Privacy policy
This policy describes how Clinique Achark in Oujda collects, processes and protects your personal data, in accordance with Moroccan Law 09-08 and the EU GDPR.
1. Data controller
The data controller is Clinique Achark, located at 6 Rue Saad Zaghloul, 60000 Oujda, Morocco — represented by its Medical Director, Dr. Achark.
2. Data collected
- Appointment form: name, phone, email, reason, language.
- Cookies & browsing: session ID, language/theme preference, no advertising tracking.
- Direct communication: content of email or WhatsApp messages.
3. Purposes
- Organising your appointment booking and callback.
- Preparing your administrative file (CNSS, AMO, RAMED, insurers).
- Improving reception quality.
- Meeting our legal archival obligations.
4. Legal bases
Processing relies on your consent, performance of a care contract, or legitimate interest. Sensitive health data is processed only on explicit consent or to save a life, per Article 12 of Law 09-08.
5. Recipients
Your data is never sold or rented to commercial third parties. It may be shared with the medical and administrative team, with insurers (CNSS, CNOPS, RAMED), and with health authorities under legal obligation.
6. Retention
- Unconfirmed appointments: 30 days.
- Patient file: 20 years after the last consultation.
- Cookies: 12 months maximum.
7. Your rights
You have rights of access, rectification, erasure, restriction, portability and objection. Write to info@cliniqueachark.ma with a copy of your ID. Reply within 30 days.
You may also lodge a complaint with the CNDP (cndp.ma).
8. Security
The site is served over HTTPS on every page. Sensitive data is encrypted in transit. Access to the medical file is protected by strong authentication and audit logs.
9. Updates
This policy may be updated. Current version: 1 May 2026.
