Privacy Policy
Last updated: 25 September 2026
1. Who we are
This website, www.amanarsurf.com, and the booking platform bookings.amanarsurf.com are operated by:
- AMANAR Surf House SARL AU, trading as AMANAR Surf Retreat
- Registered office: 1st floor, no. 129, block D2, Dakhla district, Agadir, Morocco
- Place of business: Tamraght, Morocco
- Registered in Agadir — RC no. 67357 (registered 5 February 2026) — ICE 003898969000094
- Contact for privacy matters: privacy@amanarsurf.com
AMANAR Surf House SARL AU is the data controller for the personal data described in this policy. We process personal data in accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, and — for residents of the European Union and the United Kingdom — with the General Data Protection Regulation (GDPR).
2. What data we collect, and why
2.1 When you book a stay
Through our booking platform (bookings.amanarsurf.com, operated by BookingLayer on our behalf) we collect: name, email address, phone number, nationality, dates of stay, package and room selected, number of guests, and any information you choose to give us (dietary requirements, surf level, special requests).
Purpose: to process and manage your reservation, prepare your stay, comply with Moroccan hotel registration obligations, and issue invoices.
Legal basis: performance of a contract; legal obligation (hotel guest registration, accounting).
Retention: for the duration of your stay and 10 years afterwards for accounting and legal records, as required by Moroccan law.
2.2 When you pay
Deposits are paid by bank transfer. We do not collect or store card numbers on this website. Your bank handles the transaction; we receive only confirmation of the transfer and the amount.
2.3 When you contact us
Via email (contact@amanarsurf.com, reservations@amanarsurf.com) or WhatsApp (+212 620-677437): we collect the information you send us and your contact details.
Purpose: to answer your request.
Legal basis: our legitimate interest in responding to enquiries; performance of pre-contractual steps.
Retention: 3 years after our last exchange, unless a booking follows.
WhatsApp is operated by Meta Platforms. Messages exchanged via WhatsApp are subject to WhatsApp’s own privacy policy.
2.4 When you browse this website
We use analytics and, where you consent, advertising tools:
- Vercel Analytics — cookieless, aggregated page-view statistics. No personal identifier. Active by default.
- Google Analytics 4 — visit statistics, traffic sources, behaviour on the site. Uses cookies. Only with your consent.
- Google Ads conversion tracking — measures whether a visit from an advertisement led to a booking. Uses cookies. Only with your consent.
- Meta Pixel — measures the effectiveness of our advertising on Instagram and Facebook. Uses cookies. Only with your consent.
Purpose: to understand how the site is used and to measure our advertising.
Legal basis: consent (you can refuse or withdraw it at any time via the cookie banner or the link at the bottom of every page).
Retention:according to each provider’s standard settings — Google Analytics data is kept 14 months; cookie lifetimes are listed in section 5.
2.5 Server logs
Our hosting provider (Vercel Inc.) records technical data — IP address, browser type, pages requested, timestamps — for security and operation of the site.
Legal basis: legitimate interest (security, service operation).
Retention: up to 30 days.
3. Who we share your data with
We share personal data only with the service providers we need to run AMANAR:
| Provider | What for | Location |
|---|---|---|
| BookingLayer | Booking platform | European Union |
| Google (Workspace, Analytics, Ads) | Email, analytics, advertising measurement | EU / USA |
| Meta Platforms (WhatsApp, Instagram, Pixel) | Messaging, advertising measurement | EU / USA |
| Vercel Inc. | Website hosting | USA |
| Our accountant | Invoicing and legal accounting | Morocco |
| Moroccan authorities | Guest registration, when legally required | Morocco |
We do not sell personal data. We do not share it with anyone else unless the law requires it.
4. International transfers
AMANAR is based in Morocco. Some of our providers process data in the European Union or the United States. Where data leaves the EU, our providers rely on the safeguards recognised under the GDPR (Standard Contractual Clauses or an adequacy decision). Where data is transferred from Morocco, we comply with the requirements of Law 09-08 and the CNDP.
5. Cookies
A cookie is a small file stored on your device. We use:
| Cookie | Provider | Purpose | Lifetime | Consent required |
|---|---|---|---|---|
| Consent preference | This site | Remember your cookie choice | 12 months | No (strictly necessary) |
| _ga, _ga_* | Google Analytics | Visitor statistics | 24 months | Yes |
| _gcl_* | Google Ads | Advertising measurement | 90 days | Yes |
| _fbp | Meta | Advertising measurement | 90 days | Yes |
When you first visit, a banner lets you accept or refuse non-essential cookies. Refusing does not limit your use of the site. You can change your choice at any time via the link in the footer. Until you consent, no advertising or analytics cookie is set (Google Consent Mode v2).
6. Your rights
You have the right to:
- access the personal data we hold about you;
- rectify it if it is inaccurate or incomplete;
- erase it, where we have no legal obligation to keep it;
- object to processing based on our legitimate interest;
- restrict processing in certain circumstances;
- receive the data you gave us in a portable format;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, write to privacy@amanarsurf.com. We will respond within one month. We may ask you to confirm your identity.
If you believe your rights have not been respected, you may lodge a complaint with the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel, Morocco — www.cndp.ma) or, if you reside in the European Union, with your national data protection authority.
7. Security
We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access: encrypted connections (HTTPS), access restricted to the people who need it, two-factor authentication on our accounts, and contractual obligations on our providers. No system is entirely secure; if a breach affecting your data occurs, we will inform you as required by law.
8. Minors
Our services are intended for adults. Bookings for guests under 18 must be made by a parent or legal guardian. We do not knowingly collect data from minors without such consent.
9. Changes to this policy
We may update this policy to reflect changes in our services or in the law. The date at the top shows the latest version. Significant changes will be announced on this page.
10. Contact
AMANAR Surf House SARL AU
privacy@amanarsurf.com
+212 620-677437
1st floor, no. 129, block D2, Dakhla district, Agadir, Morocco