Privacy policy

Who is responsible for your data

The data controller is Désert Foum Zguid, Foum Zguid 84150, Tata, Morocco, the local business that publishes this site and organises the trips described on it. You can reach us about any privacy question by email at [email protected]. Further details about the publisher are given in the legal notice.

We handle personal data in line with Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data and, for visitors in the European Union, with the General Data Protection Regulation (GDPR).

What we collect through the trip request form

When you send a request, we receive the information you choose to give us:

• your name;
• your email address and/or WhatsApp number;
• your travel wishes: the kind of trip, starting point, dates or flexibility, number of nights;
• the size of your group, and the ages of children if you give them;
• dietary needs, if you mention them;
• your message;
• your preferred language;
• whether you agreed to receive occasional news from us (this box is unchecked by default);
• the page of this site from which you sent the request.

Please don’t include sensitive information, such as health details beyond what is useful for planning (for example a dietary need), in your message.

Like any website, our hosting provider also processes technical data, such as your IP address and browser information, to deliver pages and protect the site against abuse.

Why we use it and on what basis

• To answer your request and prepare a quote. This is a step you ask us to take before any contract, which is the legal basis for this use.
• To send you occasional news, only if you ticked the marketing box. This is based on your consent, which you can withdraw at any time.
• To keep the form secure and free of spam. This is based on our legitimate interest in protecting the site and our inbox.

We do not use your data for automated decision-making or profiling, and we do not sell it or rent it to anyone.

Who processes it for us

• Cloudflare hosts this site, delivers the form submission to us and provides the Cloudflare Turnstile anti-spam check on the form. Turnstile analyses technical signals from your browser to tell people from bots.
• Our email delivery provider sends the content of your request to our inbox, and our replies to you.

These providers act on our instructions and may process data outside Morocco and the European Union. We share your data only with them, and with no one else unless the law requires it.

WhatsApp

If you contact us on WhatsApp, or give us a WhatsApp number so we can reply there, your messages go through WhatsApp, a third-party service with its own privacy policy and terms. We recommend reading them if you have concerns.

How long we keep it

We keep the information from your request for as long as we need it to handle your request, and up to 24 months after our last contact with you, so we can answer follow-up questions about the same trip. If your request leads to a booking, some information may be kept longer where accounting or legal rules require it. After that, it is deleted.

If you agreed to receive news from us, we keep your contact details for that purpose until you withdraw your consent.

Your rights

You can ask us at any time to:

• access the personal data we hold about you;
• correct it if it is inaccurate or incomplete;
• erase it, unless we must keep it for a legal reason;
• stop using it, or object to a particular use, including any marketing;
• withdraw your consent to news, without affecting what was done before.

If the GDPR applies to you, you also have the right to restrict processing and to receive your data in a portable format.

To exercise these rights, write to us by email at [email protected]. We may ask you to confirm your identity before acting on the request. If you are not satisfied with our answer, you can complain to the Moroccan data protection authority (CNDP) or to the supervisory authority of your country of residence in the European Union.

Cookies and similar technologies

We do not use advertising cookies, and no analytics or marketing cookies are set unless you consent. The details are on our cookies page.

Security

The site is served over an encrypted connection, and we share the requests we receive only with the people who organise your trip. No system is completely secure, so please avoid sending more information than your trip requires.

Changes to this policy

We may update this policy when the site or our way of working changes. The date of the last material update is shown on this page.