Privacy Policy

1. Introduction

The Morocco Way ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over your data.

This policy applies to all users of themoroccoway.com and to any person who submits an inquiry or booking through our website.

Data controller: The Morocco Way, Morocco | info@themoroccoway.com

2. Data We Collect

When you submit an inquiry or booking form on our website, we may collect the following personal data: your full name, email address, phone number, WhatsApp number, travel date, number of guests (adults, children, infants), nationality, hotel or accommodation name, pickup and drop-off location, preferred payment method, and any special requests you provide.

We also automatically collect technical data when you visit our website, including your IP address, browser type, device type, pages visited, and session duration. This data is collected through our web server and, when you consent, through analytics tools.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance (GDPR Art. 6(1)(b)): to respond to your inquiry, process your booking, and deliver the services you have requested.

Legitimate interest (GDPR Art. 6(1)(f)): to improve our services, prevent fraud, and maintain the security of our systems.

Consent (GDPR Art. 6(1)(a)): for analytics and advertising cookies, and for any direct marketing communications, where you have given your explicit consent.

We also comply with Morocco Law 09-08 on the protection of individuals with regard to the processing of personal data.

4. How We Use Your Data

We use your personal data to: respond to your inquiries and process your bookings; send booking confirmations, itinerary details, and service updates; provide customer support before, during, and after your activity; improve the quality and relevance of our services; and comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Third-Party Services

We use or intend to use the following third-party services, which may process your personal data on our behalf:

Supabase (supabase.com) — our database and authentication infrastructure, with servers located in the EU and the United States. Your inquiry and booking data is stored through Supabase.

Resend (resend.com) — used to send transactional emails such as booking confirmations. Your email address and booking details are transmitted to Resend solely for this purpose.

Google Analytics (planned, not yet active) — a web analytics service provided by Google LLC. Once implemented, it will be used to understand how visitors use our website. It will only be loaded with your explicit consent.

Meta Pixel (planned, not yet active) — an advertising measurement tool provided by Meta Platforms, Inc. Once implemented, it will help us measure the effectiveness of advertising campaigns on Facebook and Instagram. It will only be loaded with your explicit consent.

These analytics and advertising tools are not yet active on our website. When they are implemented, they will only activate after you have provided consent through our cookie banner.

6. Cookies

Our website uses cookies — small text files stored in your browser — to ensure the site functions correctly and to improve your experience.

Essential cookies are strictly necessary for the website to function. They do not track you for advertising purposes and do not require your consent.

Analytics cookies (Google Analytics) and advertising cookies (Meta Pixel) are only placed on your device if you click "Accept all" in our cookie banner. You can withdraw your consent at any time by clearing your browser cookies and choosing your preference when you next visit the site.

7. Your Rights

Under GDPR and Morocco Law 09-08, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you.

Right to rectification: you can ask us to correct any inaccurate or incomplete data.

Right to erasure: you can request that we delete your personal data, subject to any legal obligations to retain it.

Right to object: you can object to processing based on legitimate interest.

Right to data portability: you can request your data in a structured, machine-readable format.

Right to withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@themoroccoway.com. We will respond within 30 days. You also have the right to lodge a complaint with your national or local data protection authority.

8. Data Retention

We retain inquiry and booking data for up to 3 years from your last interaction with us, after which it is permanently deleted or anonymised. Transactional email logs are retained for 12 months. Technical log data is retained for up to 6 months.

We may retain data for longer periods where required by law or for the resolution of disputes.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside Morocco, including the United States, by our service providers Supabase and Resend. These transfers are carried out under appropriate safeguards, including standard contractual clauses approved by relevant supervisory authorities.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to personal data is restricted to authorised personnel only. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available at themoroccoway.com/privacy, with the date of the last update clearly indicated.

12. Contact

For any questions about this Privacy Policy, to exercise your rights, or to raise a concern, please contact us at info@themoroccoway.com.