We do not sell your personal information. We do not use automated decision-making that has legal or similarly significant effects on you.

What legal grounds apply to our processing?

We process your information because it is needed to respond to your request or perform your booking, because the law requires it, because it is in our legitimate interest to run our business responsibly, or because you have given your consent.

Our processing is governed by Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, supervised by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). Under that law, personal data may be processed with your consent or where processing is necessary, for example, to perform a contract with you, to take steps at your request before entering into a contract, to comply with a legal obligation, or for our legitimate interests where these do not override your interests or fundamental rights and freedoms.

• Enquiries, quotes and bookings: necessary to take steps at your request before a contract and to perform your booking.
• Accounting and record-keeping: necessary to comply with legal obligations.
• Website security and basic operation: our legitimate interest in running a secure, working website.
• Post-trip feedback requests: our legitimate interest in improving our service; you can object at any time.
• Marketing emails or messages: your consent, which you can withdraw at any time.
• Non-essential cookies, analytics and advertising: your consent where required.
• Health, dietary and accessibility information: your explicit consent, given when you choose to share it for your trip.

Who do we share information with?

We share only the information each recipient needs to deliver your trip or run our business, and never sell it.

Travel suppliers

To deliver your itinerary, we pass relevant details to the hotels, riads, guesthouses, desert camps, licensed guides, drivers and activity providers involved in your trip. Many of these suppliers use your information for their own purposes and legal obligations, for example hotels registering guests as required by Moroccan law, so they act as independent controllers responsible for their own handling of your data. drivers are employees,while guides are contractors acting on our instructions

Service providers that support our business

• Google (Gmail email)
• Meta (WhatsApp messaging)

These providers process information to provide their services to us; some also act as controllers for certain purposes under their own terms.

Authorities and legal requirements

We may disclose information where required by law, by a court or by a competent authority, or where necessary to protect someone's vital interests in an emergency.

Is information transferred internationally?

Yes. Some of the services we use, including Gmail, WhatsApp, are provided by companies that may store or process information outside Morocco.

Moroccan Law No. 09-08 restricts transfers of personal data to countries that do not ensure an adequate level of protection, subject to exceptions and CNDP authorisation.

How long do we retain information?

We keep personal information only for as long as we need it for the purposes described above, then delete it or anonymise it.

• Enquiries that do not lead to a booking: 6 months after last contact
• Booking and traveller information: for the duration of the trip and any follow-up.
• Payment and accounting records: for the period required by Moroccan accounting and tax law.
• WhatsApp and email conversations:

How do we protect information?

We take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access, but no method of transmission or storage is completely secure.

Please avoid sending card numbers or passport images by ordinary email or chat unless we have asked for them through an agreed method.

What rights and choices do you have?

You can ask to see the personal information we hold about you, have it corrected or updated, and object to its use, including for marketing, at any time.

Under Moroccan Law No. 09-08 you have the right to be informed about the processing of your data, the right of access, the right to rectification (including correction, completion, updating or deletion of inaccurate or incomplete data) and the right to object, for legitimate reasons, to processing, and to object without charge to marketing.

How to make a request: email culture.moroccotours@gmail.com with "Privacy request" in the subject line. We may ask you to confirm your identity. We will respond within within few minutes. Some requests may be limited, for example where we must keep records by law.

How do we handle children's information?

We collect information about children only when a parent or guardian provides it to plan or book a family trip; our services are not directed at children, and we do not knowingly accept enquiries directly from them.

Children's ages help us plan suitable rooms, activities and pace. For bookings, we may need children's names and the booking details suppliers require. their names and ages We share these only with the suppliers delivering your trip.

How do we handle sensitive travel requirements?

We ask you to share health, dietary, accessibility or religious requirements only if they matter for planning your trip, and we use that information solely for that purpose.

Some of this information may be considered sensitive under the law, for example health conditions, or dietary requests that reveal religious beliefs. When you share it, you give your explicit consent for us to use it to arrange your trip and to pass the relevant part to the hotel, camp, guide or restaurant that needs it. You can withdraw that consent, though we may then be unable to make suitable arrangements.

Sharing this information is optional. Please share only what is useful for planning, and avoid sending medical documents unless we specifically need them.

How can you stop marketing communications?

You can stop marketing at any time by clicking "unsubscribe" in any marketing email, replying "STOP" to a marketing WhatsApp message, or emailing culture.moroccotours@gmail.com.

We send marketing only to people who have opted in. Stopping marketing does not affect messages we need to send about an enquiry or booking.

What happens when you follow third-party links?

When you leave our website through a link, for example to WhatsApp, Tripadvisor, Google Maps or an official tourism or UNESCO page, the other site's own privacy policy applies, and we are not responsible for how it handles your information.

How will we communicate policy changes?

We will update the "Last updated" date at the top of this page whenever we change this policy, and if a change significantly affects how we use information you have already given us, we will tell you directly by email or WhatsApp before it takes effect.