Legal Document

Privacy Policy

Last updated: April 20, 2026

Overview

This Privacy Policy describes how AWA L.D.V ("we", "us", or "our") collects, uses, and shares information about you when you use our car rental management application. This policy applies to all users worldwide, regardless of their country of residence.

We are committed to protecting your personal data and complying with applicable privacy laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

By using the AWA L.D.V application, you agree to the collection and processing of information as described in this policy.

Definitions

The following terms used in this policy have specific meanings:

• Application: The AWA L.D.V mobile and web application for car rental management.
• Company / Controller: AWA L.D.V, Morocco — the entity responsible for processing your personal data.
• Personal Data: Any information that relates to an identified or identifiable natural person (e.g., name, email, ID number).
• Processing: Any operation performed on personal data (collection, storage, use, deletion, etc.).
• Service: The AWA L.D.V Application and any related services.
• Usage Data: Data collected automatically when you use the Service (device info, IP address, app usage logs).
• User / You: Any individual or business entity accessing or using the Service.

Data We Collect

Personal Identification Data

When using our Service, we may collect the following personal information:

• Full name (first name and last name)
• Email address
• Phone number
• Physical address
• National ID number or Passport number (required for rental contracts)
• Driver's license number and expiry date
• Date of birth

Usage and Technical Data

We automatically collect technical data when you access the Application:

• IP address and approximate geographic location
• Device type, operating system, and version
• Application version and session timestamps
• Pages and features accessed within the Application
• Error logs and crash reports

Camera and Media Access

With your explicit permission, our Application accesses your device camera and photo library to support the "État des lieux" (Vehicle Condition Report) feature. Photos taken are used exclusively to document the vehicle's condition at the start and end of a rental contract. We do not use these photos for facial recognition or any other purpose.

Financial Data

We collect financial information related to rental contracts, including rental fees, payment amounts, and caution deposits. We do not store full credit card numbers or banking credentials. Payment processing, if applicable, is handled by certified third-party payment processors.

How We Use Your Data

We process your personal data for the following purposes, each with a lawful basis:

Purpose	Lawful Basis
Creating and managing rental contracts	Contract performance
User account creation and authentication	Contract performance / Legitimate interest
Sending contract confirmations and notifications	Contract performance
Compliance with legal and tax obligations	Legal obligation
Improving application performance and features	Legitimate interest
Fraud prevention and security	Legitimate interest / Legal obligation
Marketing communications (if opted in)	Consent

Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service Providers: Third-party vendors that help operate our infrastructure (hosting, email delivery, analytics). They are bound by data processing agreements.
• Legal Authorities: When required by law, court order, or governmental authority in any applicable jurisdiction.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.

We never share your personal data with advertising networks or data brokers.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Active account data: Retained for the duration of your use of the Service.
• Rental contract data: Retained for a minimum of 5 years to comply with Moroccan commercial and tax law, and up to 7 years to comply with EU and US tax retention requirements.
• Vehicle inspection photos: Retained for the duration of the related rental contract plus 1 year.
• Deleted account data: Anonymized or deleted within 30 days of a deletion request, unless legal obligations require longer retention.

Your Rights (All Users)

Regardless of your country of residence, you have the following fundamental rights regarding your personal data:

To exercise any of these rights, contact us at wassim.hazime@gmail.com. We will respond within 30 days.

European Union Users — GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, additional rights apply under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data only when we have a lawful basis (contract, legal obligation, legitimate interest, or your explicit consent).
• Data Transfers: If your data is transferred outside the EEA, we ensure adequate safeguards are in place (Standard Contractual Clauses or equivalent).
• Right to Lodge a Complaint: You have the right to file a complaint with your national Data Protection Authority (e.g., CNIL in France, ICO in the UK, BfDI in Germany).
• Consent Withdrawal: If processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Automated Decision-Making: We do not make decisions based solely on automated processing that produce significant legal effects.

Our Data Protection contact: wassim.hazime@gmail.com

California Users — CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA grants you specific rights:

• Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You can request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is required, but we honor all such requests.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Correct: You can request correction of inaccurate personal information.

To submit a CCPA request, contact us at wassim.hazime@gmail.com or by phone at +212 655 723 816. We will verify your identity and respond within 45 days (extendable by an additional 45 days with notice).

Categories of Personal Information Collected (Last 12 months):

• Identifiers (name, email, phone, address, ID number)
• Commercial information (rental contract records)
• Internet or other electronic network activity (usage data)
• Geolocation data (approximate location from IP)
• Photos (vehicle condition documentation, with consent)

Moroccan Users — Law No. 09-08

For users in the Kingdom of Morocco, data processing is governed by Law No. 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

• Data collection and processing are based on the legitimate purposes of providing car rental management services.
• Sensitive personal data (such as national ID numbers) is collected only when strictly necessary for contract formation and is protected with appropriate technical measures.
• You may exercise your rights of access, rectification, and opposition by contacting us directly.
• You may also address complaints to the CNDP at: www.cndp.ma

Security of Your Personal Data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These include:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage for sensitive credentials
• Role-based access control — only authorized personnel can access personal data
• Regular security assessments and updates
• Secure JWT-based authentication for application access

No method of transmission over the Internet is 100% secure. In the event of a data breach that poses a high risk to your rights, we will notify affected users and relevant authorities within 72 hours as required by applicable law.

Children's Privacy

The AWA L.D.V Application is intended for use by adults and businesses involved in car rental operations. Our Service does not address anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete such data without undue delay.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. We will notify you of significant changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an in-app notification or email (for material changes)

Your continued use of the Service after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team: