Privacy Policy | Marrakech Luxury Retreats

This Privacy Policy explains how Marrakech Luxury Retreats LLC (“Marrakech Luxury Retreats”, “we”, “us”, or “our”) processes personal data collected through marrakechluxuryretreats.com and the related concierge and villa-rental services we provide. We are committed to handling your information transparently and, where it applies to you, in accordance with the EU General Data Protection Regulation (GDPR), applicable Moroccan data-protection law (Law 09-08), and relevant United States requirements.

By using our website or submitting an inquiry, you acknowledge the practices described here. If you do not agree with this policy, please refrain from using the site or sending us personal data.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

Marrakech Luxury Retreats LLC — a Limited Liability Company (LLC) formed in the State of Wyoming, United States
Registered office: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
Wyoming Secretary of State Filing ID: 2026-002009637
Services operated in Marrakech, Morocco
Data protection contact: hello@marrakechluxuryretreats.com

For general privacy questions you may also reach us at hello@marrakechluxuryretreats.com or by phone on +212 6 62 51 40 92.

2. The personal data we collect

We only collect the data we need to respond to you and deliver our services. The exact fields depend on which of our forms you use:

Request a Stay — your name, email address, phone or WhatsApp number, preferred travel dates, group size, the villa or destination of interest, and any notes you add to your request.
Contact — your first and last name, email address, optional phone or WhatsApp number, and the content of your message.
List Your Villa (owner listing) — your name, email address, phone or WhatsApp number, and the details you choose to share about your property and its location.
Newsletter — your email address (and, where provided, your name).

We also automatically receive limited technical data — such as your IP address, browser type, device information, and pages viewed — through standard server logs and the strictly necessary cookies described in our Cookies Policy.

Please do not send us special categories of data (for example health, religious, or political information). Where you volunteer dietary, accessibility, or similar preferences to help us tailor a stay, we process them solely to fulfil your request.

3. How we use your data and our lawful basis

We process your personal data on the following GDPR lawful bases:

To respond to inquiries and arrange stays — performance of, or steps taken prior to entering into, a contract at your request (Art. 6(1)(b)).
To send our newsletter and marketing — your consent, which you may withdraw at any time (Art. 6(1)(a)).
To operate, secure, and improve our website — our legitimate interests in running an effective and safe service (Art. 6(1)(f)).
To comply with legal, tax, and accounting obligations — compliance with a legal obligation (Art. 6(1)(c)).

4. Service providers and data sharing

We do not sell your personal data. We share it only with trusted processors who help us run the service, each bound by a data-processing agreement and permitted to use your data only on our instructions:

Supabase — database hosting and storage of inquiries and account data.
Resend — delivery of transactional emails (such as inquiry confirmations and lead notifications).
Cloudinary — image hosting and content-delivery network for the media on our site.
Hospitable — property-management and availability data for the villas we represent.

Where you request a concierge service, we may also share the minimum information needed (for example a name and arrival time) with the relevant local partner — such as a private chef or transfer company — solely to deliver that service. We may further disclose data where required by law or to protect our legal rights.

5. International transfers

Some of our providers process data outside Morocco and the European Economic Area. Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards — typically the European Commission’s Standard Contractual Clauses — to ensure your data remains protected. You may request a copy of the relevant safeguards using the contact details in section 1.

6. How long we keep your data

We retain inquiry and booking-related data for as long as needed to handle your request and for a reasonable period afterwards to manage our relationship and meet legal, tax, and accounting obligations. Newsletter data is kept until you unsubscribe. When data is no longer required, we delete or anonymise it.

7. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data (“right to be forgotten”);
Restrict or object to certain processing;
Data portability — receive your data in a portable format;
Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email hello@marrakechluxuryretreats.com or write to us at the address in section 1. We will respond within the timeframes set by applicable law. You also have the right to lodge a complaint with the data-protection authority in your country of residence — for EU residents, your national supervisory authority; in respect of our Marrakech operations, Morocco’s Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

8. Security

We apply appropriate technical and organisational measures — including access controls, encryption in transit, and vetted infrastructure providers — to protect your personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is entirely secure, so we cannot guarantee absolute security.

9. Children

Our website and services are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by a revised “Last updated” date above, and where appropriate we will notify you directly. We encourage you to review this page periodically.

11. Contact

For any question about this policy or your personal data, contact us at hello@marrakechluxuryretreats.com or by phone and WhatsApp on +212 6 62 51 40 92.