Privacy Policy

Last updated: May 2026

Villas Ambar (“we”, “us”, “our”) operates the website villasambar.ma. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or contact us through any channel.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Moroccan Law 09-08 on the protection of personal data, and applicable international standards.

By using our website, you agree to the practices described in this policy.

1. Who We Are

Data Controller:
Villas Ambar
Website: www.villasambar.ma
Instagram: @villasambar
Contact: contact@villasambar.ma

For any privacy-related inquiry, contact us at the same email address.

2. What Data We Collect

a) Data you provide directly

When you fill in the contact form or reach out via WhatsApp or email, we collect:

First name and last name
Email address
Phone number
Villa location and number of bedrooms
Any information you include in your message

b) Data collected automatically

When you browse our website, we may collect:

IP address
Browser type and version
Pages visited and time spent
Referral source (how you reached our site)

This data is collected via cookies and analytics tools (see Section 6).

3. Why We Collect Your Data

We use your data for the following purposes:

Purpose	Legal Basis
Respond to your enquiry or request	Legitimate interest / Pre-contractual steps
Send you a property assessment or proposal	Pre-contractual steps
Manage the ongoing property management relationship	Performance of a contract
Improve our website and services	Legitimate interest
Comply with legal obligations	Legal obligation

We do not use your data for automated decision-making or profiling.

4. How Long We Keep Your Data

Contact enquiries: up to 3 years from the date of last contact, unless a contract is signed
Client data (under contract): for the duration of the contract and up to 5 years after its end, for legal and accounting purposes
Website analytics data: up to 13 months (standard cookie retention)

After these periods, your data is deleted or anonymised.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data.

We may share data with:

Service providers acting on our behalf (e.g. email platforms, CRM tools) — bound by confidentiality agreements
Booking platforms (Airbnb, Booking.com, Vrbo) if you are a traveller guest staying at one of our managed properties — subject to their own privacy policies
Legal authorities, if required by applicable law

We do not transfer your data outside of Morocco or the European Economic Area without appropriate safeguards in place.

6. Cookies

Our website uses cookies to ensure proper functioning and to analyse traffic.

Types of cookies used:

Essential cookies: required for the website to function (cannot be disabled)
Analytics cookies: help us understand how visitors use the site (e.g. Google Analytics or equivalent) — only with your consent
Marketing cookies: currently not used

You can manage your cookie preferences via the consent banner displayed on your first visit, or through your browser settings. Withdrawing consent does not affect the lawfulness of prior processing.

7. Your Rights

Under GDPR and Moroccan Law 09-08, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”), subject to legal retention requirements
Restrict processing in certain circumstances
Object to processing based on legitimate interest
Data portability, where technically feasible
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at: contact@villasambar.ma

We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:

In Morocco: Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) — www.cndp.ma
In the EU: your local data protection authority

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include secure transmission (HTTPS), access control, and regular security reviews.

No method of transmission over the internet is 100% secure. If you have concerns about the security of your data, contact us immediately.

9. Third-Party Links

Our website may contain links to third-party platforms (Airbnb, Booking.com, Instagram, etc.). We are not responsible for the privacy practices of those platforms. We encourage you to review their privacy policies directly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. We recommend checking this page periodically. For significant changes, we will notify you via email if you are an existing client.

11. Contact

For any questions regarding this Privacy Policy or your personal data: