My Kasbah My Kasbah
Legal

Privacy Policy

Last updated: 6 June 2026

⚠️ Document to be validated by a Data Protection Officer (DPO). This page is a structural placeholder. The final content will be drafted in collaboration with a certified DPO, in compliance with Moroccan Law 09-08 and the GDPR for our European clients.

1. Data controller

My Kasbah, a team based in Marrakech, is the controller of your personal data.

2. Data collected

We collect: name, email, phone number, travel preferences, request history and browsing data (cookies).

3. Purposes

Your data is used for: managing bookings, communication between hosts and travellers, service improvement, fraud prevention, and compliance with our legal obligations.

4. Third-party sharing

Your data may be shared with: Resend (email routing), Vercel (hosting), Mapbox (maps). No transfer for commercial purposes.

5. Retention period

Data is retained for 3 years after the last activity, unless legal obligations require otherwise.

6. Your rights

You have the right to access, rectify, erase, port and object to your data. To exercise these rights: thibautcampana@gmail.com.

7. Cookies

See our Cookie Policy.