Privacy policy

MarocImmo SARL (contact details in the legal notices) is the controller of your personal data. Our processing complies with Moroccan law No 09-08 on the protection of individuals with regard to personal data processing.

• Account data: first name, last name, email, hashed password (if you create an account).
• Contact data: email and phone number you provide when reaching out to an advertiser.
• Browsing data: pages visited, device type, coarse city from your IP, for audience measurement and product improvement.
• Technical cookies: authentication, preferences (language, currency).

• Give you access to the catalogue and personalise your experience (currency, language, search preferences).
• Connect buyers/renters with advertisers (agencies, private sellers).
• Secure the platform and detect fraud.
• Measure audience in aggregate and improve the site.

Processing is based on the performance of the service you request (browsing, contact), your explicit consent (account, marketing communications) and our legitimate interest in securing and improving the platform.

• Active account: as long as the account is not deleted.
• Inactive account beyond 36 months: automatic deletion after notice.
• Technical logs: 12 months maximum.
• Contact data forwarded to an advertiser: erased from our servers after 90 days; the recipient advertiser retains their own copy.

Your data is never sold. It may be shared with: the advertiser you explicitly contact, our technical subcontractors (hosting, email delivery) bound by contract, and, where required, competent authorities upon a valid legal request.

You have a right to access, rectify, erase, restrict, object and port your data. To exercise these rights, write to [email protected]. You may also lodge a complaint with the CNDP (the Moroccan personal-data authority).

We use strictly necessary cookies (session, preferences) and, with your consent, aggregate audience-measurement cookies. No third-party advertising cookies are set.

Passwords are stored as hashes. All traffic is HTTPS-encrypted. Database access is restricted to a small number of identified operators.