Privacy Policy

Last updated: July 2026

The Riad Society attaches great importance to protecting your personal data. This policy describes how we collect, use and protect your information.

1. Data controller

The Riad Society
96 Derb Kballa Alkasba Al Madina 40000 Marrakech-Médina, Morocco
contact@theriadsociety.com

2. Data collected

We collect the following data:

Via the contact form: surname, first name, email address, telephone number, company (optional), preferred language, preferred contact method, message.
Via the Lodgify booking platform: information required for the booking (identity, contact details, payment data). This data is processed directly by Lodgify in accordance with its own privacy policy.
Browsing data: IP address, browser type, pages visited, length of visit, via cookies (see our cookie policy).

3. Purposes of processing

Your data is used to:

Respond to your contact and booking requests
Manage the business relationship and bookings
Send information about our offers and news (if you have consented)
Improve our website and services
Comply with our legal obligations

4. Legal basis

Performance of a contract: processing of bookings
Consent: sending newsletters and use of non-essential cookies
Legitimate interest: improving our services, website security
Legal obligation: retention of certain accounting and contractual data

5. Retention period

Contact data: 3 years from the last contact
Booking data: 10 years (accounting obligation)
Browsing data: 13 months maximum

6. Recipients of the data

Your data may be shared with:

Lodgify: booking management platform (processor)
Forminator / WPMU Dev: form management tool (processor)
Our technical service providers (hosting, maintenance)

No data is sold to third parties.

7. Transfers outside the EU

Some of our service providers (Lodgify) may process data outside the European Union. These transfers are subject to appropriate safeguards (standard contractual clauses, Privacy Shield).

8. Your rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your data
Right to rectification: correct inaccurate data
Right to erasure: request the deletion of your data
Right to restriction: restrict the processing of your data
Right to data portability: receive your data in a structured format
Right to object: object to the processing of your data

To exercise these rights, contact us at: contact@theriadsociety.com

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction.

10. Changes

We reserve the right to amend this policy at any time. Any change will be published on this page with a new update date.