Privacy Policy

1. Data We Collect

• •Name and email address (required for booking confirmation).
• •Visit date, ticket type, and number of visitors (required to process your booking).
• •Payment information — processed securely by Stripe; we never store card details.
• •Optional: IP address and browser data for analytics and security.

2. How We Use Your Data

• •To send your ticket and booking confirmation by email.
• •To process payments securely via our payment provider.
• •To respond to customer service enquiries.
• •To improve our service through anonymised analytics.

3. Data Storage

Your data is stored on secure servers. Booking data is retained for 3 years for legal and accounting purposes. You may request deletion at any time by contacting us (subject to legal retention requirements).

4. Data Sharing

• •We do not sell your personal data.
• •We share data only with essential service providers: payment processor (Stripe), email provider (Resend), and analytics (anonymous).
• •We may disclose data if required by Moroccan law or a court order.

5. Cookies

We use essential cookies to operate the website and anonymous analytics cookies. You can manage your cookie preferences at any time. See our Cookie Policy for details.

6. Your Rights

• •Right to access: request a copy of the data we hold about you.
• •Right to rectification: correct inaccurate personal data.
• •Right to erasure: request deletion of your data (subject to legal requirements).
• •Right to portability: receive your data in a machine-readable format.

7. Contact

For privacy enquiries, please email us at support@visitbahiapalace.com. We aim to respond within 72 hours.