Effective 1 July 2026
Welcome to NZZL.
This Privacy Policy explains how NZZL collects, uses, stores, shares, protects and retains personal data when you access or use nzzl.com, including the website, account features, listing tools, booking tools, payment flows, communications, support channels, review features and related services.
This Privacy Policy applies to all users of the Platform, including Guests, Hosts, Host Representatives, account holders, browsers, support users and any person or entity accessing or using NZZL.
NZZL processes personal data in accordance with Moroccan Law 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data (Loi n° 09-08 relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel) and any other applicable data-protection laws.
By using the Platform, you acknowledge that NZZL may process personal data in accordance with this Privacy Policy, applicable law and any privacy notices shown to you when using specific Platform features.
This Privacy Policy should be read together with the NZZL Terms of Service and any applicable booking, payment, payout, host, listing, support, safety, cookie or dispute policies.
Capitalised terms not defined in this Privacy Policy have the meaning given to them in the NZZL Terms of Service.
For the purposes of this Privacy Policy, NZZL SARL is responsible for the personal data processed through the Platform, unless another party is identified as responsible for a specific processing activity.
NZZL SARL is a société à responsabilité limitée incorporated in the Kingdom of Morocco, registered with the Registre du Commerce of Rabat under RC No. 200277, with ICE No. 003938346000035, having its registered office at 5 Rue Daraa, Résidence Fatima Zahra, Appartement 5, Agdal, Rabat, Morocco.
Some third-party service providers, including payment providers, identity verification providers, analytics providers and communication providers, may process personal data under their own terms and privacy notices.
Where Hosts receive Guest personal data through the Platform, they must use it only for the relevant booking, stay, support, legal or authorised purpose.
Hosts may be responsible for their own compliance with applicable data-protection laws when they use Guest personal data outside NZZL's authorised purposes.
This summary is provided for convenience. The full Privacy Policy below applies.
NZZL collects data to operate the Platform, manage accounts, enable Hosts to list accommodation, process bookings, support payments and payouts, communicate with Users, provide support, resolve disputes, protect safety, prevent fraud, improve services, comply with law and create aggregated insights.
NZZL shares data only where reasonably needed to operate the Platform, support bookings, work with service providers, comply with law, protect Users, or protect the Platform.
NZZL may create aggregated, anonymised or de-identified reports that do not identify individual Users, Hosts, Guests, property owners or specific private properties.
Users may request access, correction, deletion, account closure or other rights available under applicable law.
NZZL, we, us, our means NZZL SARL, the operator of nzzl.com and related services.
Platform means nzzl.com and any related website, tools, communications, support processes, listing services, booking services, payment flows or other services operated by NZZL.
User, you, your means any person or entity accessing or using the Platform, including Guests, Hosts, Host Representatives, account holders, browsers and support users.
Guest means a User who searches for, requests, books, pays for or stays in accommodation through the Platform.
Host means a User who lists, offers, manages, represents or makes accommodation available through the Platform.
Host Representative means a person acting for a Host, property owner, company, property manager or authorised representative.
Listing means accommodation content, photos, prices, fees, availability, house rules, cancellation terms, amenities, location information, descriptions, policies and related information made available on the Platform.
Booking means a reservation, request, confirmed stay or accommodation transaction made or managed through the Platform.
Content means text, images, listings, messages, reviews, prices, policies, profiles, comments and other material uploaded, displayed, sent or made available through the Platform.
Personal data means information relating to an identified or identifiable individual.
Aggregated data means data combined so that it does not identify an individual User.
Anonymised data means data processed so that it is not intended to identify an individual User.
De-identified data means data with identifying details removed or reduced, subject to safeguards designed to reduce re-identification risk.
Service Provider means a third-party provider supporting NZZL's Platform operations, including payment, hosting, analytics, communications, verification, fraud-prevention, support or security providers.
NZZL collects personal data directly from Users, automatically through use of the Platform, from Hosts and Guests during bookings, from Service Providers and from other sources where permitted by law.
NZZL may collect the following data from Guests:
NZZL may collect the following data from Hosts and Host Representatives:
NZZL may collect data automatically when Users access or use the Platform, including:
NZZL does not collect precise device location unless this is clearly enabled, required for a Platform feature, or otherwise permitted by applicable law.
NZZL may collect and retain communications between Guests and Hosts, Users and NZZL support, Users and NZZL operations teams, and Users and payment, safety, complaint or dispute teams.
This may include messages, emails, support tickets, call notes, WhatsApp messages where enabled, attachments, screenshots, photos, videos, receipts and other records needed to operate the Platform and resolve issues.
NZZL may collect or receive payment-related data needed to process bookings, refunds, payouts, chargebacks, fraud checks and reconciliation.
Payment card, bank or wallet information may be collected and processed by third-party payment providers.
NZZL does not directly store full payment card numbers where payments are processed by third-party payment providers.
NZZL may receive limited payment information such as transaction status, transaction reference, payment method type, payment amount, currency, refund status, payout status, chargeback status and fraud or risk indicators.
Payment providers may process personal data under their own terms and privacy notices. Users should review the relevant payment provider privacy notices where payment-provider services are used.
NZZL may receive personal data from third parties where permitted by law, including payment providers, identity or verification providers, fraud-prevention providers, customer support providers, analytics providers, Hosts, Guests, Host Representatives, professional advisers, public sources, authorities where legally required or permitted, and other Service Providers supporting the Platform.
NZZL may use personal data to:
NZZL may use personal data to:
NZZL may use personal data to:
NZZL may use personal data to send:
NZZL may communicate by email, SMS, phone, WhatsApp where enabled, Platform notification, account dashboard, support ticket or other contact method provided by the User.
NZZL may use personal data to:
NZZL may use personal data to:
NZZL may use personal data to:
NZZL may use data to create aggregated, anonymised or de-identified reports that are not intended to identify individual Users.
These reports may include number of bookings, nights stayed, average booking values, city or district distribution, accommodation supply trends, demand trends, general pricing trends, occupancy trends and other marketplace insights.
Aggregated, anonymised or de-identified reports may be used for Platform improvement, market analysis, business planning, public policy design, government engagement, tourism insights or other lawful purposes.
NZZL processes personal data where it has a lawful basis under applicable law, including Moroccan Law 09-08 of 18 February 2009 (Loi n° 09-08) and any other applicable data-protection laws.
Depending on the User, feature, country, legal requirement and specific processing activity, typical lawful grounds may include:
Where consent is required, Users may withdraw consent where permitted by law. Withdrawal of consent may affect the availability of certain Platform services.
NZZL may share personal data where reasonably necessary or legally permitted to operate the Platform, provide services, protect Users, comply with law or support legitimate business purposes.
NZZL does not sell personal data.
NZZL may share relevant booking information between Guests and Hosts, including:
Hosts may use Guest personal data only for the relevant booking, stay, support issue, legal requirement or other purpose authorised by NZZL.
NZZL may share data with payment providers to process payments, refunds, payouts, fraud checks, chargebacks, reconciliation and payment security.
Payment providers may process personal data under their own terms and privacy notices.
NZZL may share data with Service Providers that support the Platform, including:
Service Providers are expected to use personal data only as needed to provide services to NZZL or as otherwise permitted by law.
NZZL may share personal data with authorities, regulators, courts, law enforcement or government bodies where required or permitted by law, or where necessary to protect safety, prevent fraud, respond to legal process, enforce legal rights or comply with legal obligations.
NZZL will review authority requests in accordance with applicable law.
Where appropriate and legally permitted, NZZL may seek clarification or challenge requests that appear overbroad, unclear or inconsistent with applicable law.
If NZZL is involved in a merger, acquisition, investment, restructuring, financing, sale of assets or similar transaction, personal data may be transferred or disclosed as part of that transaction, subject to appropriate confidentiality and legal protections where required.
NZZL may share personal data with lawyers, auditors, accountants, insurers, consultants and other professional advisers where reasonably necessary for legal, financial, audit, insurance, risk, compliance or business purposes.
NZZL may produce aggregated, anonymised or de-identified reports for government, tourism, economic development, public policy, research or market analysis purposes.
Such reports may include information such as:
NZZL will use reasonable efforts to ensure that aggregated, anonymised or de-identified public-sector reports do not identify individual Guests, Hosts, property owners or specific private properties.
NZZL may apply aggregation thresholds, small-cell suppression, geographic grouping, time-period grouping or other safeguards designed to reduce the risk that individual Users, Hosts, Guests, property owners or specific private properties can be identified from public-sector reports.
NZZL does not include personal data in aggregated public-sector reports unless required by law, authorised by the relevant User, or otherwise permitted under applicable law.
NZZL may be required by law to provide personal data to authorities in certain circumstances. Where this occurs, NZZL will handle such requests in accordance with applicable law.
NZZL may use cookies, pixels, local storage, device identifiers and similar technologies to operate and improve the Platform.
Essential cookies support login, account security, checkout, fraud prevention, Platform operation and core website functionality.
Preference cookies remember settings, choices and user preferences.
Analytics cookies help NZZL understand Platform usage, performance, errors, search behaviour and booking flow performance.
Marketing cookies help NZZL measure or deliver promotions, campaigns and marketing communications where permitted.
Communication and support cookies support chat, messaging, helpdesk or support features where enabled.
Where required by law, NZZL will request consent before using non-essential cookies or similar technologies.
Users may be able to manage cookies through browser settings or any cookie preference tool made available by NZZL.
Blocking some cookies may affect Platform functionality.
NZZL may publish a separate Cookie Policy or cookie notice with more detail.
NZZL may use contact details to send service-related messages, operational updates and, where permitted, marketing communications.
Marketing communications may include new feature announcements, destination or accommodation updates, Host or Guest education, promotions or offers, surveys, newsletters and service improvement requests.
NZZL will obtain consent for marketing communications where required by law.
Users may unsubscribe from marketing communications using the instructions in the message or by contacting NZZL.
NZZL will not send marketing communications where the User has opted out, except service, safety, security, booking, payment, support, legal or account-related communications that are not marketing.
NZZL uses reasonable technical, organisational and administrative safeguards to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These safeguards may include:
No system is completely secure. Users are responsible for keeping account credentials confidential and notifying NZZL promptly of suspected unauthorised access or suspicious activity.
NZZL retains personal data for as long as reasonably necessary for the purposes described in this Privacy Policy.
NZZL determines retention based on:
Typical retention principles include:
Users may request account closure by contacting NZZL. NZZL may retain certain data after account closure where required or permitted for legal, tax, accounting, payment, fraud-prevention, safety, dispute, security, operational or legitimate business purposes.
NZZL may delete, anonymise or de-identify personal data when it is no longer reasonably needed, unless retention is required or permitted by law.
NZZL may use Service Providers, technology systems or infrastructure located in other countries.
As a result, personal data may be transferred to, stored in or accessed from countries outside Morocco.
These countries may have data-protection laws that differ from those in Morocco.
Where personal data is transferred internationally, NZZL will take steps required by applicable law to protect personal data.
Where required, NZZL will use contractual, technical and organisational safeguards designed to ensure an appropriate level of protection.
Hosts may receive Guest personal data for the purpose of managing a booking, stay, communication, support issue, legal requirement or other purpose authorised by NZZL.
Hosts must:
Hosts act independently when they use Guest personal data outside NZZL's authorised purposes and may be responsible for their own compliance with applicable data-protection laws.
NZZL may restrict, suspend or remove Hosts who misuse Guest personal data.
Subject to applicable law, Users may have rights regarding their personal data, including the right to:
To exercise privacy rights, email privacy@nzzl.com.
NZZL may need to verify identity before responding to a request.
NZZL will respond to valid requests within the period required by applicable law.
NZZL may refuse or limit a request where permitted by law, including where data must be retained for legal, tax, accounting, payment, fraud-prevention, security, safety, dispute, chargeback, operational or legal-claims purposes.
Deleting certain data or closing an account may affect the availability of Platform services, including account access, booking history, Host tools, payout processing, support, dispute handling and legal record-keeping.
Requests made to NZZL may not affect personal data lawfully held by Hosts, payment providers or other third parties under their own terms and legal obligations.
The Platform is intended for Users who are at least 18 years old.
NZZL does not knowingly allow children to create accounts, make bookings, list accommodation or use Platform services directly.
If NZZL becomes aware that a child has provided personal data without appropriate authority, NZZL may delete or restrict the data and account, where required or permitted by law.
If a parent, guardian or authorised adult believes that a child has provided personal data to NZZL, they may contact NZZL using the details in the Contact section.
Users are responsible for ensuring that personal data provided to NZZL is accurate, complete and current.
Guests must keep booking, contact and payment-related information up to date.
Hosts must keep identity, contact, property, Listing, payout, tax and authorisation information up to date.
NZZL is not responsible for loss, failed communications, booking issues, payout delays or support issues caused by inaccurate or outdated User information, except where caused by NZZL's proven fault or where applicable law provides otherwise.
If NZZL becomes aware of a data breach or security incident affecting personal data, NZZL will assess the incident and take steps required by applicable law.
NZZL will determine notification obligations based on the nature of the incident, the data involved, the likely risk to Users, and applicable law.
Where required, NZZL may notify affected Users, authorities, Service Providers or other relevant parties.
Users should promptly report suspected account compromise, suspicious payment messages, phishing attempts, unauthorised access or misuse of personal data to NZZL.
NZZL may update this Privacy Policy from time to time.
If changes are material, NZZL will use reasonable efforts to notify Users through the Platform, email or other appropriate means.
Where consent is required for a new processing activity, NZZL will seek consent as required by law.
The updated Privacy Policy will apply from the effective date stated in the updated version or from the date it is posted, unless otherwise stated.
Continued use of the Platform after the updated Privacy Policy takes effect means you acknowledge the updated Privacy Policy.
For privacy questions, data requests, account-closure requests, complaints or notices, please contact:
NZZL SARLUsers may also contact the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) at www.cndp.ma or another competent data-protection authority where they have the right to do so under applicable law.
This Privacy Policy is governed by the laws of the Kingdom of Morocco, including Moroccan Law 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data (Loi n° 09-08 relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel), unless mandatory law provides otherwise.
NZZL will process personal data in accordance with Moroccan Law 09-08 and any other privacy laws that apply to NZZL's processing activities.