Privacy Policy

Who is responsible for your data

D/A Creative, a communication agency based in Rabat and Marrakech, Morocco, ICE (company identifier) 003173615000061, represented by its co-owners Abdesalam Aouad and Aymane Kochaina.

For any question about your data: contact@dacreative.studio · +212 6 58 04 33 59.

The data we collect

When	Which data	What for	How long
You book a call, ask for a call back or write to us	Name, email, phone, company, services you are interested in, message, chosen time slot and time zone	To reply, prepare the conversation and a quote	3 years after our last exchange
We issue a quote or an invoice	Identity, contact details, services, amounts, payments	To quote, invoice and keep our accounts	10 years, the legal retention period for accounting records
You use the client portal	Name, email, password (stored in encrypted form), project content, files and comments	To follow and approve your project	While we work together, then 3 years
You submit a form	IP address, as a fingerprint	To block automated submissions	One hour
You subscribe to the newsletter	Email address, date of subscription and of confirmation	To send you our news and advice	Until you unsubscribe (link in every email)
You accept audience measurement	Pages viewed, where the visit came from, device and browser type, approximate country and city, with a random identifier (not your name, nor your IP address, which Google Analytics does not keep); with Microsoft Clarity, your clicks, scrolling and pointer movements on the pages (what you type in a form is masked)	To learn which pages are useful and improve the site	14 months (Google Analytics); 30 days for replayed visits and 13 months for heatmaps (Clarity)

Our hosting provider also keeps technical logs (IP address, date, page requested) needed to run and secure the server.

We collect no sensitive data and never ask for a means of payment on this site.

Cookies and storage in your browser

This site sets no advertising cookies.

Audience measurement. On your first visit, a banner asks whether you accept audience measurement with Google Analytics and Microsoft Clarity; if you decline, nothing is measured. Your choice is kept for a year and you can change it at any time with the “Cookie settings” link at the bottom of every page, or here: change my choice. If you withdraw your consent, the Google Analytics and Microsoft Clarity cookies set by this site are deleted. Every cookie, with its lifetime, is described in our cookie policy.

Four pieces of information are saved in your browser, and stay there:

• the theme you chose, light or dark;
• the language you chose;
• your choice about audience measurement;
• the fact that the opening animation has been seen, for the length of the visit.

If you sign in to the client portal, sign-in cookies are set: they are needed to keep you signed in and disappear when you sign out or when they expire.

The emails in which we send you a quote or an invoice contain an invisible image: it tells us that the message was displayed, and when. Nothing else is recorded (no IP address, no device), and blocking images in your mailbox is enough to prevent it.

Outside services

Fonts and images are served from our own site. The map on the contact page is an image drawn from © OpenStreetMap data: it sends nothing to a mapping service. Links to Google Maps or to social networks only take you there if you click; those services then apply their own policy.

The site loads Google Tag Manager, a service of Google Ireland Ltd and Google LLC that decides which measurement tools may run: it sets no cookie and runs nothing without your consent. If you accept audience measurement, it runs Google Analytics, another Google service. The data may be processed in the United States, under the EU–US Data Privacy Framework. Google signals and ad personalisation are turned off.

On the same consent, the site loads Microsoft Clarity, a service of Microsoft Ireland Operations Ltd and Microsoft Corporation, which produces heatmaps (where people click, how far they scroll) and replays how visits went. The data may be processed in the United States, under the EU–US Data Privacy Framework. We tell Clarity that advertising is declined; Microsoft otherwise handles this data under its own privacy statement.

The cookie banner (CookieYes) runs from our own site: your choice stays in your browser.

Who has access to your data

The two co-owners, and only they, read your requests. Our technical providers, the site’s host (Hostinger) and our email provider, process this data on our behalf and may store it on servers located outside Morocco. If you accept audience measurement, Google and Microsoft also process the visit statistics on our behalf.

We do not sell, rent or pass on your data to anyone.

On what basis

• Your request: replying and preparing a quote.
• The contract: carrying out the project, running the client portal, invoicing.
• The law: keeping accounting records.
• Our legitimate interest: protecting the site against abuse.
• Your consent: audience measurement, which you can withdraw at any time.

Your rights

Under Moroccan law no. 09-08 you can access your data, have it corrected and object to its processing. If you live in the European Union, the United Kingdom or Switzerland, the GDPR, the UK GDPR and the Swiss data protection act also give you the right to have it erased, to restrict its use and to receive it in a reusable format.

To exercise these rights, write to contact@dacreative.studio. We reply within one month.

You can also contact a data protection authority: the CNDP in Morocco, or the authority of the country where you live.

Security

The site is served over HTTPS, access to requests and to the client portal is limited to authorised accounts, and passwords are never stored in plain text.

Children

This site is intended for businesses. We do not knowingly collect data about minors.

Changes

If this policy changes, the new version is published on this page with its date. Any new measurement or advertising tool would first be submitted to your consent.