Privacy

Last update: October 30, 2025

1) Who processes your data?

Le site AtMarrakech.com is published and operated by At Marrakech (hereinafter« At Marrakech », « we »).
Main contact (data & privacy) :
atmarrakechcom@gmail.com

2) Applicable legal framework

We process your data in accordance with Moroccan law (in particular Law No. 09-08 on the protection of individuals with regard to the processing of personal data) and, where necessary for certain visitors/customers located in the European Economic Area, taking into account the principles of the RGPD.

3) What data do we collect?

Depending on your use of the Site, we may collect :

    • Identification and contact data: last name, first name, email, telephone, preferences, city/country.
    • Request/booking details: desired date/time, number of people, choice of experience, notes or special requirements.
    • Exchanges: messages sent via form, email, or messaging systems (e.g. WhatsApp).
    • Browsing data: pages visited, duration, clicks, cookie/tracker identifiers, IP address (truncated/anonymized depending on settings), browser/device type.
    • Payment details (if online payment offered): only via a secure payment provider; At Marrakech does not store your card numbers.

  • Affiliate attribution data (if you click on an affiliate link/partner tool): campaign/link ID, URL parameter, cookie ID, timestamp, conversion information aggregated or pseudonymized provided by our partners (we do not receive your credit card data).

4) Purpose and legal basis

We use your data for :

    1. Provide our services (management of requests and reservations, confirmations, customer service). Legal basis: performance of a contract or pre-contractual measures.
    2. Reply to your messages and assist you (advice, modifications, follow-up). Basis: contract/legitimate interest.
    3. Inform you of offers similar to your previous requests (email/WhatsApp). Basis: legitimate interest with possibility of opposition at any time.
    4. Site operation and security (statistics, abuse prevention, security). Basis: legitimate interest.
    5. Marketing/cookies: audience measurement, experience enhancement, personalized content. Base : consent when required.
    6. Legal and accounting obligations: retention of certain data/invoices. Basis: legal obligation.

  1. Affiliate monetization: sales attribution and reporting. Basis: legitimate interest in the economic operation of the service + consent of cookies when required.

5) Cookies & tracers

We use technical cookies (essential) and, with your consent, audience measurement cookies and, where applicable, personalization and marketing cookies.

    • A banner/consent manager allows you to accept/refuse cookies by category, and to modify your choices at any time via the «Cookie settings» link at the foot of the page.
    • Cookies have limited lifespans (generally 6 to 13 months for the purpose, 25 months for certain aggregate reports). For more information (list, duration, partners), please consult our Cookies Policy.

  • Affiliation: our partners may set cookies/URL parameters for the’allocation reservations (typical durations approx. 30-31 days, depending on the program).

6) Recipients of your data

    • Team At Marrakech (qualified personnel, need to know).
    • Technical subcontractors (hosting, emailing, analytics, anti-spam, CRM/support tools) bound to confidentiality and security.
    • Establishments where you book or request information.
    • Competent authorities when required by law. We do not sell your data.

  • Typical providers used or likely to be used: host/server, CDN/firewall, audience measurement (e.g. Google Analytics 4 or equivalent tool), forms & reservations, messaging, emailing/newsletter, and affiliation (only if a link/widget is in place).

7) Messaging (WhatsApp, email) & calls

If you choose to contact us by WhatsApp or email, certain information (number, identifier, metadata, content) is processed according to the policy of the service concerned. We only exchange the information necessary to process your request. You may object to further exchanges at any time.

8) Transfers outside Morocco

Some subcontractors (hosting providers, emailing/analytics/affiliation solutions) may be located outside Morocco and/or the EU. We ensure that appropriate guarantees are in place (contracts, standard contractual clauses, certifications, suitable recognized countries) and that these partners offer a reasonable level of protection. Where the RGPD applies, we give preference to the’anonymization/aggregation where possible (e.g. anonymized IP for audience measurement).

9) Shelf life

    • Requests/exchanges: up to 24 months after last contact (except in the event of dispute).
    • Reservation/sales data: 5 years (commercial/accounting reference); invoices as required by law.
    • Cookies/analytics: depending on purpose (see Cookies Policy). For GA4/équivalent, retention set according to our needs (e.g. 14 to 25 months).

  • Affiliate attribution: depending on the partner program (typical duration of 30-31 days for the attribution cookie).

Beyond that, we anonymize or delete your data.

10) Your rights

  • Access to your data,
  • Correction of inaccurate data,
  • Delete when applicable,
  • Opposition to processing for legitimate reasons,
  • Withdrawal of your consent at any time for processing based on consent (e.g. marketing cookies). To exercise your rights: write to
    atmarrakechcom@gmail.com
    with a copy of a proof of identity if necessary. We will reply within the legal deadlines.

If you live in the EU, you can also lodge a complaint with the competent supervisory authority (e.g. CNIL in France). In Morocco, you can contact the CNDP under law 09-08.

11) Safety

We apply reasonable technical and organizational measures: encryption in transit (HTTPS), access control, backups, logging, good development practices. As no system is infallible, we recommend that you use strong passwords and do not share unnecessary sensitive information.

12) Minors

The Site is intended for an adult audience. If you are a legal guardian and believe that a minor has transmitted data to us without authorization, please contact us to have this information deleted.

13) External links

The Site may contain links to other sites/services. Their privacy policies apply; we are not responsible for them.

14) Modifications to this policy

We may update this policy for legal, technical or organizational reasons. The date of the update at the top of the document is authoritative. In the event of a substantial change, information may be posted on the Site.

15) Contact

If you have any questions about your personal data:
At Marrakech - Privacy
Email :
atmarrakechcom@gmail.com

Appendix - Example of cookie categories

    • Essentials security, session, basket, language preference.
    • Audience measurement anonymized/aggregated statistics, user paths
      (e.g. GA4 with anonymized IP where possible).
    • Personalization : adapted content/experience.
    • Marketing campaign follow-up, recommendations.

  • Affiliation booking allocation via URL links/parameters and partner cookies (typical duration ~30-31 days).