Privacy Policy

We collect the following information:

• Identification data: name, surname, email during registration

• Connection data: IP address, browser type, pages visited

• Navigation data: pages viewed, favorite riads, searches performed

• Cookies: to improve your experience and analyze traffic

Your data is used to:

• Manage your account and bookings

• Improve our services and personalize your experience

• Send you information about our services (with your consent)

• Analyze traffic and understand site usage

• Comply with our legal obligations

We implement technical and organizational security measures to protect your data:

• SSL encryption for all communications

• Secure hosting with Vercel (ISO 27001 certified)

• Limited access to personal data (principle of least privilege)

• Regular and secure backups

• Continuous security monitoring

In accordance with GDPR, you have the following rights:

• Right of access: obtain a copy of your data

• Right of rectification: correct inaccurate data

• Right to erasure: delete your data ('right to be forgotten')

• Right to restriction: limit the processing of your data

• Right to portability: retrieve your data in a structured format

• Right to object: object to the processing of your data

To exercise these rights, contact us at: contact@riad-in-morocco.com

We use cookies for:

• Essential cookies: necessary for site operation (session, authentication)

• Analytical cookies: measure audience (Google Analytics, privacy-friendly)

• Preference cookies: remember your choices (language, filters)

You can configure your browser to refuse cookies, but this may affect some site features.

We never sell your personal data.

Your data may be shared with:

• Riad owners when booking

• Booking platforms (Booking.com, Airbnb) if you click on their links

• Our technical providers (hosting, analytics) under strict confidentiality agreement

• Legal authorities if required by law

We keep your data:

• Active account: as long as your account is active

• Inactive account: deletion after 3 years of inactivity

• Navigation data: 13 months maximum

• Legal data: duration imposed by law

Your data may be transferred and stored on servers located outside the European Union.

In this case, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield, etc.).

We reserve the right to modify this privacy policy at any time.

Changes will be posted on this page with the update date.

We encourage you to regularly consult this page.

For any questions regarding this privacy policy or your personal data:

Email: contact@riad-in-morocco.com

We are committed to responding as soon as possible.