Last updated: 5 September 2026
This policy explains what personal data YandF DEV ("we", "us") collects through yandef.com, why we collect it, how long we keep it and what you can ask us to do with it. It covers this website only.
We are the data controller. You can reach us at admin@yandef.com, or by post at Rabat, Morocco.
1. What we collect, and why
| Where | What | Why | Kept for |
|---|---|---|---|
| Contact form | Name, e-mail address, company or website, phone number, project type, budget range, timing, preferred reply channel, your message, plus the IP address and time of submission | To answer your enquiry and, if we work together, to prepare a proposal. The IP address and timestamp are kept only to detect abuse of the form. | 3 years from our last exchange, then deleted |
| Newsletter form | E-mail address, the fact that you consented, the IP address, time and browser used to subscribe | To send you occasional updates about our work. Proof of consent is kept for as long as you stay subscribed. | Until you unsubscribe, then 12 months for proof of consent |
| Anti-abuse | A one-way hash of your IP address | To limit how many submissions a single connection can make per hour | 1 hour |
| Analytics (only if you accept) | Pages viewed, approximate region, device and browser type, referring site, and the interaction events listed in our Cookie Policy | To understand which pages are useful and where visitors give up | As set by Google Analytics (14 months by default) |
We do not ask for, and you should not send us, sensitive data such as health information, identity-document numbers or payment card details through this website.
2. Legal grounds
- Your consent — the newsletter, and all analytics cookies. You can withdraw it at any time.
- Steps taken at your request before entering into a contract — answering your contact form enquiry.
- Our legitimate interest in keeping the site available and free of abuse — rate limiting and server logs.
3. Cookies and similar technology
We set one strictly necessary cookie, yandfsess, which links your browser to a
short-lived session so the contact and newsletter forms can be protected against cross-site
request forgery. It contains no personal data and expires when you close your browser.
Analytics and measurement tools load only after you press Accept analytics in the cookie notice. If you reject them, or ignore the notice, they are never loaded. The full list is in our Cookie Policy, where you can also change your choice.
4. Who else sees your data
We do not sell personal data and we do not share it for advertising. It is handled by:
- Hostinger International Ltd. — hosting of this website and of our e-mail. Form submissions are stored on the server and sent to our own mailbox.
- Google Ireland Ltd. / Google LLC — Google Analytics and Google Tag Manager, loaded only with your consent, and the Google Maps frame on our contact page. Google may process data outside Morocco and the European Economic Area under its standard contractual clauses.
- Ahrefs Pte. Ltd. — privacy-oriented traffic analytics, loaded only with your consent.
-
Simple Icons and jsDelivr — the technology logos on our home, about and team
pages are images served from
cdn.simpleicons.organdcdn.jsdelivr.net. Loading a page that shows them means your browser requests an image from those services, which see your IP address. They set no cookies and we receive nothing from them.
The Google Maps frame on our contact page is loaded by your browser directly from Google, which means Google receives your IP address if you view that page. The map is not shown anywhere else on the site.
5. Your rights
You may ask us at any time to:
- confirm what data we hold about you, and give you a copy;
- correct anything inaccurate;
- delete your data, unless we must keep it for accounting or legal reasons;
- stop using it for a given purpose, or withdraw a consent you gave;
- receive the data you gave us in a portable, machine-readable form.
Write to admin@yandef.com and we will answer within 30 days. Every newsletter also carries a one-click unsubscribe link.
Visitors in Morocco may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), which supervises the application of Law 09-08. Visitors in the European Economic Area may complain to their national supervisory authority under the GDPR.
6. How we protect your data
- The whole site is served over HTTPS, and HTTP requests are redirected to it.
- Form submissions are validated on the server, rate limited per connection and protected by anti-forgery tokens.
- Submission records are written to a directory that the web server refuses to serve.
- Access to the mailbox that receives enquiries is limited to the members of the team who answer them.
7. Children
This site is aimed at businesses and professionals. We do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.
8. Changes to this policy
When we change how the site handles data, we update this page and the date at the top. Material changes affecting people already on our newsletter are announced by e-mail.
Questions
Write to admin@yandef.com or call +212 661 43 46 09 (Mon – Fri, 9 AM – 6 PM).