1. Data controller
M Family Luxury — Twelve Stays
Lot Nakhla · Dar Bouazza · Casablanca
contact@twelvestays.ma
M Family Luxury undertakes to comply with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and the implementing texts of the CNDP.
2. Data collected
At booking
- First and last name
- Email address
- Phone number
- Chosen studio · Stay dates
- Number of guests
- Special requests
- Nationality and ID (Moroccan regulatory requirement for accommodation)
Payment data
M Family Luxury does not store card details. Only transaction references and amounts are recorded. Payments are processed on certified secure infrastructure.
Browsing data
- Pages visited · Visit duration
- Device and browser type
- IP address
- Browsing behaviour (with your consent)
3. Purposes of processing
| Purpose | Legal basis |
|---|---|
| Manage your booking | Contract performance |
| Send confirmations and reminders | Contract performance |
| Respond to your requests | Legitimate interest |
| Improve our site | Legitimate interest |
| Marketing communications | Consent |
| Moroccan regulatory compliance | Legal obligation |
4. Technical providers
Twelve Stays uses technical providers to operate the site and manage bookings.
These providers act solely as technical processors and have no right to use resident data for other purposes.
M Family Luxury contractually ensures that each provider meets applicable security and confidentiality standards.
| Role | Data location |
|---|---|
| Data storage | European Union |
| Transactional emails | Secure servers |
| Site hosting | Secure cloud infrastructure |
| Traffic analysis | Anonymised data |
| Session recordings | With consent only |
5. Retention period
| Data type | Retention period |
|---|---|
| Booking data | 5 years (legal obligation) |
| Financial documents | 10 years (tax obligations) |
| Analytics data | 13 months maximum |
| Marketing consents | Until withdrawal |
6. Your rights
Under Moroccan Law No. 09-08, you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure
- Right to object
- Right to data portability
To exercise your rights: contact@twelvestays.ma
Response guaranteed within 30 days.
You may also contact the CNDP: Commission Nationale de Contrôle de la Protection des Données Personnelles — cndp.ma
7. Data security
M Family Luxury protects your data through:
- SSL/TLS encryption of all communications
- Encrypted databases hosted in Europe
- Strict access controls
- Regular security audits
8. Cookies
Three types of cookies are used:
Essential cookies
Required for the site to function. Session management · security · language preferences. Cannot be disabled.
Analytics cookies
Help us understand how visitors use the site. Placed only with your consent.
Personalisation cookies
Enhance your experience. Placed only with your consent.
You can manage your preferences via your browser settings or the "Cookies" link in the footer.
9. Contact
For any question regarding the protection of your data:
TWELVΞ STAYS · M Family Luxury
contact@twelvestays.ma
+212 6 63 83 99 10
7 days a week · 8am → 8pm