Privacy Policy

The data controller for personal data collected via the meg.ma website is:

• Name: Mohamed EL GHERBI
• Trade name: meg.ma
• Status: Self-employed entrepreneur — ICE 002537210000028
• Address: 16, rue Senhaja, Casablanca, Morocco
• Contact: moh@meg.ma

This policy is established in accordance with Moroccan Law No. 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data and its implementing decree No. 2-09-165.

Via the contact form

• First and last name
• Email address
• Phone number
• Service or offer of interest
• Free-form message (optional)

Via browsing

• IP address (anonymised in Google Analytics)
• Pages visited and session duration
• Device type, browser and operating system
• Traffic source (search engine, social network, advertising campaign)
• Behavioural data (clicks, scrolls, interactions)

Via advertising interactions

• Advertising click identifiers (GCLID, FBCLID, TTCLID, LI_FAT_ID)
• Campaign parameters (UTM source, medium, campaign, content, term)

Each processing of personal data rests on an explicit legal basis, in accordance with Article 3 of Law 09-08:

Personal data collected is never sold to third parties. It may be transferred to the following data processors, strictly within the scope of the purposes described in the preceding section:

The majority of data processors listed above are established in the United States, a country that does not benefit from an adequacy decision by the CNDP. These transfers are governed by appropriate safeguards in accordance with Article 43 of Law 09-08, including:

• Standard contractual clauses approved by the European Commission (applied by equivalence)
• Certifications and compliance programmes specific to each data processor (Google DPA, Meta DPA, etc.)
• Data processing agreements (DPA) concluded with each data processor

Hosting by Brevo SAS is carried out in France (European Union), a territory offering an adequate level of protection.

Appropriate technical and organisational measures are implemented to ensure the security, integrity and confidentiality of personal data against any unauthorised access, loss, alteration, destruction or accidental disclosure.

• Encryption in transit: HTTPS / TLS 1.3 across the entire site
• Sensitive data: email and phone number transmitted in hashed format (SHA-256) to advertising platforms via server-side CAPI
• Restricted access: only Mohamed EL GHERBI has access to collected contact data
• Anti-spam protection: automated submission detection mechanisms (honeypot, timing)

In accordance with Articles 7 to 11 of Law 09-08, any person whose data is processed by meg.ma has the following rights:

• Right of access (Art. 7): obtain confirmation of processing and a copy of the personal data concerning you
• Right of rectification (Art. 8): have inaccurate or incomplete data corrected
• Right to object (Art. 11): object, on legitimate grounds, to the processing of your data
• Right to erasure: request deletion of your data, subject to legal retention obligations
• Right to portability: receive your data in a structured, machine-readable format
• Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, send your request by email to moh@meg.ma, specifying your identity and the nature of your request. A response will be provided within 30 working days.

If you believe that the processing of your personal data constitutes a violation of Law 09-08, you have the right to lodge a complaint with the Moroccan supervisory authority:

• Authority: Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP)
• Address: Avenue Annakhil, Hay Riad, Rabat 10000, Morocco
• Website: www.cndp.ma

The use of cookies on the meg.ma website is detailed in a dedicated Cookie Policy, accessible via the corresponding link at the bottom of the page.

Mohamed EL GHERBI reserves the right to amend this privacy policy at any time, in particular to comply with any legislative or regulatory changes. The date of the last update is indicated at the top of the document. It is recommended to check this page regularly.