Up to date — reviewed by our legal counsel
Law 09-08 compliance
Law 09-08 in a nutshell
Law 09-08, enacted in 2009 and supervised by the CNDP (Commission Nationale de contrôle de la Protection des Données à caractère Personnel), frames the collection and processing of personal data in Morocco. It requires explicit purpose, consent, limited retention, right of access and rectification, and secure processing.
How Tresoria complies
Morocco hosting available, CNDP declaration, processing register, retention policy, rights handled within 30 days, contractually-bound subprocessors, and explicit consent for optional processing (analytics).
Your rights
You can at any time request access to your data, rectification, portability or deletion. Email contact@tresoria.ma — answer within 30 days.
DPO
Our Data Protection Officer can be reached at contact@tresoria.ma.
For the full signed PDF version, write to us at contact@tresoria.ma.