Privacy Policy
Last updated: [DATE]. Template – have it reviewed before launch. Declare the processing to the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel) as required by Law 09-08.
Data controller
[COMPANY NAME], [ADDRESS], Morocco – [EMAIL]. CNDP declaration/authorisation no. [NUMBER].
What we collect
- Booking data: name, email, phone/WhatsApp number, hotel for pickup, number of participants, special requests.
- Account data: name, email, password (stored encrypted), wishlist.
- Payment data: handled by our payment providers (e.g. CMI, PayZone, Stripe). We only receive a payment confirmation and reference.
- Technical data: IP address, browser and pages visited, used for security and statistics.
Why we use it
- To process and manage your booking, and to send confirmations and reminders (contract performance).
- To share the information the Supplier needs to run your Activity (name, phone, pickup, participants).
- To answer your questions and handle complaints.
- To improve the website and prevent fraud (legitimate interest).
- To send you offers, only if you agreed (consent – you can unsubscribe at any time).
Who receives it
The Supplier of the Activity you booked, our hosting, email and messaging providers (e.g. WhatsApp Business by Meta), and payment providers. Some providers may be located outside Morocco; we only use providers offering appropriate safeguards.
How long we keep it
Booking data: up to 5 years for accounting and legal reasons. Account data: until you delete your account. Marketing consent: until you withdraw it.
Your rights
You can access, correct, delete or object to the use of your data, and withdraw consent, by writing to [EMAIL]. You can also complain to the CNDP (www.cndp.ma) or, if you live in the EU, to your local data protection authority.