Privacy policy

The data controller is Berber Stays, E103 Technopark, Essaouira 44000, Morocco.

Questions about your data: contact@berberstays.com.

Property-management form: name, email, phone, property details, optional photos, package preference and free-text message.

Stay enquiry (including demo holds): name, email, dates, guest count and property.

Technical data: approximate IP, security logs (anti-abuse), session and language cookies required to run the site.

We do not collect card numbers on the site until online payment is enabled.

Responding to enquiries and arranging a stay or management service (pre-contractual steps / contract).

Securing the site and preventing spam or abuse (legitimate interest).

Meeting legal obligations where applicable.

We only contact you about your request; no marketing emails without separate consent.

Data is handled by the Berber Stays team and technical providers (hosting, database, email) solely to deliver the service.

WhatsApp chats use Meta’s WhatsApp platform under its own terms when you choose that channel.

We do not sell personal data.

Owner leads and related notes: up to 36 months after the last useful contact, unless a longer legal duty applies.

Bookings / holds: as needed to manage the stay, then limited archiving for evidence and accounting once payments exist.

Security logs: short, proportionate retention.

Under Moroccan Law 09-08 and, where applicable, the GDPR for people in the EU/EEA/UK, you may request access, rectification, erasure, restriction, objection or portability when those rights apply.

Email contact@berberstays.com with proof of identity and your request. We respond within a reasonable time.

You may also complain to Morocco’s CNDP or your local data-protection authority.

We apply appropriate measures: restricted admin access, hashed passwords, HTTPS security headers, public-form rate limits and private storage for owner attachments.

No system is perfect—please report any suspected incident promptly.