Last updated: 29 September 2026
This policy explains what personal data AtlasGoat collects through atlasgoat.com, why, who it is shared with, how long it is kept, and what you can do about it. It is written to meet Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for visitors in the European Economic Area, the United Kingdom and Switzerland, the General Data Protection Regulation (GDPR).
The short version: we collect only what you choose to send us and what a basic analytics tool records about your visit. We do not sell your data, and we do not use it for anything other than what is described here.
Who is responsible for your data
The data controller is Yahya Boujdyate, trading as AtlasGoat, Marrakech, Morocco.
For any question or request about your data, write to hello@atlasgoat.com.
What we collect and why
When you contact us
The contact form asks for your name, email address, a subject and, if you wish, a message. If you email us directly, we receive your email address and whatever you choose to write. We use this only to reply to you and, if we end up working together, to prepare and manage that engagement.
Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in answering the people who write to us.
When you subscribe to the newsletter
The newsletter form asks only for your email address. We use it to send you the newsletter. Every email contains an unsubscribe link, and you can also ask us to remove you at any time.
Legal basis: your consent, which you can withdraw at any time.
Spam protection on our forms
Our contact and newsletter forms are protected by Cloudflare Turnstile, which checks that a form is being sent by a person rather than a bot. Most visitors never see it. To run the check, Cloudflare processes technical signals from your browser, such as your IP address, TLS fingerprint and user agent. According to Cloudflare, it cannot identify individuals from these signals and uses them only to protect websites and to improve its bot detection. The forms also contain a hidden field that people never see and bots tend to fill in.
Legal basis: our legitimate interest in keeping our forms free of spam and abuse.
When you browse the site
We use Google Analytics to understand how the site is used: which pages are visited, how visitors arrive (for example from a search engine or a link), the type of device and browser, and an approximate location at country or city level derived from your IP address. Google Analytics does not give us your name or email address, and we do not try to identify individual visitors. We also record when a contact or newsletter form is sent, so we can tell which pages lead to enquiries.
If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics does not store any cookie on your device. It sends only cookieless, anonymous signals, which Google uses for aggregate measurement.
Legal basis: our legitimate interest in measuring and improving the site; for visitors in the regions above, no analytics cookie is set.
Technical data
Like every website, our hosting provider automatically records technical information when you load a page: your IP address, browser type, the page requested and the time of the request. This is used to deliver the site, keep it secure and diagnose problems. The site’s fonts are hosted on our own server, so loading a page does not contact any font provider.
Legal basis: our legitimate interest in running a secure, working website.
Cookies
The only cookies our site sets are the Google Analytics cookies below, and only outside the regions listed above. The forms themselves set none; the Turnstile check runs in a separate frame served by Cloudflare, which explains how it handles data in its Turnstile privacy notice.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes one visitor from another | 2 years |
_ga_4WKKPVTHV6 |
Google Analytics | Keeps track of the current visit | 2 years |
WordPress sets additional cookies only for site administrators when they log in; ordinary visitors never receive them.
You can delete or block cookies in your browser settings at any time, and you can stop Google Analytics from recording your visits on every website with the Google Analytics opt-out browser add-on.
Who we share it with
We do not sell, rent or trade personal data. We share it only with the service providers that run the site for us, and only as far as they need it to do that job:
- Hostinger hosts the website and our email, delivers the site through its content delivery network, and sends the newsletter.
- Google provides Google Analytics.
- Cloudflare provides Turnstile, the spam check on our forms.
We may also disclose data where the law requires it, for example in response to a valid request from a public authority.
International transfers
Our service providers may process data on servers outside Morocco and outside your own country, including in the European Union and the United States. Google and Cloudflare, both based in the United States, rely on recognised safeguards such as the EU–U.S. Data Privacy Framework and the European Commission’s standard contractual clauses to protect data transferred from Europe. Where we transfer personal data out of Morocco, we do so in line with Law No. 09-08.
How long we keep it
| Data | Kept for |
|---|---|
| Contact form messages and emails | As long as needed to handle your enquiry, and no longer than three years after our last exchange. If we work together, for as long as the law requires us to keep business records. |
| Newsletter email address | Until you unsubscribe or ask us to remove it. |
| Google Analytics event data | 2 months |
| Google Analytics user-level data | 14 months |
| Hosting technical logs | For the period set by our hosting provider for security and troubleshooting. |
Your rights
You can ask us at any time to:
- see the personal data we hold about you;
- correct it if it is wrong or incomplete;
- delete it;
- object to, or ask us to restrict, how we use it;
- receive a copy of the data you gave us, in a common machine-readable format;
- withdraw your consent where we rely on it, for example by unsubscribing from the newsletter. This does not affect anything we did before you withdrew it.
To use any of these rights, email hello@atlasgoat.com. We will answer within one month. We may ask you to confirm your identity before acting on the request, so that we never hand your data to someone else.
If you believe we have not handled your data properly, you can complain to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) in Morocco, at www.cndp.ma. If you live in the European Economic Area, the United Kingdom or Switzerland, you can also complain to the data protection authority in your country. We would appreciate the chance to put things right first, so please write to us before you do.
Security
The site is served only over an encrypted HTTPS connection, access to the site’s administration is restricted, and our providers apply their own security measures. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the data you trust us with.
Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We will update this page when the way we handle personal data changes, for example if we add a new tool to the site. The date at the top always shows when it was last revised.
Contact
AtlasGoat — Yahya Boujdyate
Marrakech, Morocco
hello@atlasgoat.com