Privacy Policy

What we collect, why, who we share it with, and how to exercise your rights under Moroccan data-protection law.

Last updated 13 September 2026

Data controller

AbodyStudio Sarl, Casablanca, the publisher of Destina, is the controller of the data described below. Processing is carried out in accordance with Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data, and with the decisions of the CNDP.

What we collect

  • Account: first and last name, email address, phone number, display language and currency, hashed password.
  • Bookings: the listing booked, dates, number of travellers, special requests, amount paid, booking status.
  • Payment: the transaction reference and status returned by the payment provider. We never store your full card number.
  • Vendors: company name, legal identifiers (ICE, IF, RC, patente) and bank details used to pay out earnings.
  • Technical: IP address, device and browser type, pages viewed — for security and audience measurement.

Why we use it

  1. To deliver the booking: pass the vendor the details it needs to welcome you.
  2. To collect and invoice: process payment, issue invoices, pay vendors.
  3. To keep you informed: confirmations, pre-arrival reminders, changes, refunds.
  4. To protect the platform: fraud prevention, access logs, moderation of listings and reviews.
  5. To improve the service: aggregated statistics, never personally identifying.
  6. Marketing: only with your explicit consent, which you can withdraw from any email.

Who we share it with

  • The vendor of the booking concerned, limited to what it needs to host you.
  • The payment provider (CMI for Moroccan cards, PayPal for international cards).
  • Technical providers for hosting and email delivery, bound by confidentiality.
  • The competent authorities, on lawful request.

We do not sell personal data.

How long we keep it

  • Active account — for as long as the account exists.
  • Bookings and invoices — 10 years (accounting obligation).
  • Technical logs — 12 months.
  • Marketing contacts — 3 years after the last contact.

Your rights

You have the right to access, correct, object to and delete your data. Write to support@destination.ma quoting the email address on your account; we answer within 30 days. You may also refer the matter to the CNDP, Morocco’s data-protection authority.

Cookies

We use strictly necessary cookies (session, security, language and currency preference). Analytics cookies are only set after you agree and can be refused without losing any functionality.

Questions about this page? Write to support@destination.ma.