Legal information
How ServOrbit.com collects, uses and protects your personal data.
The personal data collected on the ServOrbit.com website (hereinafter the « Site ») is processed by MEGALOGI, a SARL under Moroccan law whose registered office is located at N° 4, rue Oued Ziz, 3e étage, appt n° 7, Agdal, Rabat, Maroc, in its capacity as data controller. The processing is carried out in accordance with law no. 09-08 relating to the protection of individuals with regard to the processing of personal data and its implementing texts.
The data strictly necessary for the purposes described below is collected:
.ma) is ordered, the identity of its holder — who may be a third party distinct from the account holder — is collected as required by the applicable regulations: for an individual, the type and number of an identity document (CIN, passport or residence permit) and the address; for a company, the company name, the ICE and the address. For a .ma domain name, a scanned copy (image or PDF) of that identity document is also collected, and may therefore likewise concern a third party: since 23 July 2026, the ANRT registry requires this document to be attached to each domain name in its registration system and then verified by the provider, failing which the domain is blocked and then deleted. This collection is based on the performance of the contract and on that regulatory obligation of the registry; the document is never made public nor reachable through a public address, and access to it is reserved for the authorised staff of the Company. This information is transmitted to the competent registry (the ANRT, established in Morocco, for .ma) for the sole purpose of registering the domain — for .ma, this transmission is not a transfer of data outside Morocco;The data is processed for:
The data is intended for the authorised departments of the Company and, to the extent strictly necessary, for its subcontractors and technical partners (domain name registries and registrars, payment providers, infrastructure hosts). It is never sold to third parties.
Domain name registrars. When you order a domain name, the data of its holder and contacts (name or company name, postal address, email address, telephone) is transmitted to the registrar that registers it on the Company's behalf, and by that registrar to the registry of the extension. This data is mandatory: without it, the domain name cannot be registered. This transmission serves solely to register, renew, transfer and manage the domain, and to meet the obligations that ICANN and registry rules impose on these organisations, in particular verification of the holder's email address and retention of registration data. Each of these organisations is responsible for its own processing. For a .ma domain name, the recipient is ANRT, the national registry, to which the Company transmits directly; for other extensions, it is accredited registrars established in the Netherlands, France, the United Kingdom and the United States. A domain's registrar remains the same throughout its lifetime, renewals included, unless it is transferred; its identity and privacy policy are provided to you on request.
Some of this data is hosted and processed outside Morocco. The infrastructure hosting the Site, the customer area and orders is located in Finland and Germany. The traffic filtering and delivery service (Cloudflare) is established in the United States and sees every request made to the Site. The international payment provider PayPal is also established in the United States; card payments handled by CMI remain processed in Morocco. The registries and registrars to which domain name holder data is transmitted are located in Morocco (ANRT, for “.ma”), the Netherlands, France, the United Kingdom and the United States; the registry of a generic extension may itself be established in another country — in the United States, for example, for “.com” and “.net”. These transfers are governed by articles 43 and 44 of Law No. 09-08.
When you consent to being contacted by WhatsApp, the prospecting messages pass through a WhatsApp service provider (Business Solution Provider) acting as a subcontractor, which may be located outside Morocco, for the sole purpose of routing these communications.
When you use an assistance tool relying on artificial intelligence, the content you submit (search term, product description or link) may be processed by an AI model provider acting as a subcontractor, which may be located outside Morocco, for the sole purpose of producing the requested suggestion or page — without an account identifier or IP address. Depending on the configuration of the service, this processing may also be carried out entirely on the Company’s infrastructure, without any external recipient.
Google Analytics, provided by Google LLC, is loaded on the Site as soon as you arrive, without prior consent, and acts as a recipient: it receives browsing data and technical identifiers, including its measurement cookies, in order to produce our audience statistics. The advertising signals of that same tool remain disabled until you accept advertising trackers. When you consent to the “advertising trackers” purpose, the Google Ads advertising account provided by Google is activated in turn and acts as a recipient: it receives browsing data and technical identifiers, including advertising cookies, for the sole purposes of linking a contact request or a purchase to an ad, measuring its effectiveness and showing you our ads (remarketing). Google may be located outside Morocco. The Company transmits no identifying data to it: no name, no email address, no telephone number, and no content of your request. Without this consent, Google Ads is not activated; you may reverse your choice at any time through “Manage cookies”, which ends this advertising transfer without stopping Google Analytics.
When you use « Continue with Google », Google LLC, which may be located outside Morocco, acts as an identity provider: it knows that you are signing in to the Site, under its own privacy rules. We do not send it any data from your account. You can withdraw the access granted to the Site at any time from your Google account settings; you will then sign in with your email address and a password, which you can set through « Forgot password ».
The data is retained for the duration of the contractual relationship, increased by the applicable legal limitation periods, in particular in accounting and tax matters. The data of inactive or deleted accounts is erased or anonymised at the end of these periods. The copy of the identity document of a domain name holder is retained for as long as the holder has at least one .ma domain name, then for 90 days after the last of them actually ends or, if later, after the holder's most recent document was submitted — the time needed to answer a registry audit covering the period when the domain was still managed — after which it is deleted. A document that is being verified is never deleted. Promotional email tracking data (opens, clicks) is retained for 13 months at most, then aggregated anonymously or deleted. The prospecting data of persons who signed up via a capture form and who do not become clients is deleted after a period of inactivity, or earlier at their request (unsubscription). The IP address and browser identification recorded when an invoice is downloaded from the client area are kept for 12 months, then erased; the download history (date, invoice concerned) is kept with the accounting records.
The Company implements appropriate technical and organisational measures to protect the data against destruction, loss, alteration or unauthorised access: encryption of exchanges (TLS), access control, logging and hosting in secure data centres.
In accordance with Law No. 09-08, you have a right of access, rectification and objection regarding the processing of your personal data, as well as a right of erasure under the conditions provided by law. These rights may be exercised by writing to or via the contact page, providing proof of identity. For data transmitted to register a domain name, the Company forwards your request to the registrar and registry concerned; you may also address it directly to the registrar, under its own policy (section 4). Complete erasure of this data may require deleting the domain name: ICANN and registry rules require registration data to be retained for the duration of the registration and for a limited period after it expires. Consent to commercial communications and to the measurement of their engagement may be withdrawn at any time and free of charge, via the unsubscribe link in every email or from the notification preferences in your client area; withdrawal immediately disables tracking. The date and point of collection of your consent are retained for as long as it remains active, so that it can be evidenced; they are erased as soon as it is withdrawn. You also have the right to lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
The Company reserves the right to change this policy at any time, in particular to take account of legal and technical developments. The applicable version is the one published on the Site on the date of consultation.
Browse our help center and FAQ, or reach our team — callback, WhatsApp or email.
Message us on WhatsAppopens in a new tab