Legal

Privacy Policy

Last updated: 13 August 2026

What we collect of your data, and why, who we share it with, and when we delete it. with no filler, and no terms that hide the meaning.

01Who processes your data

The controller of your personal data is Souhail Agency, Morocco.

This policy explains what we collect and why, who we share it with, how long we keep it, and what your rights are. It covers our site and all of our services.

The processing of personal data in Morocco is governed by Law 09-08, and overseen by the National Commission for the Control of the Protection of Personal Data (CNDP).

02What we collect

What you give us yourself

account details: Your name, Your email, your phone.
Billing address: Street, City, Postcode, Country.
what you write in our forms: a description of your project, your approximate budget, and any details you share.
your password: we store them hashed, not as text, and we can neither read it nor recover it.

What is collected automatically

server logs: Address IP, browser type, pages visited, time of visit. kept for security and for diagnosing faults.
hosting usage data: resource consumption and data transfer, to keep track of your plan's limits.

What we do not collect

Your bank card details never pass through our servers. You enter them inside PayPal's window, and all that reaches us is that the payment went through, its amount and its reference.

03Why we collect it, and on what basis

Purpose	Data	Basis
carrying out your order and setting up your service	Account, Billing, Domain	performance of a contract between us
issuing invoices and keeping them	Name, Address, Amounts	a legal obligation (accounting and tax)
answering your enquiries	Email, Phone, the text of the message	legitimate interest
server security and detecting attacks	the logs, IP	legitimate interest
the newsletter	Email	your consent — which you may withdraw whenever you wish
Registering the domain	Name, Address, Email, Phone	an obligation imposed by ICANN

We do not sell your data, we do not rent it, we do not trade in it. and we do not use it for targeted advertising.

04Who we share it with

We share the least that is needed, and only with those without whom the service cannot run:

Party	what reaches it	Why
PayPal	Name, Email, Amount	collecting the payment
the domain registrar Spaceship	the domain owner's details in full	registering the domain in your name
the infrastructure provider Spaceship	server data and logs	running the servers
the mail provider Hostinger	the address and the content of the messages	sending alerts and invoices

We also disclose it if the law requires us to or a competent judicial order does.

05Domains and the WHOIS

This clause deserves a paragraph of its own, because it takes many people by surprise.

Registering any domain requires you to provide a correct name, address, email and telephone, and this is the rule of ICANN not ours. These details are sent to the registrar, and behind it to the extension's registry.

Most often, today, these details are not published publicly, but they stay held by the registrar and are disclosed on a legal request.
Some extensions — country extensions among them — do publish some details publicly, and we tell you so before the purchase.
Service Hiding the owner's details is available for some extensions. Ask us.
Wrong details may lead to the domain being suspended.

06How long we keep it

Data	Term	Why
the account and its details	as long as your account exists, then 30 days	so that you can come back without losing anything
invoices and accounting records	10 years	a period the law imposes
the backups	14 days	recovery after a failure
server logs	90 days	security and fault diagnosis
contact messages	Two years	following your request and its context

Once the period is over it is deleted for good, or made anonymous.

07Your rights

Your data is yours, and over it you have the right:

Access: to ask for a copy of what we hold about you.
Rectification: to correct whatever is wrong or incomplete.
Erasure: to ask for it to be erased, so far as no legal obligation, such as keeping invoices, prevents it.
Objection: to object to processing that rests on a legitimate interest.
Withdrawing consent: for everything built on your consent — the newsletter, for one.
Portability: to receive your data in a form a machine can read.

Write to us at hello@souhailagency.com and we reply within 30 days at most. We may ask for something that proves who you are, to protect your account from someone else asking for your data.

And if our answer does not satisfy you, you may complain to CNDP.

08How we protect it

The connection to our site and our panels encrypted (HTTPS/TLS).
Passwords segmented with a modern algorithm, so neither we nor anyone who reaches the database can see them.
Access to client data is limited to whoever needs it for their work.
Regular, encrypted backups.

Even so, No system is a hundred per cent secure. and if a breach touching your data occurs, we tell you, and we tell CNDP as quickly as we can, and we explain what happened and what we are doing about it.

09Cookies

Our site uses as few of them as it can:

Essential: to keep your session alive while you book, and to hold your choices between the steps. The site does not work without them, and they need no consent.
Analytics: We use no analytics or tracking tool — no Google Analytics, no advertising pixel, nothing of the kind.

You can delete them, or block them from your browser's settings, bearing in mind that blocking the necessary ones stops a booking from completing.

10Transferring data outside Morocco

Some of our providers — PayPal and the server provider among them — process data outside Morocco.

We choose those who offer suitable protection guarantees, and we follow the transfer procedures required by Law 09-08, and the approval of CNDP where these are required.

11Children

Our services are aimed at companies and professionals, and we do not deal with anyone under 18 year. We do not knowingly collect children's data. and if data of that kind reaches us, we delete it as soon as we know.

12Changes to this policy

We may update it whenever our services or the law change. The version in force is the one published here, with its date at the top.

And when the change is material — a new purpose for the processing, or sharing with a new party — we write to your email before it takes effect.

13How to reach us

For any question about your data, or to exercise any of your rights:

A question about a clause?

Write to us and we will explain it plainly. And if a clause matters to your project, we write an annex for it into the contract.