Legal information
How ServOrbit.com collects, uses and protects your personal data.
The personal data collected on the ServOrbit.com website (hereinafter the « Site ») is processed by MEGALOGI, a SARL under Moroccan law whose registered office is located at 4, rue oued ziz, apt 7, Agdal, Rabat Maroc, in its capacity as data controller. The processing is carried out in accordance with law no. 09-08 relating to the protection of individuals with regard to the processing of personal data and its implementing texts.
The data strictly necessary for the purposes described below is collected:
.ma) is ordered, the identity of its holder — who may be a third party distinct from the account holder — is collected as required by the applicable regulations: for an individual, the type and number of an identity document (CIN, passport or residence permit) and the address; for a company, the company name, the ICE and the address. For a .ma domain name, a scanned copy (image or PDF) of that identity document is also collected, and may therefore likewise concern a third party: since 23 July 2026, the ANRT registry requires this document to be attached to each domain name in its registration system and then verified by the provider, failing which the domain is blocked and then deleted. This collection is based on the performance of the contract and on that regulatory obligation of the registry; the document is never made public nor reachable through a public address, and access to it is reserved for the authorised staff of the Company. This information is transmitted to the competent registry (the ANRT, established in Morocco, for .ma) for the sole purpose of registering the domain — for .ma, this transmission is not a transfer of data outside Morocco;The data is processed for:
The data is intended for the authorised departments of the Company and, to the extent strictly necessary, for its subcontractors and technical partners (domain name registries and registrars, payment providers, infrastructure hosts). It is never sold to third parties.
Domain name registrars. When you order a domain name, the data of its holder and contacts (name or company name, postal address, email address, telephone) is transmitted to the registrar that registers it on the Company's behalf, and by that registrar to the registry of the extension. This data is mandatory: without it, the domain name cannot be registered. This transmission serves solely to register, renew, transfer and manage the domain, and to meet the obligations that ICANN and registry rules impose on these organisations, in particular verification of the holder's email address and retention of registration data. Each of these organisations is responsible for its own processing. For a .ma domain name, the recipient is ANRT, the national registry, to which the Company transmits directly; for other extensions, it is accredited registrars established in the Netherlands, France, the United Kingdom or the United States. A domain's registrar remains the same throughout its lifetime, renewals included, unless it is transferred; its identity and privacy policy are provided to you on request.
Some of this data is hosted and processed outside Morocco. The infrastructure hosting the Site, the customer area and orders is located in Finland and Germany. The traffic filtering and delivery service (Cloudflare) is established in the United States and sees every request made to the Site. The international payment provider PayPal is also established in the United States; card payments handled by CMI remain processed in Morocco. The registries and registrars to which domain name holder data is transmitted are located in Morocco (ANRT, for “.ma”), the Netherlands, France, the United Kingdom and the United States; the registry of a generic extension may itself be established in another country — in the United States, for example, for “.com” and “.net”. These transfers are governed by articles 43 and 44 of Law No. 09-08.
When you consent to being contacted by WhatsApp, the prospecting messages pass through a WhatsApp service provider (Business Solution Provider) acting as a subcontractor, which may be located outside Morocco, for the sole purpose of routing these communications.
When you use an assistance tool relying on artificial intelligence, the content you submit (search term, product description or link) may be processed by an AI model provider acting as a subcontractor, which may be located outside Morocco, for the sole purpose of producing the requested suggestion or page — without an account identifier or IP address. Depending on the configuration of the service, this processing may also be carried out entirely on the Company’s infrastructure, without any external recipient.
When you consent to the “advertising trackers” purpose, a measurement tag provided by Google is loaded on the Site and acts as a recipient: it receives browsing data and technical identifiers, including advertising cookies, for the sole purpose of linking a contact request to an ad and measuring its effectiveness. Google may be located outside Morocco. The Company transmits no identifying data to it: no name, no email address, no telephone number, and no content of your request. Without this consent, the tag is not loaded at all — it is neither set nor run in any degraded mode; you may reverse your choice at any time through “Manage cookies”, which puts an end to this transfer.
The data is retained for the duration of the contractual relationship, increased by the applicable legal limitation periods, in particular in accounting and tax matters. The data of inactive or deleted accounts is erased or anonymised at the end of these periods. The copy of the identity document of a domain name holder is retained for the duration of the registration of the domain concerned, then for 90 days after the holder's last domain ends — the time needed to answer a registry audit covering the period when the domain was still managed — after which it is deleted. Promotional email tracking data (opens, clicks) is retained for thirteen (13) months at most, then aggregated anonymously or deleted. The prospecting data of persons who signed up via a capture form and who do not become clients is deleted after a period of inactivity, or earlier at their request (unsubscription). The IP address and browser identification recorded when an invoice is downloaded from the client area are kept for twelve (12) months, then erased; the download history (date, invoice concerned) is kept with the accounting records.
The Company implements appropriate technical and organisational measures to protect the data against destruction, loss, alteration or unauthorised access: encryption of exchanges (TLS), access control, logging and hosting in secure data centres.
In accordance with Law No. 09-08, you have a right of access, rectification and objection regarding the processing of your personal data, as well as a right of erasure under the conditions provided by law. These rights may be exercised by writing to or via the contact page, providing proof of identity. For data transmitted to register a domain name, the Company forwards your request to the registrar and registry concerned; you may also address it directly to the registrar, under its own policy (section 4). Complete erasure of this data may require deleting the domain name: ICANN and registry rules require registration data to be retained for the duration of the registration and for a limited period after it expires. Consent to commercial communications and to the measurement of their engagement may be withdrawn at any time and free of charge, via the unsubscribe link in every email or from the notification preferences in your client area; withdrawal immediately disables tracking. The date and point of collection of your consent are retained for as long as it remains active, so that it can be evidenced; they are erased as soon as it is withdrawn. You also have the right to lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
The Company reserves the right to change this policy at any time, in particular to take account of legal and technical developments. The applicable version is the one published on the Site on the date of consultation.
Browse our help center and FAQ, or reach our team — callback, WhatsApp or email. Support in French, English and Arabic.
Message us on WhatsAppopens in a new tab