Privacy Policy
We protect your personal data in accordance with Moroccan Law No. 09-08 and international best practices.
Last updated: April 2026
SSL/TLS encryption
Data encrypted in transit
No resale
Your data is never sold
Your rights guaranteed
Access, correction, deletion
1. Data controller
The data controller for personal data is:
Wafir SARL — Issam Bndiin, Managing Director
Registered office: Casablanca, Morocco
DPO contact: [email protected]
2. Data collected
We collect only the data necessary for the operation of our services:
| Type | Data | Purpose |
|---|---|---|
| Identity | First name, last name, email, phone | Account creation, lead matching |
| Financial | Income, outgoings, project amount, desired term | Personalised simulation and comparison |
| Professional | Employment status, employer, seniority | Credit offer eligibility |
| Geolocation | City, postcode | Local results, city directory |
| Browsing | Pages visited, duration, device, browser | Service improvement, anonymous statistics |
| Vehicle / Property | Vehicle type, property value, surface area | Car / home insurance comparison |
Financial data (income, outgoings) is never stored permanently — it is used solely for real-time simulation calculations.
3. Processing purposes
- Comparison and simulation — calculating rates, monthly payments and personalised offers
- Lead matching — sending your contact details to selected professionals (banks, insurers, brokers)
- Account management — creating and administering your personal space
- Communication — sending results, rate alerts and newsletters (with your consent)
- Service improvement — anonymised traffic statistics
4. Data sharing
Your personal data may be shared with:
- Financial professionals — only those you have selected or who match your quote request
- Technical sub-processors — hosting provider (Hetzner), transactional email (Resend), analytics (Plausible) — all subject to confidentiality obligations
We never sell your data to third parties for advertising or unsolicited marketing purposes.
5. Retention period
| Data type | Duration |
|---|---|
| User account | Account duration + 3 years after deletion |
| Simulation data | Anonymised after 12 months |
| Leads (quote requests) | 3 years after last interaction |
| Browsing data | 13 months maximum |
| Cookies | 13 months maximum |
| Newsletter | Until unsubscription |
6. Your rights
Under Law No. 09-08, you have the following rights:
Right of access
Obtain a copy of your personal data
Right of rectification
Correct inaccurate or incomplete data
Right to object
Object to the processing of your data
Right to erasure
Request deletion of your data
Right to data portability
Receive your data in a structured format
Withdrawal of consent
Withdraw your consent at any time
To exercise your rights, send an email to [email protected] with a copy of your identity document. We respond within a maximum of 30 days.
7. Data security
We implement technical and organisational measures to protect your data:
- SSL/TLS encryption for all communications
- Password encryption (bcrypt)
- Restricted data access (principle of least privilege)
- Regular encrypted backups
- DDoS protection via Cloudflare
- Continuous access monitoring
8. International transfers
Your data is hosted on servers located in Germany (Hetzner). Some technical sub-processors (Cloudflare, Resend) may process data in other countries. In all cases, we ensure that appropriate safeguards are in place (standard contractual clauses, security certifications).
9. Marketing communications
You may receive communications from us if:
- You have subscribed to our newsletter
- You have requested a quote or simulation
- You have created a user account
Every email contains an unsubscribe link. You can also contact us at [email protected] to unsubscribe.
10. Minors
The wafir.ma website is not intended for persons under 18 years of age. We do not knowingly collect personal data concerning minors. If you are a parent and notice that your child has provided us with data, contact us to have it deleted.
11. CNDP
Wafir SARL is registered with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
For any unresolved complaint, you may contact the CNDP:
CNDP — Commission Nationale
Angle Boulevard Annakhil et Avenue Mehdi Ben Barka, Hay Riad, Rabat
Website: www.cndp.ma
12. Modifications
We may update this privacy policy at any time. In the event of a substantial change, we will notify you by email or via a notification on the site. The date of the last update appears at the top of this page.