Privacy Policy

Owner review required before production launch. This page reflects the current site configuration and the Moroccan legal framework identified below. The operator’s registered company name, physical address, registration numbers and any CNDP declaration or authorisation reference must be completed and reviewed by qualified Moroccan counsel.

1. Scope and data controller

Golden Dune Luxury Camp, operating in the Merzouga desert area of Morocco, determines how personal information submitted through this website is used. Until the operator’s full registered identity and address are inserted, privacy requests should be sent through the Contact page.

2. Information we collect

We may collect identity and contact details, requested stay dates, guest numbers, booking messages, billing details, payment status, communications, and technical information such as IP address, browser data, cookies and security logs. The current website does not operate a card-payment gateway and should not request full card credentials.

3. Why we use the information

Information is used to answer enquiries, prepare and administer accommodation bookings, provide requested services, maintain accounting and operational records, prevent fraud or misuse, secure the website, and comply with applicable legal obligations. Processing must be limited to a specific, legitimate and proportionate purpose.

4. Legal grounds

Depending on the activity, processing may be necessary for pre-contractual steps or performance of a booking, compliance with a legal obligation, the guest’s informed consent, or a legitimate interest that does not override the guest’s rights and freedoms.

5. Sharing and service providers

Access is limited to authorised personnel and service providers necessary to operate the website, communications, hosting, booking and accounting functions. Personal information must not be sold. Providers receiving data must be subject to appropriate confidentiality, security and data-protection obligations.

6. International transfers

If personal information is hosted or accessed outside Morocco, the operator must verify and complete the formalities required by Law 09-08, including the rules applicable to international transfers and any required CNDP authorisation.

7. Retention and security

Personal information should be retained only for the period necessary for the stated purpose and any applicable accounting, tax, dispute or legal requirements. Reasonable technical and organisational safeguards must protect confidentiality, integrity and availability.

8. Your rights

Subject to Moroccan Law 09-08, a person may request information about processing and exercise rights of access, rectification and opposition, and may request erasure or blocking where the legal conditions are met. Requests can be submitted through the Contact page after suitable identity verification. A complaint may also be made to the CNDP.

9. Cookies

The website may use essential cookies for security, language, session, cart and booking functions. Optional analytics or marketing cookies should not be activated without the notices and consent controls required for the intended use.

10. Legal framework and updates

This policy is based principally on Moroccan Law No. 09-08 and CNDP guidance. It may be updated when the website, service providers or legal requirements change. Last updated: 30 August 2026.