Privacy policy
This policy explains what personal data we collect, why, how long we keep it and what rights you have. It follows the GDPR (EU/EEA), the UK GDPR, the CCPA/CPRA for California residents, and Morocco’s law 09-08.
Data controller
Display Agency LLC (“display.”), 30 N Gould St Ste R, Sheridan, WY 82801, USA.
Data-protection contact: privacy@display.ma · General contact: hello@display.ma · +1 646 349 9512 · +212 708 07 08 80
Data Protection Officer: not appointed — data-protection requests are handled at the address above.
What we collect and why — contact form
| Data | Purpose | Legal basis |
|---|---|---|
| Name | Identify who we are talking to | Legitimate interest / consent |
| Work email | Reply to your enquiry | Pre-contractual measure |
| Company | Understand the business context | Legitimate interest |
| Message | Handle your request | Legitimate interest |
| IP & technical data | Security, spam prevention | Legitimate interest |
What we collect and why — engagements
| Data | Purpose | Legal basis |
|---|---|---|
| Billing details (name, address) | Issue invoices | Legal obligation |
| Tax identifiers | Tax compliance | Legal obligation |
| Order history | Manage the commercial relationship | Contract / legitimate interest |
Payment data
We never store card numbers or payment credentials on our servers. Payments, where applicable, are processed exclusively by PCI-DSS certified providers.
Retention periods
| Category | Retention |
|---|---|
| Contact-form data | 3 years from the last contact |
| Invoicing and accounting records | 10 years (legal obligation) |
| Technical logs (connection, IP) | 12 months maximum |
| Prospecting data | 3 years from collection or last contact |
| Analytics data | Per our analytics configuration, 13 months maximum |
Who receives the data
Personal data may be shared, strictly for the purposes above, with:
- Technical providers and hosts, including Hostinger (web hosting and VPS)
- Email and communication tools
- Analytics tools, loaded only after consent
- Booking tools (Cal.com) when you choose to book a call
- Legal and regulatory authorities, upon valid legal request
We do not sell your data
display. does not sell, rent or trade personal data to third parties for commercial purposes. Under the CCPA/CPRA, we do not “sell” or “share” personal information as those terms are defined.
International transfers
We operate remotely and worldwide, so data may be processed outside your country, including outside the European Economic Area.
Such transfers rely on an adequacy decision, the European Commission’s Standard Contractual Clauses, or an equivalent safeguard. Hostinger is a Lithuanian company established in the European Union and subject to the GDPR; for any transfer outside the EEA it relies on GDPR-compliant mechanisms.
Security
We and our providers apply appropriate technical and organisational measures: HTTPS/TLS encryption in transit, hashed and salted passwords where accounts exist, least-privilege access, regular backups, and access logging.
In the event of a personal-data breach likely to affect your rights, we will notify the competent supervisory authority within 72 hours as required by Article 33 GDPR, and inform affected individuals where required.
Your rights
| Right | What it means |
|---|---|
| Access | Obtain a copy of the data we hold about you |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data |
| Restriction | Temporarily limit processing |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interest or to prospecting |
| Withdraw consent | Withdraw consent at any time, without retroactive effect |
California residents (CCPA/CPRA)
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information — we do not sell or share it
- Right to non-discrimination for exercising these rights
Users in Morocco (law 09-08)
Users residing in Morocco may exercise their rights of access, rectification and objection under articles 7, 8 and 12 of law 09-08, supervised by the CNDP (https://www.cndp.ma).
How to exercise your rights
Email privacy@display.ma, or write to 30 N Gould St Ste R, Sheridan, WY 82801, USA. We may ask for proof of identity where necessary.
We answer within one month of receiving a complete request, extendable by two months for complex requests.
Right to complain
- EU/EEA: your national data-protection authority
- United Kingdom: Information Commissioner’s Office — https://ico.org.uk
- Morocco: CNDP — https://www.cndp.ma
- United States: Federal Trade Commission — https://www.ftc.gov, or your State Attorney General
Minors
This site is not intended for people under 16 (or under 13 where local law sets that threshold). We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child provided us data, contact privacy@display.ma.
Changes to this policy
We may update this policy, in particular following regulatory or technical changes. The date shown at the top of this page is authoritative.