepted it separately, by WhatsApp.

4. Recipients of the data

The data is intended for the authorised departments of the Company and, to the extent strictly necessary, for its subcontractors and technical partners (domain name registries, payment providers, infrastructure hosts). It is never sold to third parties.

When you consent to being contacted by WhatsApp, the prospecting messages pass through a WhatsApp service provider (Business Solution Provider) acting as a subcontractor, which may be located outside Morocco, for the sole purpose of routing these communications.

When you use an assistance tool relying on artificial intelligence, the content you submit (search term, product description or link) may be processed by an AI model provider acting as a subcontractor, which may be located outside Morocco, for the sole purpose of producing the requested suggestion or page — without an account identifier or IP address. Depending on the configuration of the service, this processing may also be carried out entirely on the Company’s infrastructure, without any external recipient.

5. Retention period

The data is retained for the duration of the contractual relationship, increased by the applicable legal limitation periods, in particular in accounting and tax matters. The data of inactive or deleted accounts is erased or anonymised at the end of these periods. Promotional email tracking data (opens, clicks) is retained for thirteen (13) months at most, then aggregated anonymously or deleted. The prospecting data of persons who signed up via a capture form and who do not become clients is deleted after a period of inactivity, or earlier at their request (unsubscription).

6. Security

The Company implements appropriate technical and organisational measures to protect the data against destruction, loss, alteration or unauthorised access: encryption of exchanges (TLS), access control, logging and hosting in secure data centres.

7. Cookies

The Site uses only cookies necessary for its operation (session, cart, display preferences). Audience measurement is carried out by a self-hosted solution without cookies and without individual identifiers; the Site uses no advertising tracker or third-party tracking tool subject to prior consent — this is why no consent banner is displayed. Should such trackers be introduced, a consent-collection mechanism would be put in place beforehand. The user can configure their browser to refuse all or part of the cookies; the operation of certain services may then be degraded.

8. Your rights

In accordance with law no. 09-08, you have a right of access, rectification and objection to the processing of your personal data, as well as a right of deletion under the conditions provided for by law. These rights are exercised by writing to … or via the contact page, providing proof of your identity. Consent to commercial communications and to the measurement of their engagement may be withdrawn at any time and free of charge, via the unsubscribe link present in each email or from the notification preferences of your client area; this withdrawal immediately deactivates tracking. You also have the right to refer the matter to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

9. Changes to this policy

The Company reserves the right to change this policy at any time, in particular to take account of legal and technical developments. The applicable version is the one published on the Site on the date of consultation.