1. Introduction
Yo Book SARL (“Mymeal”, “Company”, “we”, “us”, or “our”), a limited liability company under Moroccan law whose registered office is located at C/o Plateau N°04, 1st Floor Dar Raiss, Avenue 29 Février, Talborjt - Agadir, Morocco, is committed to protecting and respecting the privacy of our Restaurant Partners. This Privacy Policy explains how we collect, use, store, share, and protect the personal data of restaurant owners, managers, and authorized representatives (“you” or “your”) who register on the Mymeal platform through the Restaurant Owner registration form.
This Privacy Policy is drafted in compliance with Moroccan Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data (“Data Protection Law”) and its implementing Decree No. 2-09-165 of May 21, 2009, as enforced by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (“CNDP”).
By submitting the Restaurant Owner registration form, you consent to the collection and processing of your personal data as described in this Privacy Policy.
2. Data Controller
The data controller responsible for the processing of your personal data is:
Yo Book SARL
Owner of the brand name: Mymeal
Registered office: C/o Plateau N°04, 1st Floor Dar Raiss, Avenue 29 Février, Talborjt - Agadir,
Morocco
Contact: support@yobook.ma
3. Personal Data We Collect
3.1 Data Provided Through the Registration Form
When you submit the Restaurant Owner registration form, we collect the following personal data of the Authorized Representative:
- First name and last name
- Email address
- Phone number
- Role within the restaurant (e.g., Owner, Manager)
- Restaurant name
- City
3.2 Data Collected During the Sales and Contract Process
If your application is approved and you proceed with the sales consultation and Partnership Agreement signing, we may additionally collect:
- Selected partnership plan and subscription preferences
- Signed Partnership Agreement and related contractual documents
- Business registration documents, trade register number (RC), and tax identification number (ICE)
- Banking and financial information for invoicing and payment processing
- Identity documents of the Authorized Representative for contract verification purposes
3.3 Data Collected During the Partnership
Once your Partner Account is activated, we may additionally collect:
- Additional contact details of authorized personnel
- Restaurant details (full address, operating hours, menu, photos, descriptions, capacity)
- Reservation data and performance metrics (confirmation rates, cancellation rates, no-show rates)
- Communication records between you and Mymeal or between you and Diners through the Platform
- Feedback and support requests
3.4 Data Collected Automatically
When you access the Partner Dashboard or the Platform, we may automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and actions taken on the Partner Dashboard
- Login timestamps and session data
4. Purposes of Data Processing
We process your personal data for the following purposes:
- Evaluating and processing your registration application
- Conducting the sales consultation and presenting partnership plans
- Preparing, executing, and managing the Partnership Agreement
- Creating and managing your Partner Account
- Facilitating communication between Mymeal and your restaurant
- Managing and displaying your restaurant Listing on the Platform
- Processing reservations and enabling reservation management through the Partner Dashboard
- Invoicing and processing payments related to Platform fees
- Providing technical support and customer service
- Sending operational communications (reservation notifications, system updates, policy changes)
- Sending marketing communications about Mymeal services and features (with your consent)
- Analyzing Partner performance and Platform usage to improve our services
- Ensuring the security of the Platform and preventing fraud
- Complying with legal obligations under Moroccan law, including tax and commercial regulations
5. Legal Basis for Processing
In accordance with Moroccan Law No. 09-08, we process your personal data based on the following legal grounds:
- Contractual Necessity: Processing is necessary for the performance of the partnership agreement between you and Mymeal, including account creation, reservation management, and invoicing.
- Consent: You have given your explicit consent to the processing of your personal data for specific purposes, such as receiving marketing communications.
- Legal Obligation: Processing is necessary for compliance with legal obligations under Moroccan commercial, tax, and data protection laws.
- Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving the Platform, analyzing performance, and ensuring security, provided these interests are not overridden by your fundamental rights and freedoms.
7. International Data Transfers
Your personal data is primarily stored and processed within Morocco. If we need to transfer your data outside Morocco (for example, to service providers operating in other countries), we will do so only in compliance with Law No. 09-08 and with the prior authorization of the CNDP where required. We will ensure that the receiving country provides an adequate level of data protection or that appropriate contractual safeguards are in place.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, subject to applicable legal requirements:
- Registration data (for rejected applications): Deleted within 6 months of the rejection decision, unless needed for legal purposes.
- Partner Account data: Retained for the duration of the active partnership, plus a maximum of 5 years after account termination for legal, accounting, and tax compliance purposes.
- Financial and invoicing data: Retained for 10 years in accordance with Moroccan commercial law requirements.
- Reservation performance data: Retained for up to 3 years from the date of the reservation.
- Marketing consent records: Retained for the duration of your consent plus 3 years after withdrawal.
- Automatically collected data (logs, analytics): Retained for up to 13 months.
When data is no longer needed, it will be securely deleted or anonymized.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (SSL/TLS) and at rest
- Role-based access controls limiting data access to authorized Mymeal personnel only
- Regular security assessments and vulnerability testing
- Secure hosting infrastructure located in compliance with applicable regulations
- Confidentiality obligations for all employees and service providers with access to personal data
While we take all reasonable precautions, no system is completely secure. In the event of a data breach affecting your personal data, we will notify the CNDP and affected individuals in accordance with applicable Moroccan law.
10. Your Rights
Under Moroccan Law No. 09-08, you have the following rights regarding your personal data:
- Right of Access: You have the right to request access to the personal data we hold about you and to obtain a copy.
- Right of Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
- Right of Deletion: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
- Right of Opposition: You have the right to object to the processing of your personal data, particularly for marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at support@yobook.ma. We will respond to your request within the timeframe prescribed by Moroccan law.
You also have the right to file a complaint with the CNDP if you believe your data protection rights have been violated.
11. Your Responsibilities Regarding Diner Data
When Diners make reservations at your restaurant through the Platform, you will receive certain Diner personal data (such as name, phone number, party size, and reservation details). You acknowledge and agree that:
- This data is provided solely for the purpose of fulfilling the reservation and providing related services.
- You must handle this data in full compliance with Moroccan Law No. 09-08.
- You must not use Diner data for unsolicited marketing, profiling, or any other unauthorized purpose without obtaining separate, explicit consent from the Diner.
- You must implement appropriate security measures to protect Diner data in your possession.
- You must delete or anonymize Diner data when it is no longer needed for the purposes described above.
- In the event of a data breach involving Diner data in your possession, you must notify Mymeal promptly.
13. Marketing Communications
With your consent (provided through the registration form checkbox), we may send you email newsletters and marketing communications about Mymeal services, new features, partnership opportunities, and industry insights. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@yobook.ma.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you via email or through the Partner Dashboard with at least thirty (30) days’ prior notice. Continued use of the Platform after changes take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree, you may terminate your Partner Account before the changes take effect.
15. CNDP Registration
In compliance with Moroccan Law No. 09-08, Mymeal has filed the necessary declarations and is in the process of obtaining authorizations from the CNDP for the processing of personal data carried out through the Platform. Our compliance efforts and registration details are available upon request.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:
Yo Book SARL
C/o Plateau N°04, 1st Floor Dar Raiss
Avenue 29 Février, Talborjt - Agadir, Morocco
Email: support@yobook.ma
Website: www.mymeal.ma
You may also contact the CNDP directly: Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) / Website: www.cndp.ma