Privacy policy.
Webotic complies with Moroccan law 09-08 on the protection of personal data, and with the GDPR (EU 2016/679) for European visitors. This page describes what we collect, why, and for how long.
Last updated
Data controller
- Controller
- Webotic SARL AU — Marouane Mohachtou
- Address
- 332 Bd Brahim Roudani, 5th floor, Apt 21, Rayhane Residence, Maarif, Casablanca
- contact@webotic.ma
- Phone
- +212 664 334 542
Data collected
Webotic collects two categories of data: data you voluntarily provide, and data collected automatically as you browse.
- Contact form: name, email, company, approximate budget, message. Submitted via /api/send-contact.php, delivered to contact@webotic.ma.
- Measurement cookies (Google Tag Manager + GA4): page views, traffic source, session duration, device type. Enabled only after your explicit consent via the cookie banner.
- Advertising cookies (Meta Pixel, TikTok Pixel, Google Ads): fired inside our GTM container with Consent Mode v2. Inactive until you opt in.
- Server logs: IP address, user agent, timestamp, URL requested. Retained 30 days for security and debugging.
Purposes of processing
- Respond to your contact requests and establish a commercial relationship (legal basis: pre-contractual execution).
- Measure site audience to improve content and structure (legal basis: legitimate interest, conditioned to consent for non-strictly-necessary cookies).
- Personalise the advertising you see on Meta, Google and TikTok (legal basis: explicit consent via the banner).
- Site security, abuse prevention, technical logs (legal basis: legitimate interest).
Retention periods
- Contact form
- 3 years from last interaction (standard for a Moroccan B2B prospect).
- GA4 cookies
- 14 months (default configuration)
- Meta / TikTok cookies
- Up to 13 months (platform default)
- Server logs
- 30 days
- Active-client data
- Duration of contract + 5 years (Moroccan accounting obligations)
Your CNDP 09-08 & GDPR rights
Under Moroccan law 09-08 and the GDPR, you have at all times the following rights over your personal data:
- Right of access: obtain confirmation that data concerning you is being processed, and receive a copy.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to object: refuse a processing based on legitimate interest or commercial prospecting.
- Right to erasure ("right to be forgotten"): request deletion within the limits of legal retention obligations.
- Right to portability: receive your data in a structured, commonly used format.
- Right to withdraw consent at any time via the cookie banner (bottom-right icon) or by emailing contact@webotic.ma.
Exercising your rights
To exercise any of these rights, write to contact@webotic.ma stating the subject of your request and attaching proof of identity. Webotic answers within 30 days maximum. If our answer doesn't satisfy you, you can lodge a complaint with the CNDP (Moroccan Data Protection Authority) — https://www.cndp.ma.
Cookies & tracking technologies
Our site uses a Google Tag Manager container (GTM-T37RJ6GX) which, after your consent, loads the following pixels:
- Google Analytics 4
- Audience measurement (with IP truncation).
- Meta Pixel + CAPI
- Server-side conversion tracking — limits exposure of your data to third-party browsers.
- TikTok Pixel
- Conversion tracking for TikTok Ads campaigns.
- Google Ads Tag
- Conversion tracking + remarketing audience.
Transfers outside Morocco
Some of our technical subprocessors (Google, Meta, TikTok, GitHub, Brevo) are based in the US or the EU. Transfers are governed by the European Commission's Standard Contractual Clauses (SCC). No data is transferred to a country without adequate protection.
Changes to this policy
Webotic may update this policy to reflect a legal, technical or organisational change. The last-update date is shown at the top of the page. Substantial changes are flagged via the site banner or by email to active clients.