Data Protection — Law 09-08 & CNDP

This English translation is provided for convenience; the French version prevails.

Booking a treatment involves personal data: a name, a phone number, an appointment. Ayouria processes that data within a precise legal framework — Moroccan Law No. 09-08 — and this page explains what that guarantees you and how to assert your rights.

The legal framework

Law No. 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data, and its implementing decree No. 2-09-165, govern all data processing in Morocco. It established the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), the independent authority that oversees its application. Ayouria's processing operations fall within this framework; for EU residents, GDPR guarantees apply in addition.

Your rights

Right of access (article 7): know what data we hold about you and obtain a copy;
Right of rectification (article 8): have inaccurate or incomplete data corrected;
Right to object (article 9): object to processing on legitimate grounds — and with no justification at all for direct marketing;
Right to deletion: request erasure of your account and of data not subject to a legal retention obligation.

How to exercise them

The simplest way is your account settings, where you can view and correct your information and request account deletion. Otherwise, write to privacy@ayouria.com describing your request; proof of identity may be required so that no one else can exercise your rights in your place. Exercising these rights is free and we reply within 30 days at most.

The CNDP, your recourse

If you believe your rights have not been respected, you can refer the matter to the CNDP, which handles complaints from data subjects: www.cndp.ma. We cooperate with the authority on any complaint.

Our concrete commitments

Minimisation: we only collect what the booking and the service require;
No sale of data, to anyone;
Limited sharing: the establishment you book only receives your name, phone number and requested service;
Security: TLS-encrypted exchanges, hashed passwords, restricted data access;
Payments: processed by CMI; we never store card numbers;
Supervised processors and transfers outside Morocco compliant with Law No. 09-08 (CNDP authorisation where required).