Legal

Privacy Policy

Effective date: 1 January 2025  ·  Last updated: October 2026

MorocTrip is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our platform, how we use it, and what rights you have.

1. Data Controller

The data controller is MorocTrip, Marrakech, Morocco. Email: contact@moroctrip.com

2. Data We Collect

Category Examples Source
Identity & Contact Name, email, phone Provided by you at booking
Booking data Activity, date, participants Provided by you at booking
Payment data Card type, last 4 digits (tokenised) Stripe payment processor
Technical & Usage IP address, pages visited, browser Server logs & analytics
Preferences Language, currency Cookies
Reviews Star rating, optional comment Provided voluntarily

3. How We Use Your Data

  • Processing your booking — confirming the activity, sending booking confirmations and receipts.
  • Customer service — responding to enquiries, handling cancellations and refunds.
  • Platform improvement — analysing usage to improve user experience.
  • Marketing (with consent) — newsletters and promotional offers. You may unsubscribe at any time.
  • Fraud prevention & security — detecting and preventing fraudulent transactions.
  • Legal obligations — complying with applicable laws and tax regulations.
  • Performance of a contract — processing necessary to complete your booking.
  • Legitimate interests — analytics, fraud prevention, platform security.
  • Consent — marketing emails and non-essential cookies.
  • Legal obligation — record-keeping, tax reporting.

5. Data Sharing

We share your personal data only as follows:

  • Tour Operators: Your name, phone number and booking details are shared with the relevant Operator.
  • Stripe: Payment information is processed by Stripe. We receive only a payment token; we never see your raw card number.
  • Brevo: Used as our transactional email provider to deliver booking confirmations.
  • Analytics: Anonymised usage data may be shared with Google Analytics and Hotjar.
  • Legal authorities: Where required by law or court order.

We do not sell your personal data to third parties.

6. Cookies

Cookie Purpose Duration
_mt_lang Stores your preferred language 30d
currency Stores your preferred display currency 30d
PHPSESSID Session management (essential) Session
Google Analytics Anonymised traffic analysis ≤ 2y
Hotjar Session recordings & heatmaps (anonymised) ≤ 1y
Stripe Fraud prevention during checkout Session / 1y

7. Data Retention

  • Booking records: 5 years from the booking date (accounting obligations).
  • Account data: Until you request deletion or 2 years of inactivity.
  • Marketing consent: Until withdrawn.
  • Server logs: 90 days.

8. Your Rights

Under the GDPR and Moroccan Law 09-08 on data protection, you have the following rights:

Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Right to Restrict
Request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, email contact@moroctrip.com. We will respond within 30 days.

9. International Data Transfers

Your data may be processed outside Morocco and the EEA (e.g., by Stripe in the USA). We rely on the European Commission's Standard Contractual Clauses to safeguard your data.

10. Security

We implement appropriate technical and organisational measures including TLS encryption, bcrypt password hashing, PDO prepared statements, and strict server-side input validation.

If we become aware of a data breach likely to affect your rights, we will notify you within 72 hours as required by law.

11. Children's Privacy

The Platform is not directed at children under 16 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform.

13. Contact Us

MorocTrip
Email: contact@moroctrip.com — Marrakech, Morocco