Privacy Policy · Surf Chill Vibe

Last updated: 19 October 2026

Who we are

This website, https://surfchillvibe.com, is run by Surf Chill Vibe • Dar Al-Andalus, a bed & breakfast in Tamraght that also offers surf lessons, surf trips, yoga and day trips. We are responsible for the personal data collected through this website.

Address: Hay Sarele, Tamraght, Agadir 80023, Morocco
Phone / WhatsApp: +212 7 24 12 21 20
Email: [[email protected]]
Legal entity: Surf Chill Vibe • Dar Al-Andalus

The website is available in English, French, German, Spanish, Italian, Polish, Swedish, Norwegian and Danish. This policy applies to all language versions.

What data we collect and why

We only collect the data we need to answer you and to organise your stay or activity.

Booking and contact forms: name, email address, phone number, dates, number of guests and your message. We use them to answer your request, prepare your booking and contact you about it.
WhatsApp and SMS: your phone number, your name if you share it, and the content of your messages. We use them to answer you and manage your booking.
Comments and community posts: the name, email address and content you submit, plus your IP address and browser information to help detect spam. Comments and community posts may be visible to the public.
Community member accounts: the account details you provide (such as username, email address and profile information) and the content you post. We use them to run your account and the community area.
Website statistics and advertising: information about how you use the site (pages visited, device, approximate location, how you arrived on the site). We use it to understand and improve the website and to measure our ads. This depends on your cookie choices.
Security: IP addresses and login attempts, to protect the website against abuse.

Legal basis

We process your data on the following grounds:

Your request or contract: to answer your enquiry and to prepare and carry out your booking.
Your consent: for analytics and advertising cookies, and for any other processing where we ask for your consent. You can withdraw it at any time.
Our legitimate interests: to keep the website secure, prevent spam and run the website properly.
Legal obligations: where the law requires us to keep certain information (for example for accounting or guest registration).

Cookies

We use cookies and similar technologies. When you first visit the site, a cookie banner lets you accept or refuse non-essential cookies, such as statistics and advertising cookies. You can change your choice at any time through the cookie banner or cookie settings link on the site.

Third parties and transfers outside Morocco and the EU

We use the following services to run the website. Some of them may process your data on our behalf:

Google Analytics (through MonsterInsights) and Google Site Kit: website statistics.
Google Ads: measuring the results of our advertising (conversion tracking).
Complianz and CookieAdmin: recording your cookie choices.
FormLayer: website forms.
WP Mail SMTP: sending emails from the website.
LiteSpeed Cache: speeding up the website.
Smush: optimising images.
Loginizer: protecting the login page.
UpdraftPlus and JetBackup: website backups.
WhatsApp: messaging, when you choose to contact us that way.
Our web hosting provider.

Some of these providers, such as Google and WhatsApp (Meta), may process data outside Morocco and the European Union, including in the United States. Where this happens, we rely on the safeguards offered by these providers.

We do not sell your personal data.

How long we keep your data

Booking and contact requests that do not lead to a booking: 12 months after our last exchange.
Confirmed bookings: for as long as needed to provide your stay or activity, then for the period required by Moroccan accounting and tax law.
WhatsApp and SMS messages: 12 months after our last exchange, unless they are part of a booking.
Comments and community posts: until you ask us to delete them or close your account.
Community accounts: until you close your account. We delete the account data within 30 days after closure.
Statistics data (Google Analytics): 14 months, after which Google deletes it automatically.
Backups: backups are kept for up to 30 days and then overwritten.

Security

We take reasonable technical and organisational measures to protect your data, including a secure HTTPS connection, login protection and regular backups. No website can be completely secure, so we cannot guarantee absolute security.

Your rights

You can ask us at any time to:

access the personal data we hold about you;
correct inaccurate data;
delete your data;
object to or restrict certain processing;
withdraw your consent, for example for cookies;
receive your data in a portable format (for EU visitors).

To use these rights, contact us using the details at the end of this policy. You also have the right to file a complaint with a data protection authority (see below).

Moroccan law 09-08 and the CNDP

We process personal data in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data. The supervisory authority in Morocco is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), www.cndp.ma, to which you can file a complaint.

GDPR for visitors from the European Union

If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) gives you the rights listed above. You can also file a complaint with the data protection authority of the country where you live or work.

Children

This website is not intended for children under 16, and we do not knowingly collect their data online. Bookings for minors must be made by a parent or guardian.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

Contact

Surf Chill Vibe • Dar Al-Andalus
Hay Sarele, Tamraght, Agadir 80023, Morocco
Phone / WhatsApp: +212 7 24 12 21 20
Email: [[email protected]]