Privacy policy

1. Data controller

The controller of the data collected on this site is Brainbow Agency, 18 Rue Jorf Al Asfar, Cité Baalabak, Casablanca, Morocco. For any question regarding the protection of your data, you can contact us at contact@brainbow-agency.com.

The processing operations described below have been declared to the Moroccan National Commission for the Protection of Personal Data (CNDP) , reference [CNDP DECLARATION No.].

2. Data we collect

2.1 Through the contact form

When you write to us through the contact form, we collect the information you provide: name, email address, possible company, and the content of your message.

2.2 Audience measurement

We measure traffic to the site using Plausible Analytics, a privacy-friendly solution that uses no cookies and does not collect any data that could personally identify you. Only aggregated data (page views, country of origin, browser) is recorded.

2.3 Connection data

Like any website, our servers technically log certain connection information (anonymized IP address, timestamp, pages viewed) for security and diagnostic purposes. These logs are kept for a maximum of 30 days.

3. Purposes of processing

• Respond to your requests for information, quotes or collaboration.
• Improve the site through anonymized audience measurement (performance, navigation, most-viewed content).
• Ensure security of the site and prevent abuse.

We never sell your data and do not use it for commercial prospecting without your explicit consent.

4. Legal basis

• Consent: contact form (you choose to write to us).
• Legitimate interest: anonymized audience measurement, site security.

5. Retention period

• Messages received via the form: 24 months from the last exchange.
• Aggregated audience statistics: 12 months.
• Technical connection logs: 30 days.

6. Recipients and subprocessors

Your data is only accessible to Brainbow Agency employees who need to know it. We use the following technical service providers:

• Vercel Inc.: Website hosting and CDN (United States).
• Resend: Delivery of emails sent through the contact form (United States).
• Plausible Analytics: Anonymous, cookie-free audience measurement (European Union).

7. Transfers outside Morocco

Some of our service providers being established in the United States, your data may transit outside the Kingdom of Morocco. These transfers are governed by the standard contractual clauses and confidentiality commitments we have entered into with each subprocessor concerned. We ensure they offer a level of protection equivalent to that required by law 09-08.

8. Your rights

Pursuant to Moroccan law 09-08 on the protection of natural persons with regard to the processing of personal data, you have the following rights:

• Right of access to your data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to object to processing
• Right to data portability

To exercise any of these rights, write to us at contact@brainbow-agency.com, specifying your request and attaching proof of identity. We respond within 30 days maximum.

In the event of persistent disagreement, you may file a complaint with the CNDP, the Moroccan personal data protection authority.

9. Cookies

This site does not use any advertising cookies or behavioral tracking cookies. No consent banner is therefore displayed, since the only items stored locally by your browser are strictly necessary for the site to function (e.g. your display preferences).

10. Security

We implement reasonable technical and organizational measures to protect your data against loss, alteration or unauthorized access: encrypted communications (HTTPS), restricted access to data, regular review of our service providers.

11. Updates to this policy

We may update this policy to reflect regulatory changes or the addition of new features. The last update date appears at the top of the document. We invite you to consult it regularly.

For any question relating to this policy, you can write to us at contact@brainbow-agency.com.