Privacy and cookie policy

Controller

The data controller is NOOR ART STUDIO SARL, operator of Riad Fatimid, registered with the Marrakech Commercial Register under No. 170193 and identified by ICE 003808976000055.

For any request relating to your personal data, you can write to [email protected].

Personal data processing

Riad Fatimid processes the data you provide when you contact the property, request information, make a reservation or communicate with the team before, during or after your stay.

The data concerned may include:

• your first name, last name, contact details, country of residence and preferred language;
• stay dates, number of guests, room preferences or service requests;
• information necessary for payment, guarantee or invoicing;
• messages, special requests and correspondence with the team;
• technical data generated when browsing the website, such as security logs and IP address.

Riad Fatimid does not sell your personal data. The website pages currently load no analytics, marketing, embedded booking or embedded social content. The social links in the footer are regular outbound links; no social content loads before a click. The contact page loads a Google Maps embed to show the riad location; that service may process technical data under Google's own rules. Data may be shared only with service providers required for technical hosting, reservations, payment, accounting or compliance with legal obligations.

Legal bases

Depending on the context, processing relies on one or more of the following legal bases:

• performance of a contract or pre-contractual steps, to respond to a request or manage a booking;
• compliance with legal obligations, including accounting, tax, administrative or safety requirements;
• Riad Fatimid's legitimate interests, to secure the website, prevent fraud, manage customer relations and defend its rights;
• your consent, where required for certain cookies, communications or optional services.

Data retention

Data is retained only for as long as necessary for the purposes pursued, then deleted or archived where required by law.

Requests and messages

Up to 3 years after the last contact, unless deletion is requested or a legal duty requires otherwise.

Bookings and stays

For the contractual relationship, then up to 5 years for evidence and claims management.

Invoices

Up to 10 years where accounting or tax rules require it.

Notice storage

The choice showing that the privacy and cookie notice has been seen stays in your browser until browsing data is cleared or the policy materially changes.

Technical logs

Generally up to 12 months, unless a longer security need or legal obligation applies.

User rights

Under the conditions provided by applicable law, you may request access to your data, rectification, erasure, restriction of processing, portability, or object to certain processing. You may also withdraw consent at any time where processing is based on consent.

To exercise your rights, contact [email protected]. Proof of identity may be requested where necessary to confirm your identity.

If you believe your rights have not been respected, you may contact the competent data protection authority, including the CNDP in Morocco or the supervisory authority of your country of residence where European data protection rules apply.

Cookies

Cookies are small files placed on or read from your device when you visit a website. They may support the technical operation of the site, security, audience measurement or the display of third-party services.

At this stage, the website operates without analytics, marketing, embedded booking or embedded social media cookies. It uses storage that is strictly necessary for the site to work and to locally remember the privacy and cookie notice. The contact page embeds Google Maps to display the riad location; this third-party service is provided by Google and may place or read its own information when the map loads.

If other optional tools are added later, for example audience statistics, a booking module or marketing tools, they will be presented through a consent management tool before loading whenever the law requires it.

Storage categories

Necessary

Required for loading the website, security, abuse prevention and locally remembering the privacy and cookie notice.

Analytics

No analytics or audience measurement tool is currently used on the website.

Marketing

No advertising pixel, retargeting tool or marketing cookie is currently used on the website.

Maps and third-party content

The contact page loads a Google Maps embed to display the riad location. The social links are outbound, and no social feed, video or other embedded third-party content is currently loaded.

Embedded booking

No third-party booking or payment module is currently embedded in the website pages.

How to manage cookies

You can configure your browser to block or delete all or some cookies. Blocking strictly necessary cookies may affect the proper functioning of the website.

The current banner is an information notice, with an OK button to hide it. It does not collect advertising or statistics consent, because no optional tool is loaded. You can also contact us at [email protected] for any question relating to cookies.

Cookies are one part of privacy protection, so they are covered in this combined privacy and cookie policy.