Privacy Policy

Hostoria is a property management company specialising in short-term rentals (Airbnb, Booking) in Marrakech, Morocco. This privacy policy explains what personal data we collect when you contact us through our website hostoria-ma.com or through our advertising forms on Instagram and Facebook, why we collect it, how we use it and what your rights are.

We take the protection of your privacy seriously. We collect only the information strictly necessary to respond to your request. Hostoria does not resell your data and does not use it to contact you for marketing purposes beyond the request you send us. The third-party services we use (Meta, Web3Forms, Google, Vercel) process your data in accordance with their own policies, which we encourage you to review.

This policy applies to anyone who completes one of our forms, whether they reside in Morocco or in the European Union.

The controller of your personal data is Hostoria, a short-term rental property management business operated by Badr El Haloui (individual entrepreneur), based in Marrakech, Morocco, under the brand and website hostoria-ma.com.

A full contact address can be obtained on request at contact@hostoria-ma.com.

This processing is subject to the formalities required with the CNDP in accordance with Law No. 09-08.

For any question regarding this policy, the processing of your data, or to exercise your rights, you can contact us by email, or by post on request:

—Email: contact@hostoria-ma.com

We collect your personal data only when you voluntarily provide it to us. Collection takes place mainly through the following channels:

—The contact form on our website hostoria-ma.com: your submission is received, processed and transmitted to our Gmail inbox by our provider Web3Forms (a third-party service).

—The native advertising forms on Instagram and Facebook (Meta "Instant Forms" / Lead Ads): when you respond to one of our ads, you submit your information directly through Meta's built-in form, which then transmits it to us.

If you contact us directly via WhatsApp or by email, we process the information you provide on those occasions for the same purposes.

The data we may collect is as follows: your name, your phone number, your email address, information about your property (area or neighbourhood, type of accommodation, number of bedrooms) and, where applicable, a free-text message you send us.

We do not request any sensitive data and we invite you not to include any in the free-text message field.

We use your personal data solely for the following purposes:

—To respond to your request, in particular to provide you with a free audit or an estimate of your rental income;

—To contact you as part of a commercial discussion related to managing your property;

—Where applicable, to prepare a management proposal tailored to your property.

We do not carry out any unsolicited marketing outside the request you have sent us, and we do not resell your data in any way.

The processing of your personal data is based on your consent, given by voluntarily submitting one of our forms, and, where applicable, on the performance of pre-contractual measures taken at your request (preparation of the estimate, audit or management proposal you have requested).

You are free not to complete our forms. However, without the requested information, we will not be able to handle your request or contact you back.

You may withdraw your consent at any time, as explained in the section relating to your rights. Withdrawing your consent does not affect the lawfulness of processing carried out before that withdrawal, nor the processing of the pre-contractual measures you yourself requested from us.

Your data is processed by Hostoria. To operate, we rely on technical providers involved in handling your request:

—Meta Platforms: operates the Instagram and Facebook advertising forms. Meta collects your data on its own platform, in accordance with its own privacy policy, before transmitting it to us; Hostoria becomes the data controller upon receipt of this data (see the dedicated section below);

—Web3Forms (a third-party service): receives the submission of our website form, processes it and transmits it to us by email. Its servers may be located outside Morocco;

—Google / Gmail (processor): hosts the email inbox through which we receive and store your requests;

—Vercel (processor): hosts our website.

Your data is never sold, transferred or rented to third parties for commercial purposes. It is shared only with the providers listed above, strictly to the extent necessary to handle your request, and, where applicable, with the competent authorities when required by law.

Our website is hosted by Vercel, and some of our providers (notably Meta, Web3Forms, Google and Vercel) operate servers that may be located outside Morocco, including in the European Union or the United States.

As a result, your data may be transferred outside Morocco. On the Moroccan side, Hostoria takes care to comply with the obligations of Law No. 09-08 regarding transfers of data abroad, including completing the formalities required with the CNDP where they apply.

For data subjects residing in the European Union, these transfers rely in practice, on our providers' side (Meta, Web3Forms, Google, Vercel), on mechanisms provided for by the GDPR, such as the European Commission's standard contractual clauses and/or adherence to the EU–US Data Privacy Framework. A copy or description of these safeguards can be provided to you on request at contact@hostoria-ma.com.

We select recognised providers that offer sufficient guarantees regarding the security and confidentiality of your data.

We keep your data for as long as necessary to handle your request, and we then archive it.

In the absence of a contractual relationship between you and Hostoria, your prospect data is kept for a maximum of three (3) years from our last contact, after which it is deleted or anonymised.

If a contractual relationship is established, your data is kept for the duration of that relationship and, thereafter, for the applicable legal retention periods.

In accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, you have the following rights over your data:

—Right of access: to know what data we hold about you;

—Right of rectification: to have inaccurate or incomplete data corrected;

—Right to object: to object, on legitimate grounds, to the processing of your data;

—Right to deletion or blocking: where the conditions of the law are met (inaccurate, incomplete or outdated data, or non-compliant processing), to request the deletion or blocking of your data.

As the processing is based on your consent, you may withdraw it at any time; this right is available to everyone, regardless of where they reside.

If you reside in the European Union, the General Data Protection Regulation (GDPR) additionally grants you the following rights:

—Right to erasure ("right to be forgotten") under the conditions provided for by the GDPR;

—Right to restriction of processing;

—Right to data portability.

To exercise any of these rights, write to us at contact@hostoria-ma.com. Exercising these rights is free of charge, unless a request is manifestly unfounded or excessive. We may ask you to verify your identity in order to protect your data.

We undertake to respond as promptly as possible. For individuals covered by the GDPR, we respond within one (1) month of receiving the request, which may be extended by two months for complex requests, in accordance with Article 12 of the GDPR.

In Morocco, you may also lodge a complaint with the National Commission for the Control of Personal Data Protection (CNDP). If you reside in the European Union, you may contact the data protection authority of your country.

When you send us your request through an advertising form displayed on Facebook or Instagram ("Instant Form" / Lead Ad), your data is first collected within Meta Platforms' platform and then transmitted to us.

For this collection phase on its platform, Meta acts in accordance with its own privacy policy, which we encourage you to review (for example at facebook.com/privacy/policy).

The data you submit through this advertising form (name, phone number, email, information about your property, message) is collected via Meta, then used by Hostoria solely to respond to your request (audit / estimate, commercial contact) and is not shared with any third party for commercial purposes.

Once your data is received by Hostoria, it is processed by us solely in accordance with the terms of this privacy policy. Hostoria acts as the data controller for the data collected and used in connection with your request.

As of today, our website does not install any advertising tracking cookies or any tracking pixels for advertising purposes. In particular, no Meta Pixel is installed on the website.

Only strictly technical cookies or identifiers, necessary for the proper functioning and security of the website (for example security, anti-abuse or functional cookies, provided notably by our host), may be present. These cookies are not used to profile you or to track your browsing for advertising purposes.

If, in the future, we decide to add an audience-measurement tool or a tracker (for example an advertising pixel), we will update this policy before activating it and, where applicable, obtain your prior consent when required by law.

We implement reasonable technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or alteration.

This includes, in particular, relying on recognised providers for hosting and transmitting your data, restricting access to the information received, and deleting data once it is no longer needed.

Since no transmission of data over the Internet can be guaranteed to be entirely secure, we cannot guarantee absolute security, but we undertake to act diligently in the event of an incident. In the event of a data breach likely to result in a risk to your rights, we will take the required measures, including, where the law so requires, notifying the competent supervisory authority and, where applicable, informing the data subjects concerned.

We may amend this privacy policy to reflect legal, technical or organisational changes, for example if we add a new tool or a new processing purpose.

The applicable version is the one published on hostoria-ma.com. We encourage you to review it regularly. In the event of a significant change, we will endeavour to inform you through appropriate means.

For any question regarding this policy, you can write to us at contact@hostoria-ma.com.