Privacy Policy — Seoul of Marrakech

Seoul of Marrakech ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data, in line with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Korean Personal Information Protection Act (PIPA).

1. Data Controller

Seoul of Marrakech, Itaewon, Seoul, Republic of Korea. For any privacy enquiry contact us via our contact form or at privacy@seoulofmarrakech.com.

2. Personal Data We Collect

Contact data: name, email, phone, message content submitted via our forms.
Reservation data: date, party size, dietary notes.
Account data: email and authentication identifiers (if you sign up).
Technical data: IP address, device, browser, language, pages visited.
Cookies: strictly necessary, plus analytics cookies (only with consent).

3. Legal Bases (GDPR Art. 6)

Consent — marketing emails, non-essential cookies.
Contract — handling reservations and enquiries you submit.
Legitimate interest — securing the site, preventing fraud.
Legal obligation — tax, accounting, regulatory requests.

4. How We Use Your Data

To respond to enquiries, manage reservations and memberships, send service communications, improve our website, and meet legal obligations. We do not sell your personal data.

5. Sharing & Processors

We share data only with vetted processors acting on our instructions: hosting, database & authentication (Supabase), email delivery, and analytics providers. Where data leaves the EEA/UK we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

Enquiry messages: 24 months. Reservation records: 3 years. Accounting records: 5 years (Korean Commercial Act). Account data: until you delete your account.

7. Your GDPR Rights

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure / "to be forgotten" (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object, including to direct marketing (Art. 21)
Right to withdraw consent at any time
Right to lodge a complaint with your supervisory authority

To exercise any right, email privacy@seoulofmarrakech.com. We respond within 30 days.

8. Cookies

We use strictly necessary cookies to operate the site. Analytics and marketing cookies are only set after you give consent via our cookie banner. You can withdraw consent at any time through your browser settings.

9. Security

We apply technical and organisational measures including encryption in transit, access controls, and row-level security on our database. No system is 100% secure; please use a strong, unique password.

10. Children

Our services are not directed to children under 16.

11. Changes

We may update this policy. Material changes will be announced on this page with a revised "last updated" date.