More Rewards privacy notice
Version: 24 October 2026
Who uses your details
Normal&More in Tetouan operates this loyalty programme at Bab El Okla and Av Al Joulan. For questions or to exercise your rights, speak to the manager at either shop or use the contact details on our contact page.
What we collect and why
We collect your name, Moroccan phone number, optional birthday, consent record, membership activity, and salted password and PIN hashes to operate your card, prevent fraud, and manage rewards. Your phone is not treated as verified ownership. Your birthday is optional; this version does not automatically issue birthday rewards. We do not enroll you in marketing through this form.
Who can see it
Authorized cashiers see your first name, membership number, and reward activity. Only administrators can view contact details and birthdays. QR codes contain a random identifier, not personal details or account access. Our hosting provider, Namecheap, stores and processes the database on our behalf on servers located in the United States, so your details are transferred outside Morocco; access is restricted to running and protecting this service.
Your choices
You can ask to access or correct your information, object to processing, or withdraw consent and close your membership. The team will verify your identity in person; knowledge of a phone number alone is not enough. Closing membership means you can no longer earn or redeem rewards.
Retention
The current inactive-membership retention period is 730 days. Administrators can anonymize suspended memberships after this period once outstanding rewards are resolved. Pseudonymous transaction and audit records remain for reconciliation and fraud review. Deletion requests and legally required retention are reviewed by the shop manager. Expired sessions and enrollment codes are removed during normal use.
Security
Your card requires a signed-in session. Staff cannot redeem a reward without your six-digit PIN. Keep your password and PIN private and tell the team if your card is compromised.