Privacy Policy

Last updated: 21 September 2026

This policy explains how TMC collects and processes your personal data when you use themarrakechcurator.com or book a service, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978.

1. Data Controller

  • TMC, SAS with a share capital of €1,000, Paris Trade and Companies Register 109 771 360
  • 9 rue des Colonnes, 75002 Paris, France
  • Contact: contact@themarrakechcurator.com

2. Data Collected

  • Identity and contact details: surname, first name, email, phone number, address, company where applicable.
  • Booking data: dates, number and identity of travellers, stay preferences, special requests, flight details.
  • Travel documents: passport number and expiry date, where required by a carrier or accommodation provider.
  • Payment data: processed directly by our payment provider. TMC has no access to full card numbers.
  • Partner owners: contact details and information about the property offered ("Add your property" form).
  • Browsing data: IP address, pages visited, cookies (see Article 8).

If you provide health-related information (food allergies, reduced-mobility needs), it is used, with your explicit consent, solely to adapt the services and is shared only with the relevant providers.

3. Purposes and Legal Bases

  • Responding to enquiries and preparing quotations: Pre-contractual measures
  • Managing and performing bookings, assistance and complaints: Performance of the contract
  • Invoicing and accounting: Legal obligation
  • Sending the newsletter: Consent
  • Marketing to business clients and to existing clients for similar services: Legitimate interest
  • Managing relationships with partner owners and providers: Performance of the contract
  • Audience measurement and Site improvement: Consent (cookies)
  • Site security and fraud prevention: Legitimate interest

4. Recipients

Your data is shared only with the recipients who need it:

  • TMC's team;
  • the providers performing your stay (owners, hotels, carriers, drivers, chefs, activity organisers), mainly established in Morocco;
  • airlines, where applicable;
  • our technical processors: Site hosting (Webflow), email, newsletter tool, payment provider (Stripe);
  • the financial guarantor, the insurer and public authorities, where required by law.

TMC never sells or rents your data.

5. Transfers Outside the European Union

  • Morocco: sharing your data with providers established in Morocco is necessary for the performance of the contract you conclude (Article 49(1)(b) GDPR). It is limited to the data strictly required for the service.
  • United States: our host Webflow and certain technical tools may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

6. Retention Periods

  • Clients: for the duration of the contractual relationship, then 3 years after the end of the last stay for marketing purposes.
  • Prospects: 3 years after the last contact.
  • Invoices and accounting records: 10 years (legal obligation).
  • Travel documents: deleted no later than 3 months after the end of the stay.
  • Newsletter: until you unsubscribe.
  • Cookies: 13 months maximum; consent choices are kept for 6 months.

7. Your Rights

You have the following rights:

  • right of access, rectification and erasure;
  • right to restriction of processing and right to object, in particular to marketing, at any time;
  • right to data portability;
  • right to withdraw your consent at any time;
  • right to give instructions regarding your data after your death.

To exercise these rights, write to contact@themarrakechcurator.com. We reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.

You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the supervisory authority of your country of residence.

8. Cookies

The Site uses:

  • strictly necessary cookies, required for it to work, which do not require consent;
  • audience measurement and, where applicable, marketing cookies, placed only with your consent through the banner displayed on your first visit.

You can change your choices at any time via the "Manage cookies" link in the footer, or in your browser settings.

9. Security

TMC implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), restricted access, carefully selected providers.

10. Minors

The Site is not intended for minors. Bookings are made by an adult, who provides the data of any minor travellers under their responsibility.

11. Changes

TMC may update this policy. The version in force is the one published on the Site, with its date of last update.