🌐EN▼
🇬🇧EnglishEnglish
🇫🇷FrançaisFrench
🇲🇦العربيةArabic
🇪🇸EspañolSpanish
Book Now
Rose Garden
Book Now
🇬🇧
🇫🇷
🇲🇦
🇪🇸
Rose Garden Marrakech

Privacy Policy

Last updated: 3 November 2026

This policy explains what personal data Rose Garden Resort Marrakech collects when you visit rosegardenmarrakech.com, contact us or book a stay, why we use it, who we share it with and how you can exercise your rights. We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for guests and visitors located in the European Union or the United Kingdom, the General Data Protection Regulation (GDPR / UK GDPR).

1. Who we are

The data controller is [Company legal name], operating Rose Garden Resort Marrakech, registered with the Commercial Register of Marrakech under No. [RC number], ICE [ICE number], with its registered address at Ouaha Sidi Brahim, Route de Fès, 40000 Marrakech, Morocco.

The processing of personal data described in this policy has been declared to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) under No. [CNDP declaration number].

2. Data we collect

Information you give us

  • Bookings: name, email address, phone number, stay dates, number of guests, chosen accommodation, optional extras and any message or special request.
  • Payments: online payments are processed by Stripe. Your card details are entered on Stripe's secure page and are never received or stored by us. We receive confirmation of the payment, the amount and the last digits of the card.
  • Enquiries: information you send us through WhatsApp, phone, email or the request forms on our website (name, dates, group size, message).
  • Events and competitions: when you take part in a giveaway or sign up at one of our events, we collect your name, phone number, email, date of birth, city, Instagram username and stated preferences.
  • At check-in: identity document details, as required by Moroccan law for accommodation establishments, and the information needed to manage your stay (arrival time, services ordered, deposit).

Information collected automatically

  • Technical data: IP address, browser, device type, pages visited and the website that referred you, collected through our hosting provider's logs and, with your consent, Google Analytics.
  • Cookies: see section 6.

Information from third parties

  • When you book through an online travel agency (such as Booking.com or Expedia), that platform shares with us the details needed to honour your reservation.

3. Why we use your data

PurposeData usedLegal basis
Manage your booking, payment and stayBooking, payment and stay dataPerformance of a contract
Answer your questions and quote requestsEnquiry dataSteps taken at your request before a contract
Register guests and keep accounting and tax recordsIdentity and invoicing dataLegal obligation
Send pre-arrival information and ask for feedback after your stayName, email, phoneLegitimate interest in providing a good service
Organise giveaways and event offers, send promotional messagesEvent and competition dataYour consent, which you can withdraw at any time
Measure website audience and the performance of our advertisingTechnical data, cookiesYour consent (cookie banner)
Protect our website and prevent fraudTechnical and payment dataLegitimate interest

4. Who we share it with

We never sell your personal data. We share it only with service providers who need it to perform their service, under contract:

  • Stripe: online payment processing;
  • Hostinger: website hosting;
  • Google: website analytics (Google Analytics), advertising measurement (Google Ads) and data storage (Google Workspace / Sheets);
  • Meta: WhatsApp messaging, and advertising measurement on Facebook and Instagram if you accept marketing cookies;
  • Online travel agencies (Booking.com, Expedia and similar) when you book through them;
  • Our partners on site (for example our VIP chauffeur service) when you book a service they provide, limited to what they need to provide it;
  • Public authorities, when required by law (for example guest registration).

5. International transfers

Some of our providers (notably Stripe, Google and Meta) may process data outside Morocco and the European Union, including in the United States. These transfers are made with appropriate safeguards, such as the European Commission's standard contractual clauses or equivalent mechanisms, and in compliance with the requirements of Law 09-08.

6. Cookies & analytics

Our website uses cookies that are strictly necessary for it to work (for example, to keep your booking session and process your payment). Analytics and marketing cookies, including Google Analytics, are only placed if you accept them in our cookie banner. If you refuse, Google may receive anonymous signals without cookies so that we can measure our audience in aggregate.

The full list of cookies and their duration is available in our Cookie Policy. You can change your choice at any time:

Manage cookie preferences

7. How long we keep your data

  • Booking and stay data: for the duration of the stay and up to 3 years after it, to handle any request or dispute.
  • Invoices and accounting records: for the period required by Moroccan law (generally 10 years).
  • Enquiries that did not lead to a booking: up to 3 years after our last contact.
  • Event, competition and marketing contacts: until you withdraw your consent, or 3 years after your last interaction with us.
  • Website analytics: 14 months.

8. Your rights

Under Law 09-08 you have the right to access, rectify and object to the processing of your personal data. If you are in the European Union or the United Kingdom, you also have the right to erasure, to restriction of processing, to data portability and to withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise these rights, contact us using the details in section 12. We may ask for proof of identity, and we will reply within one month.

If you believe your rights have not been respected, you may lodge a complaint with the CNDP in Morocco (www.cndp.ma) or, if you live in the EU or the UK, with the data protection authority of your country.

You can unsubscribe from our promotional messages at any time by replying "STOP" or by contacting us.

9. Security

We take appropriate technical and organisational measures to protect your data: an encrypted connection (HTTPS) across the whole website, payments handled exclusively by Stripe, access to booking data limited to the staff who need it, and secured administrator accounts.

10. Minors

Online bookings must be made by an adult aged 18 or over. We do not knowingly collect data from children under 16 without the consent of a parent or guardian. Information about children travelling with their family is only used to organise the stay.

11. Changes to this policy

We may update this policy to reflect changes to our services or to the law. The date at the top of the page shows the latest version.

12. Contact

Rose Garden Resort Marrakech
Ouaha Sidi Brahim, Route de Fès, 40000 Marrakech, Morocco
Email: marrakechrosegarden@gmail.com
Phone / WhatsApp: +212 661 888 642