Privacy policy

1. Data controller

The data controller is Marhaban Company SARL AU, whose registered office is in Essaouira, Morocco. Contact: info.contact@marhabancompany.com.

2. Data collected

Your data is only collected when you fill in one of the site's forms. Depending on the form, this may include the following data:

• Contact form: first name, last name, email address, phone, subject and message.
• Short-term rental estimate: first name, phone, email, city and district of the property, property type, characteristics (area, bedrooms, capacity, amenities), property photographs.
• Sale estimate: the same data, plus the condition of the property, its construction period and the intended sale horizon.
• Property enquiry: first name, last name, email, phone, message and, where applicable, desired stay dates.
• Technical data: IP address and connection logs, kept for security and spam prevention purposes.

3. Purposes of processing

Your data is used exclusively to:

• respond to your enquiry and contact requests;
• produce the property estimates you request;
• manage the relationship with owners, travellers and buyers;
• ensure the security of the site and prevent automated submissions (spam).

4. Legal basis

Processing is based on your consent, given when you submit a form, as well as on Marhaban Company's legitimate interest in securing its site. No data is used for advertising purposes or transferred to third parties for commercial purposes.

5. Data recipients

Your data is accessible only to authorised staff of Marhaban Company. It is also processed by technical providers acting on our behalf:

• Supabase — database hosting;
• Vercel — site hosting;
• WhatsApp (Meta) — new requests are notified to our team by WhatsApp message, which involves transmitting the contact details you provide;
• where applicable, an email delivery service for acknowledgements of receipt.

6. Data transfer outside Morocco

The providers mentioned above host or process data outside Morocco (European Union and United States). In accordance with Articles 43 and 44 of Law 09-08, this transfer is brought to the CNDP's attention as part of the processing declaration. By using the site's forms, you are informed of this transfer.

7. Retention period

Data from unconverted requests is kept for 24 months from the last contact. Customer data is kept for the duration of the commercial relationship, plus the periods imposed by legal and accounting obligations.

8. Cookies

This site uses no audience-measurement, advertising or tracking cookies. None of your browsing data is analysed for marketing purposes.

Only strictly functional cookies are used: a cookie storing the chosen language and, where applicable, a technical session cookie. These cookies are necessary for the site to work and do not require prior consent.

9. Your rights

In accordance with Law 09-08, you have the right to access, rectify and object to the processing of your data, as well as the right to have it deleted. If you reside in the European Union, you additionally have, under the GDPR, the right to restriction of processing and to data portability.

To exercise these rights, write to info.contact@marhabancompany.com. You will receive a reply as soon as possible.

10. Complaint to the CNDP

The processing of this site's data is declared to the CNDP under receipt no. [À COMPLÉTER]. If you believe your rights are not being respected, you may lodge a complaint with the CNDP (www.cndp.ma).

11. Security

Marhaban Company implements technical measures to protect your data: encrypted connection (HTTPS), restricted access for authorised staff, hosting on secure infrastructure and limitation of automated submissions.

12. Contact

For any question regarding this policy or the processing of your data, contact us at info.contact@marhabancompany.com.