Legal
Privacy policy
This policy explains what personal data Afer Surf S.A.R.L. ("Afer Surf", "we") collects when you use afersurf.com or stay with us, why we collect it, and what your rights are. We keep it short because we collect very little.
Data controller: Afer Surf S.A.R.L., N° 393 Amadel, Imsouane, Morocco — afersurf@gmail.com.
What we collect and why
Contact form
When you write to us through the contact form we receive your name, email address and message, along with the IP address the message was sent from. We use them only to reply to you and to stop automated spam. The message is delivered to our mailbox by Resend, our email delivery provider, and is not stored on this website.
To tell people apart from bots, the form runs Cloudflare Turnstile. Turnstile is a privacy‑preserving alternative to reCAPTCHA: it sets no tracking cookies and does not profile you or build an advertising identity. It does process your IP address and some browser characteristics to score the request.
Bookings
Bookings are made through our booking engine, Frontdesk Master, which collects the details needed to reserve and manage your stay (name, contact details, dates, payment guarantee). Frontdesk Master processes that data on our behalf under its own privacy policy. Moroccan law requires us to record the identity of every guest at check‑in; those records are kept for the period required by law and then deleted.
Analytics
We use Google Analytics 4 — only if you allow it — to understand how visitors use the site — which pages are read, roughly where visitors come from, and what devices they use. IP addresses are anonymised by Google before storage. Nothing is loaded and no cookie is set until you choose “Allow analytics” in the banner — if you decline, or simply ignore it, the Google Analytics script is never requested at all. You can also opt out with the Google Analytics opt‑out browser add‑on.
Cookies
This site sets no cookies of its own, and no cookies at all until you act. Google Analytics sets cookies only after you accept it; your choice itself is remembered in your browser's local storage, not a cookie. Our booking engine sets the cookies needed to complete a reservation.
If you email or WhatsApp us, we keep the conversation for as long as it's useful to manage your stay and answer follow‑up questions.
What we don't do
We don't sell or rent your data. We don't send marketing emails unless you've asked for them. We don't use your data for automated decision‑making or profiling.
Who we share data with
Only the service providers needed to run the site and the hostel: Resend (email delivery), Frontdesk Master (bookings), Cloudflare (Turnstile spam protection), Google (analytics, only with your consent) and Vercel (hosting). Each processes data only on our instructions. Some of these providers are based outside Morocco and the EU; they operate under standard contractual safeguards.
How long we keep it
Contact‑form emails: until your enquiry is resolved, then at most 12 months. Booking and guest‑registration records: as long as Moroccan tax and police‑registration rules require. Analytics data: 14 months.
Your rights
You can ask us at any time to see the data we hold about you, to correct it, to delete it, or to stop using it. Email afersurf@gmail.com and we'll respond within 30 days. If you are in the EU/EEA or UK you also have the right to complain to your local data‑protection authority.
Changes
We'll update this page if anything changes and show the date below.
Last updated: September 2026.