Last updated: November 5, 2026
This policy explains how DERFEND IT collects, uses and protects personal data when you use derfend.com, contact us or request one of our services, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Data controller
DERFEND IT, Avenue Moulay Ismail, Résidence Volubilis, Bloc C, 1st Floor, Office No. 53, Tangier, Morocco. Email: info@derfend.com.
2. Data we collect
- Identification and contact details you send via the request form, WhatsApp or email: name, phone, email, country and city.
- Information you provide about your situation and the service requested.
- When a contract is signed: data required to deliver and invoice the service, and the documents, evidence and authorizations the contract requires.
- Limited technical data when browsing, such as browser type and pages visited, through cookies and measurement tools (see our Cookie Policy).
We never ask for passwords or verification codes through the website. Please do not send sensitive images or documents through the public form; we will agree on a secure channel when needed.
3. Purposes of processing
- Responding to your request and assessing your situation, based on your request and consent.
- Preparing the contract, delivering the service and invoicing, under the contract and our legal obligations.
- Securing and improving the website and measuring its use in aggregate.
We do not use your data for marketing without your consent, and we never sell it.
4. Who can access your data
Your data is only accessible to the team assigned to your case. Where strictly necessary, it may be shared with partner lawyers with your consent, with technical service providers that support our hosting, email and communications under confidentiality obligations, and with competent authorities where legally required.
5. Retention
Contact requests are kept for as long as needed to respond and follow up. Client files are kept for the duration of the contract and then for the period required by legal and accounting obligations. Evidence and sensitive content are deleted or returned to the client when the case is closed, unless otherwise agreed.
6. Security
We apply appropriate technical and organizational measures, including encrypted connections (HTTPS), restricted access rights, and never storing evidence or sensitive documents in public website folders.
7. Transfers outside Morocco
Some technical services we use, such as hosting or email, may be located outside Morocco. In that case we ensure transfers follow the safeguards required by Law 09-08.
8. Your rights
Under Law 09-08 you have the right to access and rectify your data, to object to its processing on legitimate grounds, and to withdraw your consent at any time. To exercise these rights, email info@derfend.com. You may also lodge a complaint with Morocco’s data protection authority (CNDP).
9. Changes
We may update this policy when our services or legal requirements change, and the date of the last update is shown at the top of this page.