Privacy policy

1. Legal framework

The processing of personal data from the riadozan.com website is subject to the provisions of Law No. 09-08 on the protection of individuals with regard to the processing of personal data in Morocco.

2. Data controller

3. Data collected

We only collect the data you voluntarily provide through our forms:

• Contact form: name, e-mail address and message.
• Booking request: name, e-mail address, phone, stay dates, room(s) and number of guests, as well as any free-text message.

4. Purposes of processing

• responding to your contact requests;
• processing and managing your booking requests;
• following up on your stay and issuing your invoice;
• sending you the corresponding confirmation e-mails.

5. Legal basis

Processing is based on your consent and on the performance of the pre-contractual and contractual measures relating to your booking.

6. Recipients and processors

Your data is never sold. It is accessible to the Riad Ozan team and to our technical providers, acting as processors:

• Supabase — database hosting;
• Resend — sending transactional e-mails;
• Vercel — website hosting.

7. Retention period

Data is kept for as long as necessary to process your request and manage your stay, then archived or deleted in accordance with applicable legal obligations.

8. Security

We implement appropriate technical and organisational measures to protect your data against any unauthorised access, alteration or disclosure.

9. Your rights

In accordance with Law No. 09-08, you have the right to access, rectify, object to and delete your data. To exercise these rights, write to us at contact@riadozan.com. You may also refer the matter to the Moroccan National Data Protection Commission (CNDP).

10. Cookies

The site only uses cookies strictly necessary for its proper operation (in particular for the administration area). No advertising or tracking cookies are placed.