PRIVACY POLICY AND DATA PROTECTION

ARTICLE 1: INTRODUCTION

Loyalty Program Aggregator (LPA), a simplified joint-stock company headquartered at 119, Boulevard Abdelmoumen, 2nd floor, No. 18, Casablanca, registered at the Casablanca Trade Register under number 569247 (hereinafter referred to as 'LPA'), respects the privacy of the users of the Application and strives to ensure the protection of their information and personal data, in compliance with Dahir No. 1-09-15 of 22 Safar 1430 (February 18, 2009), enacting Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

The present Privacy and Personal Data Protection Policy (hereinafter referred to as the 'Privacy Policy') describes how LPA, as the data controller, collects and processes personal data obtained when any user accesses, uses the Tookeez Application (the 'Application'), or interacts with LPA. This Privacy Policy also provides insight into the origin and usage of navigation information collected through cookies. Lastly, this Privacy Policy outlines the rights available to every user under the current regulations concerning the protection of personal data.

Before using the Application, LPA recommends carefully reading this Privacy Policy. This Privacy Policy complements the Application's Terms of Use.

LPA reserves the right to modify this Privacy Policy, especially to comply with current legislation. Any changes will be notified to the User via email or notification on the mobile application.

If you disagree with the Privacy Policy and refuse to have your personal data collected and processed according to the terms outlined herein, you should not accept the registration of cookies on your device or accept this Privacy Policy. Consequently, do not provide any personal information.

ARTICLE 2: ENTITY RESPONSIBLE FOR DATA PROCESSING

The entity responsible for the collection and processing of personal data gathered through the Application, considering possible personal data processed by third parties offering related services via the Application, is:

Loyalty Program Aggregator (LPA), a simplified joint-stock company headquartered at 119, Boulevard Abdelmoumen, 2nd Floor, No. 18, Casablanca, registered with the Casablanca Trade Register under No. 569247, represented by Ms. Siham El Mejjad in her capacity as President. Email: dataprivacy@tookeez.com

ARTICLE 3: PERSONAL DATA SUBJECT TO COLLECTION

In case of accessing, browsing, or using the Application, some of your personal data is collected.

The personal data that may be collected includes the following:

- Identity-related information: name, surname, date of birth, gender, password;

- Contact information: email address, phone number;

- Address, city, location, phone ID, number of children, profession.

- Identity of authorized agents in the case of business partners: name, surname, number, store.

Finally, in certain cases, LPA may also collect personal information provided by the user about other individuals, for instance, when a user makes a provision and intends to provide a provision to a designated third party. LPA collects and uses this personal information to fulfill the user's requests.

The disclosure of personal data is voluntary. However, in order to create an Account on the Application or to use certain services offered on the Application, the required personal data on the appropriate forms must be provided. The personal data requested and deemed essential to fulfill a user's requests are thus identified as mandatory on the collection forms.

In case of refusal to provide all or part of the mandatory fields, or if the provided personal data is inaccurate, the user will not be able to create an account and/or use the Application, and/or LPA will not be able to provide certain services or respond to the user's requests.

ARTICLE 4: PURPOSE OF PERSONAL DATA COLLECTION

The personal data collected on the website is intended to manage the application users, particularly through the following:

- Creating an account on the application (e.g., name, surname, email, phone number, password);

- Communicating and notifying information regarding new services or products, commercial offers, promotions, and advertising campaigns;

- Ensuring and enhancing the security of the application.

ARTICLE 5: SHARING OF PERSONAL DATA WITH THIRD PARTIES

The collected personal data, or some of it, may be shared, communicated, or processed by our staff, our affiliated companies, or by other partner companies involved in the commercial transaction (including affiliated or commercial partner companies and suppliers).

ARTICLE 6: DATA RETENTION PERIOD

Personal data is kept for the duration necessary to achieve the purposes for which they are processed. They will be deleted as soon as the purpose of their processing is achieved.

ARTICLE 7: SECURITY MEASURES ENSURING THE PROTECTION OF PERSONAL DATA

The collected personal data is protected by technical and organizational measures in compliance with Moroccan legal and regulatory requirements to ensure their security and confidentiality. This aims to prevent unauthorized access, illegal processing, accidental loss, destruction, and damage to your data.

LPA also ensures that third parties with whom your personal data is shared provide guarantees and implement sufficient security and confidentiality measures to handle the entrusted personal data at a level identical to the safeguards we apply to your personal data, in accordance with the requirements of data protection legislation.

ARTICLE 8: USERS' RIGHTS REGARDING THEIR PERSONAL DATA

According to articles 7, 8, and 9 of law no. 09-08, every user of the website has the right at any time to access their personal data and request the correction of such data.

Each user can also object to the processing of their data for legitimate reasons.

Each user can exercise these rights by contacting LPA at the following address:

CAF OFFICE – CORNER OF OMAR EL KHAYAM AVENUE AND ABDERRAHIM BOUABID BOULEVARD – 5TH FLOOR – OFFICE NO. 21 – CASABLANCA.

ARTICLE 9: THIRD-PARTY WEBSITES OR APPLICATIONS

The Application may contain links to other applications and/or websites. It's important to note that these applications and/or other websites have their own Privacy Policies.

LPA assumes no responsibility arising from these other Privacy Policies.