Privacy
Policy

Riad Afoulki House, Tamraght, Morocco (“Riad Afoulki”, “we”, “us”) is responsible for the personal data described in this policy.

We process personal data in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, for guests in the European Union and the United Kingdom, with the General Data Protection Regulation (GDPR) where it applies.

When you send an inquiry through the form on our Rooms page, we receive what you enter:

• your name and email address;
• your phone number and country code, if you give them;
• your arrival date, the size of your group and the length of your stay;
• anything you write in your message.

When you book and stay with us, we may also need the details required by Moroccan law for guest registration (such as your passport or ID details and nationality), your payment information, your flight times for airport transfers, and any health or dietary information you choose to share so that activities are safe for you.

When you contact us by email, phone or messaging apps, we keep the messages so we can reply and follow up on your booking.

We use your personal data only to:

• reply to your inquiry and check availability for your dates;
• prepare, confirm and manage your booking, payments and transfers;
• organise the activities in your stay or package;
• register guests with the local authorities, as Moroccan law requires;
• look after your safety and that of other guests during your stay;
• keep accounting and tax records.

We do not sell your data, and we do not send you marketing emails unless you have asked to receive them. You can unsubscribe at any time.

• Your request and your booking: we need the data to answer your inquiry and provide the stay you book.
• Legal obligations: guest registration, accounting and tax rules.
• Your consent: for example when you tick the privacy box on our inquiry form, or share health information for an activity. You can withdraw consent at any time.
• Legitimate interests: running the house safely and improving our service, in ways you would reasonably expect.

We only share what is needed, with:

• the local partners who deliver part of your stay, such as surf schools, quad-biking operators and transfer drivers (for example your name, group size and pick-up time);
• payment providers and banks that process your payments;
• the companies that host this website and our email;
• the Moroccan authorities, when the law requires it.

Some of these providers may store data outside Morocco. When that happens we use providers that offer appropriate safeguards for your data.

• Inquiries that do not lead to a booking: up to 12 months.
• Booking and stay records: for as long as needed to manage your stay and then as long as accounting, tax and guest-registration laws require.
• Health or dietary information you share for an activity: deleted after your stay.

This website does not use advertising or tracking cookies. Fonts are served from our own website, so your visit is not shared with font providers.

Our hosting provider may keep standard technical logs (such as IP address, browser type and the pages requested) for a short time to keep the website secure and running. If we ever add analytics or other cookies, we will update this policy and ask for your consent where required.

We limit access to your data to the people who need it to look after your booking, and we use reasonable technical and organisational measures to protect it. No method of sending data over the internet is completely secure, so please do not send card numbers or passport scans through the inquiry form.

You can ask us at any time to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, unless we have to keep it by law;
• stop or limit certain uses of your data, or object to them;
• withdraw a consent you gave us.

To use these rights, email us at Contact@riadafoulki.com. We will reply within 30 days. If you are not happy with our answer, you can complain to Morocco's data protection authority, the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), or, if you live in the EU or UK, to your local data protection authority.

Inquiries and bookings must be made by an adult. We only hold data about children travelling with a parent or guardian when it is needed for their stay, and we receive it from that adult.

We may update this policy from time to time. The date at the top of this page shows when it last changed. If a change significantly affects how we use your data, we will tell guests with an upcoming booking.

For any question about your personal data:

• Email: Contact@riadafoulki.com
• Phone / WhatsApp: +212 6 00 00 00 00
• Address: Riad Afoulki House, Tamraght, Agadir, Morocco

Bookings are also covered by our Terms & Conditions.