Privacy Policy – LOYA Cash Register System

Last Updated: 11/07/2024

1. Introduction

LOYA Cash Register System ("LOYA," "we," "us," or "our") is committed to protecting the privacy and security of your personal data in compliance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and under the authorization of the National Commission for the Control of Personal Data Protection (CNDP). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cash register system. By using LOYA, you consent to the practices described in this policy.

2. Information We Collect

When you use LOYA, we may collect various types of information necessary for processing transactions, improving our services, and complying with legal obligations. This includes transactional data such as purchase amounts, payment methods, and receipt details. For business accounts, we may collect merchant information, including business registration details, tax identification numbers, and bank account information for settlement purposes. Additionally, we may gather user access data, such as employee identification for system authentication, device information (for mobile or tablet usage), and activity logs to ensure security and operational efficiency.

3. Registration and Account Obligations

The data we collect is used to facilitate secure and efficient payment processing, generate financial and inventory reports, and comply with tax and regulatory requirements. We also use this information to detect and prevent fraudulent activities, enhance system performance, and provide customer support. Your data may be processed within our centralized management system, which includes integration with other affiliated platforms such as UPay, all operating under the same CNDP authorization and data protection standards.

4. Data Sharing and Disclosure

We may share your information with third parties only when necessary for service provision or legal compliance. This includes financial institutions for payment processing, regulatory authorities for audit and tax purposes, and professional advisors for business operations. Any data shared with affiliated systems remains protected under our centralized data governance framework. We do not sell your personal data to third parties for marketing purposes.

5. Data Security and Retention

We implement robust security measures to protect your data, including encryption, access controls, and regular security audits. All sensitive information is stored securely in compliance with industry standards. Transaction data is retained for a period required by Moroccan financial and commercial regulations, typically [X] years, while user account data is maintained as long as the account is active and for a reasonable period afterward to comply with legal obligations.

6. Your Rights Under Moroccan Law

In accordance with Moroccan data protection laws, you have the right to access, correct, or request the deletion of your personal data. You may also object to certain processing activities where applicable. To exercise these rights, you may contact us using the details provided below.

7. Updates to This Policy

We declare that no third party can have access to any information on your device. It is also the prerogative of the user to allow or deny the "Access to all files" permission. Changes to this privacy policy, if any, will be notified on the apps and this policy came into effect on January 01, 2020.
We may periodically update this Privacy Policy to reflect changes in legal requirements or our business practices. Any significant modifications will be communicated through our platform or via email. Continued use of LOYA after such changes constitutes acceptance of the revised policy.

8. Contact Us

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact our Data Protection Officer at:
Email: info@loya.ma
Address: Angle AV. Assalam, Route de Kenitra, Sale
You can also, for legitimate reasons, oppose the processing of data concerning you. This collection is authorized by the CNDP under the number D-CE-233/2020 within the framework of compliance with the provisions of the law 09-08 on the subject.