Privacy Policy
Introduction
At Riad Dar Imlil (“we,” “our,” or “us”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or use our services.
By using our website or booking accommodation with us, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Personal Information
When you make a booking or contact us, we may collect:
- Name (first and last name)
- Email address
- Phone number
- Postal address
- Payment information (credit card details, billing address)
- Date of birth (if required for booking)
- Passport information (if required for certain services)
- Dietary requirements or special requests
- Emergency contact information
1.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website
- Date and time of visit
- Cookies and similar tracking technologies
1.3 Communication Information
We collect information from:
- Email correspondence
- Phone conversations
- Contact form submissions
- Social media messages
- Feedback and reviews
2. How We Use Your Information
We use your personal information for the following purposes:
2.1 Booking and Service Delivery
- Process and confirm your reservation
- Provide accommodation and services during your stay
- Arrange trekking, tours, and activities
- Communicate booking details and confirmations
- Handle special requests and preferences
2.2 Communication
- Send booking confirmations and updates
- Respond to inquiries and requests
- Provide customer support
- Send important information about your stay
2.3 Payment Processing
- Process payments securely
- Prevent fraud and unauthorized transactions
- Issue invoices and receipts
- Handle refunds or cancellations
2.4 Marketing (with your consent)
- Send promotional offers and newsletters
- Inform you about special packages and events
- Share updates about our services
You can opt-out of marketing communications at any time.
2.5 Legal and Security
- Comply with legal obligations
- Protect against fraud and security threats
- Enforce our terms and conditions
- Resolve disputes
2.6 Website Improvement
- Analyze website usage and performance
- Improve user experience
- Develop new features and services
3. Legal Basis for Processing (GDPR Compliance)
We process your personal data based on:
- Contract Performance: To fulfill our booking agreement with you
- Legitimate Interest: To improve our services and prevent fraud
- Legal Obligation: To comply with tax, accounting, and legal requirements
- Consent: For marketing communications (you can withdraw consent anytime)
4. How We Share Your Information
We do not sell your personal information. We may share your data with:
4.1 Service Providers
- Payment processors (to process transactions securely)
- Booking platforms (Booking.com, Airbnb, etc.)
- Email service providers (for communication)
- Website hosting providers
4.2 Tour and Activity Partners
- Local trekking guides
- Tour operators
- Transportation providers
- Activity organizers
We only share information necessary to provide the requested services.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority.
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website.
5.2 Types of Cookies We Use
Essential Cookies: Necessary for website functionality (e.g., booking system)
Performance Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
Functionality Cookies: Remember your preferences (e.g., language settings)
Marketing Cookies: Track your browsing to show relevant advertisements (only with your consent)
5.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
[Cookie Settings]
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Secure Socket Layer (SSL) encryption for data transmission
- Secure payment gateways that comply with PCI-DSS standards
- Access controls limiting who can view your information
- Regular security updates and monitoring
- Staff training on data protection
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only as long as necessary:
- Booking information: 7 years (for accounting and tax purposes)
- Marketing data: Until you unsubscribe or request deletion
- Website analytics: 26 months (Google Analytics default)
- Correspondence: As needed for customer service
8. Your Rights
Under data protection laws (including GDPR), you have the right to:
✓ Access: Request a copy of your personal data
✓ Rectification: Correct inaccurate or incomplete information
✓ Erasure: Request deletion of your data (“right to be forgotten”)
✓ Restriction: Limit how we use your data
✓ Portability: Receive your data in a structured format
✓ Object: Object to processing based on legitimate interests
✓ Withdraw Consent: Opt-out of marketing communications anytime
To exercise these rights, contact us at: [your email address]
9. International Data Transfers
Your information may be transferred to and stored on servers located outside your country. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
10. Third-Party Links
Our website may contain links to third-party websites (e.g., booking platforms, social media, tour operators). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.
11. Children’s Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the “Last Updated” date
- Sending an email notification (for material changes)
We encourage you to review this policy regularly.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Riad Dar Imlil
📍 Address: Dar Imlil, Dr Imlil, Morocco
📧 Email: darimlil@gmail.com
📞 Phone: +212 662058251
💬 WhatsApp: +212 662058251
14. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.
For EU residents: You can contact your national data protection authority or the Moroccan data protection authority (CNDP – Commission Nationale de contrôle de la protection des Données à Caractère Personnel).
Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
For marketing communications, we will obtain your explicit consent through:
- Opt-in checkboxes during booking
- Email subscription forms
- Direct consent requests
You can withdraw consent at any time by clicking “unsubscribe” in our emails or contacting us directly.
