Skip to content
SoussStays

Legal

Privacy Policy

Last updated: May 2, 2026

In one sentence

We only collect what you tell us yourself via WhatsApp, email, or the contact form, and we only use it to handle your booking.

Data we collect

To process a booking, we need:

  • Your first and last name
  • A way to reach you (email, phone, or WhatsApp ID)
  • Stay dates and number of guests
  • Per Moroccan law, a copy of a government ID may be requested at check-in for the mandatory police registration form (transmitted only to the authorities, never used for marketing)

Cookies and tracking

This site uses no cookies. No session cookies, no analytics cookies, no advertising cookies. No consent banner is needed because no consent is required to collect.

We use Cloudflare Web Analytics, a measurement tool that is cookieless and does not collect personal identifiers. No personal data is transmitted to Cloudflare beyond the IP address required to route the request.

Data retention

WhatsApp and email exchanges are kept while the commercial relationship is active, then archived for 3 years for tax and accounting reasons in line with Moroccan law. After that they are deleted.

Sharing with third parties

Your data is never shared, sold, or rented to third parties for commercial purposes. The only possible transfers are:

  • The Moroccan police authority for the mandatory guest registration form (legal obligation)
  • Our accountant for invoicing, strictly within necessary scope
  • A third-party platform (Airbnb, Booking) if you booked via that platform — in which case its own privacy policy also applies

Your rights

Under the General Data Protection Regulation (GDPR) if you reside in the European Union, and under Moroccan law 09-08, you have the right to:

  • Access your data
  • Request its correction or deletion
  • Object to its processing
  • Request its portability

To exercise any of these rights, email us at contact@sousstays.com. We respond within 30 days.

Security

Your data is stored on secure servers (professional email, WhatsApp Business accounts). No customer file is exported to external marketing tools.

Updates

This policy may be updated. The last revision date appears at the top. No major change will be applied without visible notification.