Privacy policy

Fedelio is a loyalty card platform used by Moroccan businesses. Two roles are distinct, and that distinction determines who you should approach:

• The business where you got your card decides why it enrols you and what messages it sends you. It is the data controller.
• Fedelio provides the tool and hosts the data on its behalf. We do not use your data for our own marketing, and we sell it to no one.

In practice: to have your card deleted, approach the business. If you get no reply, write to us and we will step in.

For a customer holding a loyalty card:

• Phone number — it identifies your card at the counter.
• First or last name — optional, used to personalise messages.
• Your stamps and rewards — date, location, and the employee who issued them.
• Your consents, separately for each channel.
• Technical identifiers for your card — Apple Wallet, Google Wallet and web card tokens. These are keys to your own card, not information about you.
• Sign-up date and date of last visit.
• Referral code, if the business enables that feature.

We do not collect your address, your date of birth, your payment methods, or the detail of your purchases. Fedelio does not know what you consumed — only that you came in.

• To keep count of your stamps and hand you your rewards.
• To send you messages about your card, only on the channels you agreed to.
• To update your card in Apple Wallet or Google Wallet.
• To give the business statistics about its programme. These cover volumes, not your individual behaviour.

Only to technical providers, to make the service work:

• Meta (WhatsApp) — delivery of WhatsApp messages.
• Apple and Google — cards in the phone's wallet.
• Our hosting and email delivery providers, whose identity can be obtained on request.

Some of these providers are established outside Morocco, which involves a transfer of data abroad.

Your data stays for as long as your card exists at the business. It is erased at the same time as the card: deleting a business, a card or your record deletes everything attached to it — stamps, rewards, message history.

We keep no separate archive after deletion.

Under law 09-08 on the protection of individuals with regard to the processing of personal data, you have a right of access, rectification, objection and deletion.

To exercise it, approach the business holding your card, or write to us — see below.

Exchanges are encrypted in transit (HTTPS). Access to a business's data is partitioned: neither another business nor an employee of another outlet can reach it. A business's employees see its customers' phone numbers masked, and cannot browse the customer list.

For any question about your data, or to exercise your rights: [email protected]

See also the legal notice.

This page is a translation provided for convenience. In the event of any discrepancy, the French version prevails.