Privacy policy
What we collect, why, how long we keep it, who we share it with and how to exercise your rights.
1Our commitment
Every year Ayyoka welcomes travellers, families and corporate employees: earning their trust also means protecting their data. We collect only what is necessary for your stay, we never sell or rent your data, and we comply with Ivorian Law No. 2013-450 of 19 June 2013 on the protection of personal data. Visitors residing in the European Union also benefit from the rights provided by the General Data Protection Regulation (GDPR).
Ayyoka will never ask you for your bank card number, your PIN or a mobile money validation code by WhatsApp, e-mail or telephone. If in doubt, contact us on +33 6 21 66 07 83.
2Data controller and contact
- Data controller
- AYYOKA Groupe, SARLU — full contact details in the Legal notice
- Personal data officer
- The manager of AYYOKA Groupe
- Dedicated e-mail
- info@ayyoka.com — subject line "Personal data"
- Telephone / WhatsApp
- +33 6 21 66 07 83
- Post
- AYYOKA Groupe — Personal data, Rue J96, Jemano building, apartment 47, Les Deux-Plateaux, Cocody, Abidjan
3Who this policy applies to
This policy applies to visitors to the website; to travellers who contact us, book or stay in our apartments, and to those accompanying them; to corporate clients and their employees whom we accommodate; to owners who entrust, or are considering entrusting, a property to us; and to our service providers and suppliers.
4Data collected
| Category | Examples | Source |
|---|---|---|
| Identity | Surname, first name, nationality, copy of identity card or passport | You, before arrival |
| Contact details | Telephone, WhatsApp, e-mail, country of residence | Forms, WhatsApp, e-mail |
| Stay | Dates, number of guests, apartment, arrival time, special requests | Forms, correspondence |
| Payment | Amount, payment method, mobile money number or transfer reference used to pay — never a PIN or validation code | Mobile money operator or bank |
| Business | Company, position, invoicing details | Business form |
| Owner | Address and description of the property, contact details | Owners form |
| Correspondence | Messages, reviews left after the stay | WhatsApp, e-mail, platforms |
| Technical | IP address, browser, pages visited (hosting provider logs) | Automatic |
We do not collect any sensitive data (health, opinions, religion, etc.). If health information is necessary for your stay (allergy, accessibility), it is used only with your consent and solely for that purpose.
5Why we use your data
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to your availability and information requests | Pre-contractual measures / legitimate interest | 12 months after the last exchange |
| Managing the booking, payment, check-in and stay | Performance of the contract | Duration of the stay + 5 years (limitation period) |
| Verifying guests' identity and ensuring the security of the residences | Legal obligation and legitimate interest | 1 year after departure, unless a dispute arises |
| Invoicing and accounting | Legal obligation | 10 years |
| Customer service, complaints, dispute management | Legitimate interest | Until the dispute ends + appeal periods |
| Collecting your feedback after the stay | Legitimate interest (you may object) | 3 years |
| Informing you of our offers (newsletter, promotions) | Consent | 3 years after the last contact, or until withdrawal |
| Website security, fraud prevention | Legitimate interest | 12 months (technical logs) |
| Remembering your display currency | Legitimate interest (convenience) | In your browser, until cleared |
At the end of these periods, the data is deleted or anonymised.
6Who can access your data
Data is accessible only to those who need it: the Ayyoka team (reception, cleaning and maintenance, for the information necessary for your stay); our technical service providers (website hosting provider, the Wave, Orange Money and MTN MoMo mobile money operators and banks for payments, which are made only by mobile money or bank transfer; WhatsApp messaging and e-mail), bound by confidentiality obligations; Airbnb, when the booking is made through that platform; the owner of the property, for the stay information concerning them only; our advisers (accountant, lawyer, insurer) and the administrative or judicial authorities where required by law.
Your data is never sold, rented or transferred for commercial purposes.
7Transfers outside Côte d'Ivoire
Some of our service providers (WhatsApp messaging, e-mail service, website hosting, technical libraries) may process data outside Côte d'Ivoire and the ECOWAS area, in particular in the European Union or the United States. These transfers are limited to what is necessary and carried out under the conditions laid down by Law No. 2013-450, with service providers offering appropriate safeguards (contractual clauses, confidentiality undertakings).
8Security
We implement appropriate measures: the website is served over HTTPS; access to data is restricted to the team concerned and protected by password and two-factor authentication where possible; identity documents are stored offline or in an encrypted space, then deleted when the retention period expires; payments are received only by mobile money or bank transfer, and Ayyoka retains no banking data. In the event of a data breach likely to present a risk to you, we will inform you, as well as the Protection Authority, as soon as possible. For your part, never share your codes and report any suspicious request or activity to us.
9Cookies, local storage and third-party services
| Item | Purpose | Duration |
|---|---|---|
Local storage ayk-cur | Remembers the chosen currency (FCFA or €) | Until you clear it |
| Google Fonts | Displays the website's font; receives your IP address | Session |
| OpenFreeMap / MapLibre (cdnjs) | Display the maps; receive your IP address | Session |
The website sets no advertising, profiling or audience measurement cookies, so no consent banner is required. You can clear local storage at any time from your browser settings. Should we ever add an audience measurement tool, this policy will be updated and your consent requested where the law so requires.
10Minors
Bookings are made by adults. Information about children staying with their parents (number, age for a baby cot, for example) is collected only from the parent or guardian and solely to organise the stay.
11Our principles
In accordance with Law No. 2013-450, our processing complies with the principles of lawfulness and fairness, specified purpose, proportionality, limited retention, accuracy, transparency, security and respect for your rights.
12Your rights and how to exercise them
You have the right to access, rectify and erase your data, to object to its processing (in particular to direct marketing, without having to give reasons), to restrict its processing and to data portability, as well as the right to withdraw your consent at any time.
To exercise these rights, write to info@ayyoka.com (subject line "Personal data") or send us a WhatsApp message on +33 6 21 66 07 83, stating your request. To protect your data, proof of identity may be requested. The process is free of charge; we acknowledge receipt within 7 days and respond within one month at the latest.
13Complaints
If, after contacting us, you consider that your rights have not been respected, you may refer the matter to the Personal Data Protection Authority of Côte d'Ivoire (ARTCI) — autoritedeprotection.ci — or, if you reside in the European Union, to the supervisory authority of your country.
14Changes
We may update this policy to reflect changes in the law or in our services. The date of the last update appears below; in the event of a significant change, the customers concerned will be informed by e-mail or WhatsApp. Continued use of the website or our services after publication constitutes acceptance of the updated policy.
Last updated: 7 October 2026.