Short version: we only process what you send us to plan a stay, an email address if you join the waitlist (double opt-in), and anonymous visit statistics, only if you accept cookies. No ads, no reselling, ever.
1. Who is responsible
The data controller is SAMRAGHT SARL, Tamraght, Agadir-Ida Ou Tanane, Morocco, operating MORE Surf Lodge. For anything related to your data: Contact@morelodge.com.
2. What we process, and why
- Booking conversations. When you write to us on WhatsApp, Telegram or by email, we receive your name/handle, phone number and the content of your message. Legal basis: steps prior to entering a contract (GDPR art. 6.1.b). Kept for the time needed to handle your request and stay.
- Wave Into Soul waitlist. Your email address and language, collected through MailerLite with double opt-in. Legal basis: consent (art. 6.1.a). Kept until you unsubscribe, every email contains an unsubscribe link.
- Visit statistics. Google Analytics 4, loaded only after you accept cookies. Aggregated, non-identifying usage data (pages seen, country, device type). Legal basis: consent. Retention: 14 months.
3. Cookies & local storage
- _ga, _ga_*. Google Analytics 4 · visit statistics · 13 months · set only with your consent.
- MailerLite cookies, display of the waitlist form · set only with your consent.
- more_lang, more_consent, more_chat_auto, local storage (not cookies): your language choice, your cookie choice, and whether the chat already opened. Strictly functional, never sent anywhere.
You can change your choice at any time via the Cookies link in the footer.
4. Who processes data for us
- Meta Platforms (WhatsApp Business), messaging.
- MailerLite UAB (Vilnius, Lithuania, EU), waitlist emails.
- Google Ireland Ltd, analytics; possible transfers to the USA under the EU-US Data Privacy Framework.
- Cloudflare, Inc., hosting and content delivery (Data Privacy Framework).
5. Your rights
Under the GDPR (and Moroccan law 09-08), you can ask for access, rectification, erasure, portability, restriction, object to processing, and withdraw consent at any time. Write to Contact@morelodge.com, we answer within 30 days. You can also lodge a complaint with your local supervisory authority (or the CNDP in Morocco).
6. Security
The site is static, served over HTTPS, with no user accounts and no payment data, we never ask for card numbers online. Access to booking conversations is limited to the MORE team.
Last updated: 14/07/2026. Any material change will be published on this page.