Privacy Policy

Ayouria is a Moroccan online booking platform for professional beauty and wellness establishments (hair salons, hammams, spas, barbershops, beauty institutes). To operate, it processes a limited set of personal data: this policy explains which data, why, who it is shared with, and how to exercise your rights.

Processing is carried out in accordance with Moroccan Law No. 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data, under the supervision of the CNDP (the Moroccan data protection authority). For residents of the European Union, GDPR rights also apply.

1. Data controller

The data controller is the publisher of the Ayouria platform, reachable at privacy@ayouria.com for privacy matters and support@ayouria.com for anything else.

2. Data we collect

• Customer account: name, e-mail address, phone number, password (stored hashed, never in clear text).
• Booking without an account: name and phone number, confirmed via a one-time SMS code (OTP).
• Bookings: establishment, selected service, date and time, any special requests, appointment history.
• Online payment: where an establishment offers card payment, the transaction is processed by CMI (Centre Monétique Interbancaire). We never store your card number.
• Reviews: rating, comment and displayed first name when you review an establishment.
• Browsing: IP address, device and browser type, pages viewed, search queries.
• Location: only if you allow it ("near me" search); otherwise an approximate position may be derived from your IP address.

3. Why we use it

• Create and confirm your bookings, and send confirmations and reminders (performance of the contract);
• Pass the establishment the information needed for your appointment;
• Process online payments and prevent fraud;
• Publish and moderate customer reviews;
• Improve the platform and measure its audience (legitimate interest);
• Send you marketing communications, only with your consent, which you can withdraw at any time;
• Meet our legal and accounting obligations.

4. Who we share it with

We never sell your data. It is only shared with:

• The establishment you book: your name, phone number and requested service, so the appointment can be honoured;
• Our technical processors: hosting, e-mail and SMS delivery, audience measurement, and CMI for card payments — each accessing only what its task strictly requires;
• Authorities, where the law requires it.

5. Transfers outside Morocco

Some technical providers may host data outside Morocco. Such transfers comply with the requirements of Law No. 09-08 (CNDP authorisation where required) and, for EU residents, with the mechanisms provided by the GDPR.

6. Retention periods

• Customer account: while the account is active, then deletion within 90 days of closure;
• Records of online-paid bookings: 10 years, per Moroccan accounting and commercial obligations;
• Marketing data: until you withdraw consent;
• Published reviews: for as long as the establishment's page is published.

7. Your rights

Under articles 7 to 9 of Law No. 09-08 you have rights of access, rectification and objection, and may request deletion of your data. Exercise them from your account settings or by writing to privacy@ayouria.com — we reply within 30 days at most. You may also lodge a complaint with the CNDP (www.cndp.ma).

8. Cookies

We use cookies to keep your session, remember preferences (such as language) and measure site audience. Manage them in your browser settings; details are on our Cookies page.

9. Security

Exchanges with the platform are encrypted (TLS), passwords are hashed, data access is restricted to those who need it, and card payments are handled by CMI, a certified processor. No system is infallible; if an incident affects your data we will notify you as the law requires.

10. Minors

The platform is intended for adults (18+). We do not knowingly collect data about minors.

11. Changes

We may update this policy as the service or regulations evolve. For material changes you will be notified by e-mail or a notice on the platform. The last-updated date appears at the top of this page.