Privacy Policy.
We respect your privacy and only ever collect the data we genuinely need to plan your stay. This page sets out what we collect, why, how we look after it, and the rights you have under UK GDPR and the Data Protection Act 2018.
1. Who we are
This site is operated by Jimmy and Jason Ltd, a company registered in England and Wales (company number 15603187), with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We trade under the name Jimmy and Jason and operate at www.darcollective.co. We are the data controller of any personal data you give us in connection with our service.
2. What we collect
The categories of personal data we collect depend on how you interact with us. They include:
2.1 Information you give us directly
- Identity & contact data — your name, email address, phone number and country of residence.
- Booking data — travel dates, number of guests, age range of children where relevant, dietary preferences, special-occasion notes, and any other information you choose to share in your enquiry.
- Payment data — billing address and card details processed through our payment provider. We do not store full card numbers on our own servers.
- Correspondence — emails, WhatsApp messages and other communication you exchange with our concierge team.
2.2 Information we collect automatically
- Device & browsing data — IP address, browser type, device type, referring URL, pages visited, time on page.
- Cookies and similar technologies — see section 9.
3. Why we use it
We use your personal data to:
- respond to enquiries and quote for your stay;
- process bookings, take payment, and issue confirmations and invoices;
- coordinate your arrival, transport, chef, and on-the-ground concierge needs with the relevant Property team in Morocco;
- provide customer support before, during and after your stay;
- send you transactional messages (booking confirmations, reminders, balance due, post-stay follow-up);
- send a monthly editorial newsletter — only if you have opted in;
- improve the site, our services and our internal operations;
- comply with legal, accounting and tax obligations.
4. Lawful basis
Under UK GDPR we rely on the following lawful bases:
- Contract — to take steps at your request and to perform the booking contract.
- Legitimate interests — for site improvement, fraud prevention, internal record-keeping, and customer-service correspondence. We balance this against your rights and freedoms.
- Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
- Legal obligation — for retention of accounting and tax records.
5. Who we share it with
We share personal data only where necessary, with parties bound by appropriate confidentiality and data-protection obligations:
- the owner or property manager of the villa you book, and resident staff who will host you;
- third-party suppliers you ask us to arrange (chef, driver, spa therapist, photographer, etc.);
- payment processors who handle card transactions on our behalf;
- cloud-service and software providers that host the site and store our records (kept in the UK or EEA wherever possible);
- professional advisers — accountants, lawyers, insurers — under duties of confidence;
- regulators or law-enforcement where required by law.
We never sell your data.
6. International transfers
Some of the parties we share data with — notably the villa owners and resident staff in Morocco — are based outside the UK and EEA. When personal data is transferred outside the UK we put appropriate safeguards in place, such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK Addendum, and only share the minimum data required to plan and deliver your stay.
7. How long we keep it
We keep personal data only as long as necessary for the purpose it was collected:
- Enquiries that did not lead to a booking — 24 months from last contact.
- Booking records — for the duration of your stay and 7 years thereafter for accounting and tax purposes.
- Marketing list — until you unsubscribe.
- Server logs and analytics — typically 14 months.
8. Your rights
Under UK GDPR you have the right to:
- be informed about how we use your data (this policy);
- request a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete data we no longer have a lawful basis to keep;
- ask us to restrict or object to processing in certain circumstances;
- request your data in a portable format;
- withdraw consent at any time where we rely on consent.
To exercise any of these rights, email contact@villasinmarrakech.co.uk. We aim to respond within 30 days.
9. Cookies
We use cookies and similar technologies on this site:
- Strictly necessary cookies — required to operate the site (e.g. remembering session state, security tokens). These do not need consent.
- Functional cookies — remember your preferences (e.g. dismissed notifications). Set only when needed by features you've used.
- Analytics cookies — help us understand how the site is used, in aggregate. Set only with your consent.
You can clear or block cookies at any time in your browser settings.
10. Security
We use industry-standard measures to keep your data safe, including encryption in transit (HTTPS), access controls, principle of least privilege, and regular review of our suppliers' security posture. No system is perfectly secure, but we treat any unauthorised access as a serious matter and will notify you and the relevant authority where required.
11. Children's data
Our service is intended for adults. We do not knowingly collect personal data from children under 16 except as part of an adult-led family booking, where we only use the child's name, age and any disclosed dietary or accessibility requirements to plan the stay.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows the most recent version. Material changes will be communicated to active booking holders by email.
13. Contact & complaints
For any privacy-related question, write to:
Privacy team — Jimmy and Jason Ltd
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
contact@villasinmarrakech.co.uk
+44 7458 148 227
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) — though we'd prefer the chance to put things right first.