Data Access & Control
You stay in control. Request access or rectification of your data, or object to its processing.
Your rights
Under Moroccan Law 09-08, you can at any time exercise the following rights over the data concerning you:
- Access — receive a copy of the data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Objection — object to a processing activity, in particular marketing messages. Deletion of your card and record follows from that objection or from the end of the purpose.
What this means for your card
When you object and we end the use of your data:
- We deactivate your loyalty card: the pass becomes inactive and shows greyed out in your wallet.
- We delete your customer record — name, phone, date of birth — from our systems.
- Transaction records may be kept for merchant audit, but scrubbed of all personal data: they can no longer identify you.
Deletion is permanent. To use the programme again, you will need to re-enroll.
Submitting a request
Give us the following. It lets us locate your record and confirm it is really you.
- Name — as provided at enrollment.
- Phone — the number used at enrollment (your primary identifier).
- Merchant / establishment — the name of the merchant you enrolled with.
- Request type — access · rectification · objection.
- Details — any useful specifics (for example the data to correct).
Use the form below, or write to us at direction@wafiy.ma.
Identity verification
To protect your data, we may ask you to confirm your identity before we process the request — for example by verifying the phone number used at enrollment. This step stops a third party from accessing or deleting your data in your place.
Response time
We aim to process your request within 30 days of receiving it and verifying your identity.
Contact
Data point of contact: direction@wafiy.ma. You may also contact the merchant you enrolled with directly. See our privacy policy.