Who Owns Your Guests? Data Ownership in Moroccan Tourism

A riad in Fez that has hosted two thousand guests over six years has, on paper, a substantial asset: two thousand people who chose Morocco, chose that city, chose that property, and mostly enjoyed it. In practice most such properties cannot contact a single one of them. The names sit inside platform inboxes behind masked email addresses, and the relationship belongs to Booking.com.

This is the least discussed and most consequential cost of platform distribution. Commission is a percentage. The guest relationship is the business.

Why owned data compounds

Platform bookings are transactions that end at checkout. Owned relationships accumulate:

• Repeat bookings cost nothing to acquire. A returning guest who books direct carries a 2% payment fee instead of a 21% commission.
• Referrals are the strongest channel in tourism. A guest who recommends your camp to three friends produces bookings no platform was involved in — but only if those friends can find and contact you.
• Shoulder season becomes fillable. A camp with 800 consented contacts can fill a quiet February week with one message. This is the single most practical use of a guest list in Moroccan tourism, where seasonality is brutal.
• You learn who your guests actually are. Which nationalities, which trip types, which seasons — information platforms hold and you do not.

Collecting lawfully — this part matters

Morocco has a data protection framework: Law 09-08, overseen by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel). Processing personal data carries obligations around declaration, consent, purpose limitation and the rights of the individual. If you serve European guests, GDPR considerations may also apply to your handling of their data.

This is orientation, not legal advice — take proper advice before building a marketing database.

The practical rules that follow from it:

• Ask, and record that you asked. A checkbox at booking, a signed line on the registration card, a form the guest completes. Consent you cannot evidence is not consent.
• Say what you will use it for, specifically. “To send occasional offers and seasonal availability” is a purpose. “Marketing” is not.
• Make unsubscribing easy and honour it immediately.
• Store it somewhere you control with access limited to people who need it. Not a personal WhatsApp export, not an unprotected spreadsheet on a shared laptop.
• Never scrape platform messages. Harvesting contact details from Booking.com or Airbnb messaging to build a marketing list violates their terms, risks account suspension, and is unlikely to be lawful processing. It is also unnecessary — the legitimate routes below work.

Where collection actually happens

The good moments are the ones where the guest is already giving you information for an operational reason:

• Direct bookings. Every direct booking is a consented contact by definition. This is the strongest argument for the work in a direct booking strategy.
• Check-in registration. You are already collecting details for legal requirements. Add a clearly separate, optional marketing consent — separate, because bundling consent into a mandatory form undermines it.
• The WhatsApp conversation. Enquiries that arrive directly are contacts you hold, whether or not they book. Ask permission before adding them to anything.
• Post-stay review requests sent from your own system to guests who opted in.
• Something worth an email address. A genuinely useful Marrakech neighbourhood guide, a desert packing list, a Ramadan travel note — content that earns the address rather than demanding it.

Using it without becoming a nuisance

Two or three messages a year, each with a reason to exist, outperform monthly newsletters nobody opens:

• A seasonal note before a period you need to fill
• A returning-guest rate, offered directly and personally
• Something genuinely new — a new room, a new circuit, a renovation

Segment where you reasonably can. A family who came for a week in the Atlas is not the same prospect as a couple who spent two nights in Gueliz, and a message that acknowledges the difference converts far better.

The measurement

Track two figures annually: the percentage of revenue from repeat and referred guests, and the size of your consented list. Both should rise. If the list grows and repeat revenue does not, you are collecting addresses rather than building relationships.

This is the asset that makes the independence described in reducing OTA dependency real rather than theoretical — and it is the value deliberately excluded from the conservative model in OTA commission vs building a website.