PRIVACY POLICY
Last updated: 11 July 2026
Casa Coco Marrakech takes the protection of your personal data seriously. This page explains what data we collect, why, and how you can exercise your rights.
DATA COLLECTED
Via the site’s contact form First name, last name, email address, phone number (if provided), and the content of your message. This information is used solely to respond to your enquiry.
Via a direct booking (Beds24 booking engine) First name, last name, email address, phone number, stay dates, payment information (processed directly by our payment provider, see below — we never store your full banking details on our site).
Via online payment (Stripe) Card details are entered and processed directly by Stripe, our secure payment provider. We never have access to your full card number at any point. Stripe applies its own security and compliance measures (PCI-DSS standard). Learn more: Stripe’s privacy policy (stripe.com/privacy).
WHY WE COLLECT THIS DATA
- To process and confirm your booking
- To respond to your questions and requests
- To send you practical information related to your stay (access, arrival, etc.)
- To meet our legal and accounting obligations
RETENTION PERIOD
Data related to a booking is kept for [PERIOD — e.g. 3 years after the stay], unless a longer legal retention period applies (accounting). Data from a simple contact message with no booking is kept for [PERIOD — e.g. 12 months].
DATA SHARING
Your data is only shared with the providers strictly necessary for the service to function: Beds24 (booking engine and availability management), Stripe (payment processing), and, where applicable, Airbnb / Booking.com if your booking comes from these platforms. We never sell or rent your data to third parties for commercial purposes.
YOUR RIGHTS
In accordance with applicable regulations, you have the right to access, rectify, erase, and object to the processing of your personal data. To exercise these rights, contact us at: riadcasacoco@gmail.com.