Privacy policy

Last updated: 3 November 2026.

This policy explains which personal data we collect when you use reservationmarrakech.com, write to us or stay in one of the properties of our collection, why we process it and what your rights are. It is drawn up in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for persons located in the European Union or the European Economic Area, Regulation (EU) 2016/679 (GDPR).

1. Data controller

[company name], [address], Marrakech, Morocco. E-mail: contact@reservationmarrakech.com. Telephone: [telephone].

Processing is notified to the CNDP under receipt number [receipt number].

Representative in the European Union (article 27 GDPR): [name and address of the representative, where applicable].

2. Data we collect

Booking request (form, e-mail, telephone, WhatsApp): name, e-mail address, telephone number, requested dates, number and ages of travellers, requested property and services, free-text message.
Owner form: name, e-mail address, telephone number, type of property, neighbourhood, free-text message.
Preparation and performance of the stay: billing details, proof of bank transfer (never card numbers, which we never request), stay preferences, correspondence and, on arrival, the identity details of each occupant shown on their passport or identity card (surname, first names, date and place of birth, nationality, document number and dates, address), recorded for the mandatory declaration to the authorities.
Technical data: IP address, timestamp, browser and pages visited, in server logs; language preference in a cookie.

We do not collect sensitive data within the meaning of the law, other than information you choose to share with us (for example an allergy or an accessibility need) so that we can organise your stay.

3. Purposes and legal bases

Replying to your request, checking availability and sending you a quote: pre-contractual steps taken at your request.
Confirming the booking, collecting the deposit and balance, preparing and performing the stay and concierge services: performance of the contract.
Recording identities on arrival and reporting them to the authorities; keeping accounting and tax records: Moroccan legal obligations (regulations on tourist accommodation establishments and on the stay of foreign nationals, accounting and tax obligations).
Collecting the tourist tax: legal obligation.
Preventing fraud, securing the site and our exchanges, handling complaints and defending our rights: legitimate interest.
Contacting you again about a previous request or offering a similar property, without automated marketing: legitimate interest, which you may object to at any time.
Reviewing a collaboration proposal sent through the owner form: pre-contractual steps.

We send no newsletter and carry out no profiling or automated decision-making.

4. Recipients

Your data is accessible, on a need-to-know basis:

to our team (reservations, welcome, concierge, accounting);
to our operating and concierge partners who prepare and run the stay (welcome and key handover, housekeeping, drivers, chefs, treatment and excursion providers); they receive only the information needed for their service;
to our technical processors: the host of the site and its database ([hosting provider], [country]) and the e-mail delivery service Resend, Inc. (United States);
to our advisers (accountant, lawyer) and our bank for payment follow-up;
to the competent Moroccan authorities (police, tax and municipal administrations) where required by law.

We never sell or rent your data to anyone.

5. International transfers

Our business is located in Morocco. Data sent from the European Union to Morocco is transferred for the performance of pre-contractual steps or of a contract concluded at your request (article 49(1)(b) and (c) GDPR).

Data hosted or transmitted outside Morocco (site hosting in [country], e-mail delivery by Resend in the United States) is covered by the safeguards in our processing agreements (standard contractual clauses or an equivalent mechanism) and by the formalities required by the CNDP for transfers to countries that do not provide a recognised adequate level of protection.

6. Retention periods

Booking requests and owner enquiries not followed by a contract: 3 years after the last exchange.
Quotes, confirmations, rental contracts, invoices and proof of payment: 10 years, in accordance with Moroccan accounting and tax obligations.
Identity details recorded on arrival: the period required by the regulations on guest declarations, then deletion.
Complaints and disputes: the applicable limitation period.
Technical server logs: 12 months at most.

After these periods, data is deleted or anonymised.

7. Your rights

You have the right of access, rectification and objection (Law No. 09-08) and, where the GDPR applies, the rights to erasure, restriction of processing, data portability and withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, write to contact@reservationmarrakech.com or to the postal address above, stating your request and enclosing anything that allows us to identify you. We reply within one month, extendable by two months for complex requests.

You may lodge a complaint with the CNDP (www.cndp.ma) and, if you live in the European Union, with the supervisory authority of your country, for example the CNIL in France (www.cnil.fr).

8. Security

The site is served over HTTPS. Data is stored in a database protected by authentication, accessible only to authorised staff, with strong passwords and regular backups. Identity details recorded on arrival are kept with restricted access and are never published or shared beyond the recipients listed above.

We never ask for card numbers or PIN codes. If you have any doubt about a message received in our name, call us before taking any action.

In the event of a data breach likely to pose a risk to your rights, we inform you and notify the competent authority as required by law.

9. Cookies

The site sets a single, strictly necessary cookie that remembers your language (French, English or Arabic). It contains no identifying data and is not used to track you. No advertising, social media or third-party analytics cookies are used. You may delete this cookie in your browser settings; the site will then revert to the default language.

10. Minors

The site is intended for adults. Information about children taking part in a stay is provided by the responsible adult and used only to organise the stay and complete legal formalities.

11. Changes

We may update this policy to reflect changes in the law or in our services. The date of the last update appears at the top of the page. Questions? See our contact page.