Controller and contact
ByWardi Curated Escapes (“ByWardi”) is a brand operated by Golf And Rocket SARL, share capital MAD 100,000, ICE 002993728000026, whose registered office is at 48 avenue Fal Ould Oumeir, apartment 1, Agdal–Riyad, Rabat, Morocco. Golf And Rocket SARL is the controller for the processing described here. For questions about your data or to exercise a right, email hello@bywardi.com.
Data we process
- Identity and contact details: name, email, phone or WhatsApp number and preferred language.
- Stay details, requests, options, dossiers, support conversations and feedback you choose to provide.
- Professional host, partner and provider data, including properties, roles and financial information required for tracking.
- Security and access data: one-time codes, sessions, IP address, technical logs and fraud signals. Login codes are never written to logs.
- Payment data limited to amount, currency, status and technical references. Full card details are handled by the payment provider and are not stored by ByWardi.
Why we use data
Depending on context, processing is based on steps you request or a contract, a legal obligation, legitimate interests in running and securing the service, or consent where required.
- Receive, verify, organise and track a request or service.
- Create and secure access, attribute a traveller to a partner link with consent and calculate related amounts.
- Send transactional dossier notifications and respond to support requests or complaints.
- Prevent abuse, protect the service, keep required records and defend the rights of ByWardi and its users.
- Improve the service using aggregated or anonymised data. No decision with legal effect is made solely by an automated system.
Sharing and recipients
Access is limited to those who need it: authorised ByWardi staff, an assigned provider after confirmation, an affiliated host for the limited tracking information due to them, and technical processors needed for hosting, email, security or payment. No role may view another partner’s dossiers or confidential platform data.
Some providers may process data outside your country. ByWardi selects contractually governed providers and applies safeguards required for the relevant territories.
Cookies and partner attribution
The platform uses strictly necessary cookies for language, city, theme, security and session management. A host link may also offer a 30-day partner attribution. It is stored only after your explicit choice, can be declined or withdrawn, does not alter the displayed price and never grants access to your account.
Retention and security
Data is kept only as long as needed for the request, support, partner relationship, security and applicable accounting or legal duties. It is then deleted or anonymised, subject to protected backups and ongoing disputes.
The platform is hosted in the European Union by OVHcloud. ByWardi uses role-based access, protected sessions, encrypted secrets, audit logs, backups and data minimisation for each participant. No online service can guarantee zero risk.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability, or object to certain processing. You may withdraw consent without affecting earlier lawful processing. Proportionate identity checks may be required.
You may also complain to the relevant authority, including Morocco’s CNDP, or another data protection authority where it has jurisdiction over your circumstances.
Updates
This policy may evolve with features or legal requirements. The date above identifies the current version. Material changes will be highlighted on the platform or through an appropriate channel.