Privacy policy

Your privacy matters to us. This policy explains what personal data the website of Riad Dar Razallah collects, why, how long it is kept, who can see it and what your rights are. It covers this website only: when you book on Booking.com or write to us through another platform, that company’s own policy applies.

The data controller is shown above.

In short

• No advertising or tracking cookies — no cookie at all is set while you browse.
• We only collect what you choose to send us through the contact form, to answer you — and it is deleted automatically after 180 days.
• We never sell or rent your data, and we do not use it for advertising.
• Bookings are made on Booking.com, never on this site.

When you browse the site

You can visit the whole site without telling us who you are. Fonts and images are served from our own server, without calls to third parties. To protect the site against abuse, the server briefly processes your IP address to limit the number of requests: it stays in memory for at most one hour and is not stored. The web server also keeps technical logs — IP address, date and time, page requested, browser — for at most 14 days, for security and to fix errors. Our application’s logs record neither your IP address nor what you type.

When you write to us

The contact form asks for your name, your e-mail address, your message and, if you wish, a phone or WhatsApp number. We also record the language and the page you write from, so we can answer in your language and understand your question. We use this information only to reply to you and to prepare your stay; the legal basis is your request and our legitimate interest in answering it.

Your message is visible only to the riad’s team, in our private back office. It is deleted automatically 180 days after you sent it. If you give a phone number, we may answer you on WhatsApp. To fight spam, the form uses an invisible field and a time check — no CAPTCHA and no third-party service.

When you click “Book”

The booking buttons take you to the riad’s page on Booking.com. Before redirecting you, we count the click with only three pieces of information: the date, the language and the page — no IP address, no identifier, no cookie. These anonymous counts tell us which pages help our guests the most, and they are deleted after two years. On Booking.com, Booking.com’s privacy policy applies to the information you give there.

Audience measurement

At present the site uses no audience measurement. If we turn it on, we will choose either a cookie-free tool that collects no personal data, or Google Analytics, which would only load after you accept it in a banner — and you could change your choice at any time with the “Cookie settings” link at the bottom of the page. This policy would be updated beforehand.

Maps and videos from other services

The map of the riad’s location is provided by Google Maps, and some pages show videos from Instagram, YouTube or Vimeo. They are only loaded when you scroll to them or press play. At that moment your browser connects to the provider, which receives your IP address and may use cookies under its own privacy policy. We use YouTube’s privacy-enhanced mode and Vimeo’s “do not track” option.

Who receives your data

Only the riad’s team. Our hosting provider stores the site and its database on our behalf and may not use them for anything else (see the Legal notice). We share nothing with advertisers or data brokers, and we would only disclose information if the law required it.

Where your data is stored

The site and its database are stored on our hosting provider’s servers. The third-party services mentioned above (Booking.com, Google, Instagram/Meta, YouTube, Vimeo) may process data in Morocco, in the European Union or in other countries, under their own safeguards.

Security

The site is served only over an encrypted connection (HTTPS). The back office is reserved for the riad’s team, with individual accounts, strongly encrypted passwords and protection against repeated sign-in attempts; the database cannot be reached from the internet.

Your rights

Under Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data — and, for visitors in the European Union, the General Data Protection Regulation (GDPR) — you have the right to access your data, to have it corrected or deleted and to object to its processing, as well as, under the GDPR, to restrict it and to receive a copy of it. To exercise these rights, write to us using the contact form or the e-mail address shown above. We will answer within one month.

If you believe your rights have not been respected, you may lodge a complaint with the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP, www.cndp.ma) in Morocco, or with the data protection authority of your country in the European Union.

Children

Riad Dar Razallah welcomes adults only, and this site is not intended for children. We do not knowingly collect information about anyone under 18.

Changes to this policy

We may update this policy, for example if we add a new service to the site. The date of the latest version is shown below.

Last updated: 7 October 2026.