Privacy Policy

Last updated: 18/11/2025

This Privacy Policy explains how Les Essences d’Agdal (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website essencesagdal.com, contact us, or book a stay at our guesthouse in Marrakech, Morocco.

By using our website or our services, you agree to the practices described in this Privacy Policy.

1. Who we are

Les Essences d’Agdal is a guesthouse (riad) located in Marrakech, Morocco.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us:

• Via the contact form on our website
• Email: contact@essencesagdal.com

2. Personal data we collect

We may collect and process the following categories of personal data:

2.1. Information you provide directly

• Contact details: first name, last name, email address, phone number.
• Booking information: dates of stay, number of guests, room type, preferences or special requests.
• Messages and correspondence: content of emails or messages sent through our contact form or booking tools.

2.2. Information collected automatically

• Technical data: IP address, browser type, device type, operating system.
• Usage data: pages visited, time and date of visit, time spent on pages, clicks and navigation paths.
• Cookies and similar technologies: see our separate Cookies Policy for more details.

2.3. Data from third parties

In some cases, we may receive information about you from:

• Online booking platforms (e.g. OTAs or partners) if you book your stay through them.
• Travel agencies or intermediaries that manage your booking.

3. How we use your data

We use your personal data for the following purposes:

• To manage your booking: confirm your reservation, communicate with you before and during your stay, and process your payments when applicable.
• To provide our services: prepare your room, address your requests, and ensure the smooth running of your stay.
• To respond to your messages: answer questions sent via the contact form, email or phone.
• To improve our website and services: analyse how visitors use our website so we can improve content, navigation and user experience.
• To comply with legal obligations: accounting, invoicing, and obligations related to local regulations.
• To protect our rights and security: prevent fraud, misuse of our website or services, and manage disputes.

4. Legal bases for processing

Depending on the situation, we process your data on one or more of the following legal bases:

• Contract: when processing is necessary to manage and fulfil your booking or your stay.
• Legitimate interest: to improve our services, secure our website, and ensure the proper functioning of our business.
• Legal obligation: when we are required to keep certain information (for example, accounting or local guest registration rules).
• Consent: for certain uses of cookies or for optional communications, where consent is required by law.

5. Sharing your personal data

We do not sell your personal data.

We may share your data with:

• Service providers who help us operate the website or manage bookings (for example: hosting providers, booking engines, payment processors).
• Professional advisors (such as accountants or lawyers), where necessary.
• Public authorities if required by law or if we need to protect our rights, our property or the safety of our guests.

We only share the information that is strictly necessary for the purpose in question and we take reasonable steps to ensure that these third parties protect your data.

6. Data retention

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy, in particular:

• Booking and stay information for the duration of your stay and for a reasonable period thereafter (for example, to manage any complaints or legal obligations).
• Accounting and invoicing data for the period required by applicable law.
• Technical and analytical data for a limited period to improve and secure our website.

When data is no longer needed, we delete it or anonymise it.

7. Cookies and similar technologies

Our website uses cookies and similar technologies to function properly, to measure audience and to improve the user experience.

For more details on the types of cookies we use, their purpose and how you can manage them, please see our separate Cookies Policy.

8. Your rights

Depending on applicable law, you may have the following rights regarding your personal data:

• Right of access: to know what data we hold about you.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data, when legally possible.
• Right to restriction: to limit certain types of processing, in specific cases.
• Right to object: to certain processing based on legitimate interests.
• Right to withdraw consent: when processing is based on your consent (for example, certain cookies or optional communications).

To exercise your rights, please contact us using the details given in the “Who we are” section. We may ask you for proof of identity before responding to your request.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration.

However, no system is completely secure, and we cannot guarantee absolute security of data transmitted via the internet. You are responsible for taking appropriate precautions when browsing online.

10. International transfers

Our website may be hosted on servers located outside your country of residence. In such cases, we take reasonable steps to ensure that your data is protected in accordance with this Privacy Policy and applicable law.

11. Children’s data

Our website and services are not specifically directed at children. We do not knowingly collect personal data from children without the consent of a parent or legal guardian where required by law.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates the latest revision.

We encourage you to review this page regularly to stay informed about how we protect your data.

13. How to contact us

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:

• Email: contact@essencesagdal.com
• Or via the contact form available on our website.