# Privacy Policy

> https://aslan.ma/legal/privacy

## Introduction

ASLANPAY SARL, as principal agent of a payment institution licensed by Bank Al-Maghrib, is committed to protecting your personal data and respecting your privacy.

This privacy policy explains how we collect, use, and protect your personal information in accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data and the General Data Protection Regulation (GDPR).

## Data Controller

Name

Legal status

ASLANPAY SARL, principal agent of a payment institution licensed by Bank Al-Maghrib

Email

CNDP Declaration

## Data Collected

When you join the waitlist, we collect:

Your email address

Your language preference (French, Arabic, or English)

The date and time of your registration

Your IP address (for security and compliance purposes)

## Purpose of Processing

Send you information about Aslan's launch

Notify you with priority when we launch our services

Communicate exclusive news about our financial products and services

Legal basis: Your explicit consent (Article 3 of Law 09-08 and Article 6(1)(a) of GDPR)

## Legal Basis

The processing of your data is based on your explicit consent, given freely, specifically, informed, and unambiguously when you register.

In accordance with Article 3 of Law 09-08 and Article 6(1)(a) of GDPR.

## Data Recipients

Your data may be shared with the following service providers:

Email sending service (United States), protected by standard contractual clauses

Web analytics (hosted in Morocco), privacy-friendly cookieless solution

## Data Retention

We retain your data for the following periods:

Active subscribers: Until you unsubscribe or 6 months after launch

After launch: An additional 6 months to finalize communication

Unsubscribed: 30 days (to prove compliance)

## Your Rights

In accordance with Law 09-08 (Articles 4-7) and GDPR (Articles 15-22), you have the following rights:

### Right of access

You can request a copy of your personal data

### Right to rectification

You can correct inaccurate data

### Right to erasure

You can request deletion of your data

### Right to object

You can object to the processing of your data

### Right to data portability

You can receive your data in a structured format

To exercise your rights, contact us at privacy@aslan.ma. We will respond within 30 days.

## Data Security

We implement appropriate security measures to protect your data:

HTTPS encryption for all data transmissions

Strict access control to personal data

Continuous security monitoring

Protection against abuse (rate limiting)

## CNDP Contact

If you have concerns about the processing of your data, you can contact the Moroccan supervisory authority:

## Changes to this Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised update date.

## Contact Us

For any questions regarding this privacy policy or to exercise your rights: