Privacy Policy
Last updated: January 2025
Your privacy matters to us. This policy explains what data we collect when you use chefchaouen.spa or book a treatment with us, and how we keep it safe.
Data We Collect
When you contact us or make a booking we may collect: your name, email, phone number, the service requested, the date you wish to visit, and any message you send us. We also collect anonymous analytics data (pages visited, country, device type) to improve the website.
How We Use Your Data
We use your information solely to confirm bookings, answer questions, send appointment reminders, and improve our service. We never sell your data to third parties.
Legal Basis
We process your data based on your consent (when you submit a form) and on our legitimate interest in running the spa and improving the website.
Data Sharing
Your data is shared only with the technical providers we need to operate (email delivery, secure hosting). All providers are bound by confidentiality and data protection agreements.
Your Rights
You may request access, correction, or deletion of your personal data at any time by writing to [email protected]. You also have the right to withdraw consent and to lodge a complaint with the Moroccan CNDP authority.
Data Retention
Booking and contact data is kept for up to 3 years after your last interaction with us, then permanently deleted.
Contact
For any privacy question: [email protected].