Privacy & security

When you send a booking request we collect: name, email address, phone number, stay dates, number of guests, any promo code and your free-text message.

No payment card data is entered on this site. Payments (advance and balance) are arranged directly with the owners by bank transfer.

• To process and confirm your booking request.
• To contact you about your stay (before, during and after).
• To sync calendar availability with partner platforms.

We do not use your data for advertising and never sell it to third parties.

• The site is served over HTTPS (TLS encryption) on every page.
• Booking data is stored in a managed PostgreSQL database with Row Level Security enabled: only authenticated owners can view bookings.
• Publicly displayed information (calendar, rates) is strictly limited to dates and prices — no personal guest information is exposed.
• The admin area is password-protected and accessible to the owners only.

• Hosting & database: managed cloud infrastructure.
• Calendar sync: iCal feeds exchanged with the booking platforms where the villa is listed.
• Email: confirmation messages are sent from our contact address.

The site only uses the technical cookies required to operate (language preference, admin session) and, with your consent, audience measurement.

Booking requests are kept for as long as needed to deliver the stay, then archived to meet applicable accounting and tax obligations. You can request deletion of your data at any time.

Under the General Data Protection Regulation you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data.

To exercise these rights, write to us at contact@mavillamarrakech.com.

If you believe you have found a security vulnerability affecting this site, please contact us at contact@mavillamarrakech.com with as much detail as possible. We will acknowledge your report and handle it responsibly.