// legal
Privacy policy
Last updated: May 2026
Who we are
Bangicode SARL is a software studio based in Tetouan, Morocco. We build custom software, e-commerce platforms, technical training programmes, and social media content for businesses across Morocco and internationally.
Legal entity: Bangicode SARL
Address: Tetouan, Morocco
Contact: contact@bangicode.ma
This policy explains what personal data we collect, why we collect it, how we use it, and your rights under Moroccan Law 09-08 on the Protection of Personal Data and, where applicable, the EU General Data Protection Regulation (GDPR).
Data we collect
Contact form
When you submit the contact form on bangicode.ma we collect:
- Your name
- Your email address
- Your company name (optional)
- Your message
We use this information to respond to your enquiry and, with your consent, to follow up about working together. We do not add you to a mailing list without explicit opt-in.
Booking (Cal.com)
When you book a discovery call via our Cal.com integration we collect:
- Your name and email address
- Your preferred date and time
- Any notes you include in the booking form
This data is processed by Cal.com under their own privacy policy. We receive a copy of the booking details to manage our schedule.
Analytics (Google Analytics 4)
We use Google Analytics 4 to understand how visitors use our website. GA4 collects:
- Pages visited and time spent
- Referring source (search engine, social platform, direct)
- General geographic region (country / city level — not precise location)
- Device and browser type
GA4 is loaded only after you accept analytics cookies via our cookie consent banner. No analytics data is collected before consent is given, and no data is collected at all if you decline.
Session cookies
We set a first-party session cookie (bgc_session) to maintain basic site functionality. This cookie expires when you close your browser and contains no personally identifiable information.
Cookie consent
We store your cookie consent preference in a first-party cookie (bgc_consent_v1). This cookie expires after 12 months and records whether you accepted or declined analytics cookies.
How we use your data
| Purpose | Lawful basis | | -------------------------------------------- | ------------------------------------- | | Respond to contact form enquiries | Legitimate interest (pre-contractual) | | Manage booked discovery calls | Performance of contract | | Analyse website usage (GA4) | Consent | | Maintain site functionality (session cookie) | Legitimate interest | | Store cookie consent preference | Legal obligation |
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Sub-processors
We use the following third-party services that may process personal data on our behalf:
| Processor | Purpose | Location | Privacy policy | | ---------------------- | ---------------------------------------- | ---------------------------------------- | -------------------------------------------------------------------------- | | Google Analytics 4 | Website analytics | USA (Standard Contractual Clauses apply) | policies.google.com | | Cal.com | Meeting bookings | USA / EU (SCCs apply) | cal.com/privacy | | Vercel | Website hosting | USA / EU edge (SCCs apply) | vercel.com/legal/privacy-policy | | Resend | Transactional email (form notifications) | USA (SCCs apply) | resend.com/legal/privacy-policy |
Where sub-processors are located outside Morocco or the EU, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms to ensure your data is protected to an adequate standard.
Retention
| Data | Retention period | | ------------------------ | ---------------------------------------------------- | | Contact form submissions | 2 years from last contact, then deleted | | Booking records | 1 year after the booked call date | | GA4 analytics data | 14 months (GA4 default; data ages out automatically) | | Cookie consent records | 12 months | | Session cookies | Until browser session ends |
Your rights
Under Moroccan Law 09-08 and, where applicable, GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Deletion — ask us to delete your data where there is no lawful reason to retain it
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — withdraw analytics consent at any time via the cookie banner
To exercise any of these rights, email contact@bangicode.ma with "Data request" in the subject line. We will respond within 30 days.
You may also file a complaint with the Moroccan data protection authority, the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP): cndp.ma.
Cookie controls
You can review or change your cookie preferences at any time using the cookie settings link in the site footer.
Changes to this policy
We may update this policy when our data practices change. The version number and "last updated" date at the top of this page will reflect any changes. Material changes will be communicated via a banner on the site.
Contact
For data-related questions or requests:
Email: contact@bangicode.ma
Post: Bangicode SARL, Tetouan, Morocco