Privacy Policy

At Maroc Web Solutions (MWS), a brand operated by H&Y Way, we respect your privacy. This page explains, in plain language, what data we collect, why, how long we keep it, and how you stay in control.

This policy applies to all visitors of the marocwebsolutions.com website, to prospects who fill out our assessment form, and to our advertiser clients (Meta Ads, Google Ads, SEO, content).

1. Who is responsible for your data?

This policy complies with Law No. 09-08 on the protection of individuals with regard to the processing of personal data (enacted by Dahir No. 1-09-15 of 18 February 2009) and with the deliberations of the National Commission for the Control of Personal Data Protection (CNDP).

2. What data we collect

Data you provide to us directly

When you fill out our assessment form or contact us, we collect:

• Identity: first name, last name, role in the company
• Contact details: email address, phone number
• Professional information: company name, industry, website, city, indicative advertising budget
• Message content: marketing objective, description of your need, any information you choose to share

Data collected automatically

• Browsing data: IP address, browser type, operating system, pages viewed, visit duration, traffic source
• Cookies and trackers: see section 8
• Aggregated analytics data via Google Analytics, Meta Pixel and equivalent tools (conversions, events)

Data of our advertiser clients

As part of managing your advertising accounts (Meta Ads, Google Ads, TikTok Ads, LinkedIn Ads), we access your campaign data: performance, audiences, budgets, creatives, conversions. This data remains your property — we act as a processor within the meaning of Law 09-08, on your instructions.

3. Why we process your data

We use your data only for specific and legitimate purposes:

• Respond to your requests — send the free assessment, prepare a quote, schedule a call
• Deliver our services — manage your advertising campaigns, produce reports, optimize performance
• Bill and manage the client relationship — issue invoices, carry out collection, archive accounting records
• Communicate with you — send you useful information about your campaigns, answer your questions
• Commercial communication — only with your prior consent — newsletter, marketing tips, case studies
• Improve our site and services — analyze the audience, test new features
• Comply with our legal obligations — accounting, taxation, requests from the competent authorities

4. On what legal basis

Within the meaning of Law 09-08, each processing operation is based on one of the following grounds:

• Your consent — assessment form, newsletter sign-up, non-essential cookies
• Performance of a contract — ordered services, contractual obligations toward our clients
• Compliance with legal obligations — invoicing, accounting retention (Moroccan General Tax Code)
• Our legitimate interest — site security, continuous improvement, fraud prevention, while respecting your rights

5. How long we keep your data

We keep your data only for as long as necessary for the purpose of the processing:

• Prospects (assessment form with no follow-up): 3 years from the last contact
• Clients: for the entire duration of the commercial relationship, then 5 years after the end of the contract (legal archiving)
• Accounting documents and invoices: 10 years in accordance with Moroccan tax law
• Managed advertising campaign data: kept according to the retention periods of the partner platforms (Meta, Google), then anonymized or deleted upon request
• Cookies: duration specified in the consent banner (generally 13 months maximum)
• Technical logs: 12 months

After these periods, the data is deleted or irreversibly anonymized.

6. Who has access to your data

Your data is processed by the MWS team. It is never sold. We share it only with:

• Our technical processors — host (Hostinger), emailing tool, CRM, analytics tools, all contractually bound to confidentiality and equivalent security
• Advertising platforms — Meta, Google, TikTok, LinkedIn — only as part of managing your campaigns and according to their own policies
• The competent Moroccan authorities — when required by law (judicial requisitions, tax audits)
• Our professional advisors — accountant, lawyer, strictly within the limits of their assignments

7. Data transfers outside Morocco

Some of our tools (Google, Meta, Hostinger) store data on servers located outside Morocco, notably in the European Union and the United States.

In accordance with articles 43 and 44 of Law 09-08, these transfers are governed by:

• Contractual safeguards (standard contractual clauses, confidentiality commitments)
• The prior authorization of the CNDP where required
• Compliance with the providers’ international security standards

8. Cookies and trackers

Our site uses three categories of cookies:

Strictly necessary cookies

Essential to the functioning of the site (session, security, display preferences). They do not require your consent.

Audience measurement cookies

Google Analytics and equivalents help us understand how you use the site (page views, time spent, journey). Data aggregated and anonymized as far as possible.

Advertising and tracking cookies

Meta Pixel, Google Ads, LinkedIn Insight Tag — used to measure the effectiveness of our campaigns and, where applicable, offer you relevant content. Placed only after your explicit consent via the banner.

You can at any time withdraw your consent, change your preferences or block cookies in your browser settings.

9. Security of your data

We implement appropriate technical and organizational measures to protect your data:

• Secure HTTPS connection (SSL certificate) across the entire site
• Hosting on professional servers with regular backups
• Strong passwords, two-factor authentication on sensitive accounts
• Access to data limited on a need-to-know basis
• Encryption of passwords and sensitive data
• Regular security updates (WordPress, plugins, server)

Despite these precautions, no system is infallible. In the event of a data breach likely to affect your rights, we will inform you as soon as possible and notify the CNDP in accordance with the law.

10. Your rights

Law 09-08 grants you several rights over your personal data, which you can exercise at any time, free of charge:

• Right of access — know what data we hold about you and obtain a copy
• Right of rectification — have inaccurate or incomplete data corrected
• Right to object — object to processing on legitimate grounds, in particular to commercial prospecting
• Right to erasure — request the deletion of your data when retention is no longer justified
• Right to withdraw consent — at any time, without justification, without affecting the lawfulness of processing carried out before the withdrawal

How to exercise your rights

Send us an email at contact@marocwebsolutions.com with a copy of an ID document to prove your identity. We will respond within 30 days.

Recourse to the CNDP

If you consider that your rights are not being respected, you may file a complaint with the National Commission for the Control of Personal Data Protection:

11. Minors

Our services are intended for adult professionals. We do not knowingly collect data concerning minors under 18. If you believe that a minor has provided us with data, contact us: we will delete it without delay.

12. Changes to this policy

We may update this policy to reflect legal, technical or service developments. The applicable version is always the one published on this page, with the last-updated date shown at the top of the page. In the event of a significant change, we will inform you by email or via a notification on the site.

13. Contact us

A question, a doubt, a request? We respond to any message relating to the protection of your data within 30 days: