Privacy policy

Riad Malaika takes the protection of your personal data seriously, in accordance with Moroccan law 09-08 and the General Data Protection Regulation (GDPR) for our European visitors.

Data controller

Riad Malaika, 17 Rue Zayan, Medina, 44000 Essaouira, Morocco — malaikadream@gmail.com.

Data we collect

• Restaurant pre-order: name, email, phone, date, arrival time and number of guests, dishes ordered, notes (allergies, special occasion) and, if you tick the box, the fact that your number can be reached on WhatsApp. Purpose: to prepare and confirm your meal and to send you a confirmation and a reminder. Legal basis: your booking request. Your contact details and notes are deleted 24 months after the date of the meal; the booking, made anonymous, is kept for our statistics.
• Contact form: name, email, phone (optional), subject (optional), message. Purpose: to answer your request. Legal basis: your request. Your IP address is not stored with your message. Messages are kept for 12 months, then deleted automatically.

This data is never sold or shared. It is accessible to the riad team and, for hosting and maintaining the website, to our technical provider (Tmate).

Emails we send

To check that our emails (confirmation, reminder, reply) have reached you, we keep the recipient's address, the type of message and the date it was sent for 90 days.

Spam protection

Our forms contain an invisible field that keeps robots out. They may also use Cloudflare Turnstile, an anti-robot verification service by Cloudflare, Inc., which processes technical data from your browser (including your IP address). Legal basis: our legitimate interest in protecting our forms from abuse.

Visit statistics

This website uses no tracking cookies and no advertising tools (no Google Analytics, no advertising pixels). Traffic may be measured with Umami, a cookie-free tool hosted in France by our technical provider: page viewed, country, device and browser type, referring site. Umami does not keep your IP address and cannot identify you; statistics are aggregated only.

Cookies

Only strictly necessary cookies are used: a session cookie and a security token (form protection). They do not require consent.

Third-party services

Room bookings are handled by eviivo on its own website, which applies its own privacy policy. Maps use OpenStreetMap tiles, loaded from the OpenStreetMap Foundation's servers (which then receive your IP address) when you view a map. The website's pages are served through Cloudflare, Inc., which processes your IP address and technical data to deliver the pages and protect the website. Fonts and videos are hosted on our own server.

Your rights

You may request access to, correction, deletion or restriction of your data, and object to its processing, by writing to malaikadream@gmail.com. You may also contact the Moroccan data protection authority (CNDP, www.cndp.ma) or, if you live in the European Union, the data protection authority of your country.

Updated: 19 October 2026