Introduction
SAMY Conciergerie (“SAMY”, “we”, “us”, or “our”) operates a collection of hotels, serviced apartments, and concierge services across Morocco. This Privacy Policy describes how we collect, use, share, and safeguard the personal information of our guests, prospective guests, and website visitors.
By using our website, booking a stay, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. We are committed to handling your data lawfully, fairly, and transparently, in line with the Moroccan Law 09-08 on the protection of personal data and, where applicable, the EU General Data Protection Regulation (GDPR).
Who we are
The data controller responsible for your personal information is SAMY Conciergerie, with registered offices in Casablanca, Morocco. You can reach us by email at contact@samy.ma or by phone at +212 5229-81939.
Information we collect
We collect personal information directly from you, automatically through your interactions with our digital services, and occasionally from third parties such as travel agents and booking platforms.
Information you provide to us:
- Identity and contact details (full name, date of birth, nationality, passport or ID number where required by law, email, phone, postal address)
- Booking and stay details (dates, property selected, room preferences, number of guests, special requests)
- Payment information (card details, billing address) — processed directly by our payment partners and never stored on our servers in full
- Marketing preferences and communications you exchange with our team
- Reviews, photos, or other content you choose to share with us or post publicly
Information collected automatically:
- Device and browser information (IP address, browser type, operating system, language)
- Usage information (pages visited, time spent, referring URL, interactions with our content)
- Cookies and similar tracking technologies (see Section 8)
How we use your information
We use the personal information we collect to:
- Process and confirm your reservation, communicate with you about your stay, and provide concierge services
- Verify your identity and comply with legal hospitality records
- Take payment, prevent fraud, and resolve disputes
- Personalise your experience, tailor offers, and improve the relevance of our communications
- Send marketing emails about new properties, special offers, and curated content — only where you have consented or where permitted by law
- Operate, secure, and continuously improve our website and services
- Comply with legal, regulatory, and tax obligations
Legal bases for processing
For guests located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:
- Contract: processing necessary to fulfil your booking and provide the services you have requested
- Legitimate interests: improving our services, preventing fraud, and securing our platform — provided these interests are not overridden by your rights
- Consent: for direct marketing communications and non-essential cookies, which you may withdraw at any time
- Legal obligation: for tax records, hospitality registration laws, and responses to lawful requests from authorities
International data transfers
Some of our service providers are based outside Morocco. When we transfer personal information internationally, we ensure adequate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable data-protection laws.
Your rights
Depending on where you live, you may have the following rights over your personal information:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Restrict or object to certain processing activities
- Receive your data in a portable, structured format
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Moroccan Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) or your local supervisory authority
To exercise any of these rights, contact us at contact@samy.ma. We will respond within the time frame required by applicable law.
Data retention
We keep personal information only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Booking and tax records are generally retained for ten years in line with Moroccan law. Marketing data is retained until you withdraw consent or three years of inactivity, whichever is sooner.
Security
We implement organisational and technical safeguards designed to protect personal information against unauthorised access, loss, alteration, or destruction. These include access controls, encryption, secure backups, and regular reviews of our security practices. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.
Children's privacy
Our services are intended for adults. We do not knowingly collect personal information from children under the age of sixteen without verified parental consent. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The most recent version will always be available on this page, with the revision date shown at the top. Material changes will be communicated to you by email or a clear notice on our website.
Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
- Email: contact@samy.ma
- Phone: +212 5229-81939
- Office: Casablanca, Morocco