Tama Surf Morocco is committed to protecting your personal data. This policy explains what we collect through tamasurf.com, why we collect it, how long we keep it, and your rights under the GDPR.
1. Who We Are
Tama Surf Morocco SARL (“Tama Surf”, “we”, “us”) operates tamasurf.com and provides surf coaching, accommodation, and retreat services from our riad in Tamraght Oufella, Taghazout Bay, Morocco. We are the data controller for personal information collected through this website and our booking communications.
2. Information We Collect
Information you give us directly
- Booking & enquiry forms: Full name, email address, estimated travel dates, surf experience level, dietary requirements, and any notes you choose to share.
- Newsletter sign-up: Email address only.
- WhatsApp communications: Messages and phone number via WhatsApp Business (+212607363856).
Information collected automatically
- Essential cookie —
tama_currency: Remembers your selected display currency (EUR/GBP/USD). No tracking cookies are set without your consent. - Server logs: IP address, browser type, referring URL. Retained for a maximum of 14 days for security purposes.
Information we do NOT collect
- Payment card details (payments are handled off-site via bank transfer or trusted third-party processors).
- Sensitive special-category data, unless you voluntarily disclose dietary or medical requirements relevant to your stay.
- Data from children under 16 without verified parental consent.
3. How We Use Your Data
- Booking fulfilment (Contract, Art. 6(1)(b)): Processing reservations, confirming availability, and delivering your stay.
- Communication (Legitimate interest, Art. 6(1)(f)): Responding to enquiries and sending pre-arrival information.
- Newsletter (Consent, Art. 6(1)(a)): Monthly swell forecasts and seasonal promos. Unsubscribe anytime via the link in each email.
- Legal compliance (Legal obligation, Art. 6(1)(c)): Retaining transaction records as required by law.
- Security (Legitimate interest, Art. 6(1)(f)): Protecting our website and guests from fraud.
4. Data Sharing
We never sell or rent your data. We share it only with: activity partners at the riad (e.g. yoga instructors, surf guides) where necessary for your booking; email service providers for newsletter delivery (under GDPR-compliant Data Processing Agreements); regulatory authorities where required by applicable law.
5. International Data Transfers
Our operations are based in Morocco. Where personal data is transferred to or processed by service providers based in the EEA, we use Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure appropriate safeguards are in place.
6. Data Retention
- Non-converted enquiries: deleted after 6 months.
- Guest booking records: retained for 5 years from the date of stay (legal obligation).
- Newsletter subscriptions: until you unsubscribe.
- Currency preference cookie: expires after 365 days or on browser clearance.
- Server access logs: 14 days.
7. Your GDPR Rights
Under the GDPR you have the following rights regarding your personal data. Email privacy@tamasurf.com to exercise any of them — we respond within 30 days.
Request a copy of all data we hold about you.
Correct any inaccurate or incomplete data.
Request deletion of your personal data.
Restrict how we process your data.
Receive your data in a machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time without penalty.
Lodge a complaint with your national data protection authority.
8. Cookies
We use a minimal cookie approach. For full details and management options, see our Cookie Preferences page.
9. Security
All data in transit is protected by TLS encryption. In the event of a personal data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Article 33.
10. Changes to This Policy
We may update this policy periodically. The “Last updated” date at the top reflects any changes. Material changes will be communicated via a notice on our homepage or by email to newsletter subscribers.
11. Contact & Supervisory Authorities
- Email: privacy@tamasurf.com
- Address: Tama Surf Morocco SARL, Rue des Falaises, Tamraght Oufella, 80022 Agadir-Ida Ou Tanane, Morocco
If you are based in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority (e.g. ICO — UK, CNIL — France, BfDI — Germany, Datatilsynet — Scandinavia).