1. Data controller
The controller for personal data collected via the Enkyos Périnatalité platform is Enkyos Périnatalité, headquartered in Casablanca, Kingdom of Morocco.
Processing complies with Moroccan law no. 09-08 on the protection of individuals regarding personal data and the decisions of the Commission Nationale de Contrôle de la Protection des Données à caractère Personnel (CNDP).
Data protection contact: contact@enkyos-perinatalite.ma.
2. Data collected
Identification data: first name, last name, email, phone number, date of birth, city, profile picture.
Account data: identifier, password (hashed and salted), role (patient, practitioner, administrator), login history.
Professional data (practitioners only): qualifications, specialty, services, indicative pricing, availability, office address, RC/ICE, approval status.
Health data (patients only): consultation reason declared at booking, appointment history. These data are deemed sensitive under article 1 of law 09-08 and benefit from enhanced protection.
Connection data: IP address, browser type, pages visited, timestamps. Used solely for security and audience measurement.
Communication data: messages exchanged via the platform, content of email and SMS notifications.
3. Purposes
Creation and management of user accounts (patients, practitioners, administrators).
Connecting patients with practitioners and managing appointment bookings.
Sending transactional notifications (confirmations, reminders, cancellations) by email and SMS.
Practitioner administrative validation and fraud prevention.
Service improvement, audience measurement and aggregated statistical analysis.
Compliance with Moroccan legal and regulatory obligations.
4. Legal basis
Performance of the contract between the user and Enkyos Périnatalité (Terms of Use).
Explicit consent of the data subject for health data and non-transactional communications.
Legitimate interest of the publisher for security, fraud prevention and service improvement.
Legal obligation when retention is required by Moroccan law (accounting periods, anti-money laundering, etc.).
5. Data recipients
Authorized personnel of Enkyos Périnatalité (administration, support, validation).
Practitioners, exclusively for data strictly necessary for the appointment requested by the patient.
Technical sub-processors (hosting, email delivery, SMS delivery, antispam, monitoring, backups), bound by contractual commitments compliant with law 09-08.
Administrative or judicial authorities upon legal request.
No data is sold, rented or transferred to third parties for commercial purposes.
6. Transfers outside Morocco
Some data may be hosted or processed outside the Kingdom of Morocco, particularly in the European Union. Such transfers are made only to countries recognized by the CNDP as providing adequate protection, or framed by contractual clauses approved by the CNDP.
7. Retention period
Active accounts: registration period plus 36 months after last activity.
Accounting and billing data: 10 years, in accordance with Moroccan tax obligations.
Health data linked to appointments: 5 years after the last appointment, then secure archiving or deletion.
Connection data: 12 months maximum.
Beyond these periods, data is irreversibly deleted or anonymized.
8. Rights of data subjects
Under articles 7 to 10 of law 09-08, you have the following rights: access, rectification, objection on legitimate grounds, erasure, restriction of processing, portability.
To exercise these rights, send your request together with a copy of valid ID to: contact@enkyos-perinatalite.ma. A response will be provided within 30 days.
If you disagree with the response, you may file a complaint with the CNDP (www.cndp.ma).
9. Security
Enkyos Périnatalité implements technical and organizational measures appropriate to the sensitivity of the data: encrypted communications (HTTPS/TLS), password hashing, access controls, logging, regular backups, staff awareness.
No system being infallible, the publisher cannot guarantee absolute security. Significant incidents are notified to the CNDP under the conditions provided for by law 09-08.
11. Policy updates
This policy may be updated to reflect service evolution, legal changes or CNDP decisions. Substantial changes are notified to users by email or via a banner on the platform.
12. Contact
For any data-related request: contact@enkyos-perinatalite.ma.
Supervisory authority: Commission Nationale de Contrôle de la Protection des Données à caractère Personnel (CNDP) — www.cndp.ma.