Privacy statement

Privacy Policy
Last updated: July 16, 2025

1. Introduction
   This Privacy Policy explains how LES MARMITES DE MARRAKECH SARLAU (“we”) collects, uses, shares and protects your personal data, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, as well as the General Data Protection Regulation (GDPR) for users located in the European Union.
2. Data controller
   The person responsible for processing personal data is:
   THE MARRAKECH POTS SARLAU
   Address: APPT 15 IMM 12 LOT SINE AVENUE ALLAL EL FASSI MARRAKECH,
   Email: contact@lesmarmites.com
3. Data collected
   We collect the following personal data:

• First and last name
• Email address
• Phone number
• Booking and Payment Information
• IP address and browsing data

4. Purposes of processing
   Your data is collected for the following purposes:

• Manage reservations and service provision
• Provide customer support and after-sales service
• Improve our website and services
• Communicate with you for promotional purposes (with your consent)
• Comply with our legal and regulatory obligations

5. Legal basis for processing
   We process your personal data on the following legal bases:

• Your explicit consent (e.g., newsletter subscription)
• The execution of a contract (e.g. reservation or order)
• Our legal obligations (e.g. invoicing)
• Our legitimate interest (e.g., improving the service)

6. Data recipients
   Your data may be communicated to the following recipients:

• Our authorized team members
• Technical service providers and subcontractors (payment, hosting, emailing, etc.)
• Business partners if you have consented to this

7. Transfer of data abroad
   When your data is transferred outside Morocco or the European Union, we ensure that appropriate safeguards are put in place (standard contractual clauses, countries recognized as adequate, etc.).
8. Retention period
   Your data is kept for the period necessary for the purposes of the processing, in compliance with the law:

• Billing data: 10 years (legal obligation)
• Marketing data: 3 years after last contact
• Browsing data: 13 months

9. Your rights
   In accordance with Law 09-08 and the GDPR, you have the following rights:

• Right of access
• Right of rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object
• Right to data portability (GDPR)

To exercise your rights, you can contact us at the following address: [Contact email]
You can also file a complaint with the CNDP (www.cndp.ma) or the competent European supervisory authority.

10. Data security
    We implement all reasonable technical and organizational measures to protect your personal data against loss, unauthorized access, disclosure or alteration.
11. Cookies
    Our website uses cookies to improve your user experience. To learn more, see our Cookie Policy.
12. Changes
    We reserve the right to modify this policy at any time. Any changes will be posted on this page with an updated date.
13. Contact
    If you have any questions regarding this privacy policy, please contact us via our contact form or at the following address:
    Email: contact@lesmarmites.com