Last updated: 14 October 2026

This policy explains what personal data Dar’Investa collects on darinvesta.com and through its services, why, how long it is kept and how to exercise your rights. It applies under Moroccan law no. 09-08 and, for people located in the European Union, under the General Data Protection Regulation (GDPR).

1. Data controller

Mohamed Alioua, trading as Dar’Investa Marrakech (micro-entrepreneur), Iziki 2, Marrakech, Morocco.
Email: contact@darinvesta.com · Phone and WhatsApp: +212 7 17 41 03 42.

2. Data collected and purposes

  • Contact form, email and WhatsApp: first name, email, phone (optional), service of interest, message. To answer your request and prepare any support. Basis: your consent and pre-contractual steps taken at your request.
  • Appointment booking (Calendly): name, email, phone, chosen time slot. To organise the appointment. Basis: pre-contractual steps.
  • Client area: name, email, login, password (stored encrypted), progress of your file (steps, payments, mission documents). To perform the contract and give you access to your file. Basis: contract.
  • Payments and invoicing: identity, amounts, dates, transfer receipts. For invoicing and our accounting obligations. Basis: legal obligation.
  • Newsletter (Brevo): email, language, date and proof of your subscription (double opt-in). To send you the newsletter. Basis: your consent, which you can withdraw at any time via the unsubscribe link.
  • Private listings: account (login, email, password stored encrypted) and listing content (title, property type, price, area, description, photos, contact details). To publish your listing after review. Basis: your request (contract).
  • Purchase of the book SOLO (Gumroad, Lemon Squeezy): payment is handled by these platforms; we receive your name, email and order details. Basis: contract.
  • Visit statistics (Jetpack Stats): pages viewed, device type, IP address processed by Automattic. To measure the site’s audience. Basis: your consent, given or refused in the cookie banner.
  • Site security: IP address and login attempts. To protect the site against intrusions. Basis: legitimate interest.

3. Who receives your data

Your data is processed by Mohamed Alioua only. It is never sold or rented. It is entrusted, as far as necessary, to the following technical providers:

  • Infomaniak: website and email hosting (Switzerland);
  • Brevo: newsletter sending (France, European Union);
  • Automattic (Jetpack): visit statistics and security (United States);
  • Calendly: appointment booking (United States);
  • PandaDoc: electronic signature of contracts (United States);
  • Gumroad and Lemon Squeezy: sale of the book SOLO (United States);
  • Google Fonts: display of typefaces (United States);
  • WhatsApp (Meta), if you choose this contact channel.

Some of these providers are located outside Morocco. These transfers are limited to what is strictly necessary and rely on the contractual safeguards offered by these providers.

4. Retention periods

  • Contact requests and prospects: 3 years after the last exchange;
  • Client files and client area: duration of the mission, then 5 years; the client-area account is deleted 12 months after the end of the mission;
  • Invoices and accounting records: 10 years, the legal period;
  • Newsletter: until you unsubscribe;
  • Private listings: while published, then deletion of the listing and account on simple request;
  • Cookie choice: 6 months.

5. Your rights

You can request access to your data, its correction or deletion, and object to its processing, in particular for marketing purposes. If you are in the European Union, you can also request restriction of processing and data portability, and withdraw your consent at any time.

Write to contact@darinvesta.com. We reply within one month. Proof of identity may be requested if there is any doubt.

You can also lodge a complaint with the CNDP (www.cndp.ma) or, if you live in the European Union, with the data protection authority of your country.

6. Cookies

Necessary cookies, set without consent: client-area login, language, security and storage of your cookie choice (6 months).

Audience measurement (Jetpack Stats): enabled only if you click “Accept” in the banner. If you refuse, no measurement tool is loaded.

You can change your mind at any time:

7. Security

The site is served over HTTPS. Passwords are stored encrypted. Client-area documents are kept in a private folder that is not publicly accessible, and can only be downloaded through personal links valid for 10 minutes.

8. Declaration to the CNDP

The data processing carried out on this site has been declared to Morocco’s National Commission for the Control of Personal Data Protection (CNDP), in accordance with law no. 09-08. The receipt number will be shown here as soon as it is received.

9. Minors

Our services are intended for adults. We do not knowingly collect data about minors.

10. Changes

This policy may change. The date of the last update is shown at the top of the page.