Last updated: October 18, 2026
This privacy policy explains how Un Viaje a Marruecos, operated by the local team behind Morocco Excursions in Marrakech 40000, Morocco (“we”, “us”), collects and uses your personal data when you visit our website, contact us or book a tour. We apply the EU General Data Protection Regulation (GDPR) to all visitors, wherever you live, because it is one of the strictest standards in the world.
Who is responsible for your data
We are the data controller for the personal data described in this policy. You can reach us about any privacy question at info@unviajeamarruecos.com or by post at Marrakech 40000, Morocco.
What data we collect
- Contact and quote forms: your name, email address, phone or WhatsApp number, country, travel dates, number of travelers and any details you choose to share in your message.
- Bookings: the names of travelers, contact details, pickup location, tour choices, dietary needs or other requests you tell us about, and the status of your payment.
- Payments: we do not see or store your full card number. Payments are processed by PayPal, which shares with us only what we need to confirm your booking, such as your name, email, amount paid and transaction ID.
- Website usage: if you give consent, anonymous or pseudonymous data about how you use our site, such as pages viewed, device type and approximate location, collected through Google Analytics.
Please do not send us sensitive data, such as health information, unless it is needed for your trip (for example, a food allergy or mobility need). If you do, we use it only to plan your tour safely.
Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your questions and preparing quotes | Steps at your request before a contract |
| Managing your booking, transport and accommodation | Performance of a contract |
| Processing deposits and payments | Performance of a contract |
| Keeping accounting and tax records | Legal obligation |
| Website analytics | Your consent |
| Occasional travel tips or offers by email | Your consent, which you can withdraw at any time |
| Protecting our website and handling disputes | Our legitimate interests |
Who we share your data with
We never sell your personal data. We share it only when needed to deliver your trip or run our business:
- PayPal, which processes payments as an independent provider under its own privacy policy.
- Hotels, riads, desert camps and local guides on your itinerary, who receive only the names and details they need to host you.
- Google, for website analytics, only if you accept analytics cookies.
- Hosting, email and messaging providers (including WhatsApp, if you contact us there), which act on our behalf.
- Authorities, when the law requires it.
International transfers
We are based in Morocco, and some of our providers operate in the United States and other countries. When personal data from the European Economic Area is transferred outside it, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses or the provider’s certification, or on the transfer being necessary to perform the contract you asked for, such as booking your hotel in Morocco.
Cookies and analytics
Our site uses cookies that are strictly necessary for it to work. We use Google Analytics only if you accept it in the cookie banner. You can change your choice at any time from the cookie settings link on our site, or block cookies in your browser.
How long we keep your data
- Inquiries that do not lead to a booking: up to 2 years after our last contact.
- Booking and payment records: as long as required by accounting and tax law, typically up to 10 years.
- Email marketing: until you unsubscribe.
- Analytics data: up to 14 months.
Your rights
Under the GDPR, and in many cases under the privacy laws of your own country, you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- ask us to delete your data, unless we must keep it by law;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting earlier processing.
To exercise any right, email info@unviajeamarruecos.com. We reply within one month. If you live in the EU and are not happy with our answer, you can complain to your local data protection authority.
Travelers outside the EU
If you live in the United States, the Caribbean or elsewhere, we give you the same rights and protections described above. Where your local law gives you additional rights, we will honor them on request.
Children
We do not knowingly collect data from children under 16 except when a parent or guardian provides it to book a family trip.
Security
We use secure connections, trusted providers and restricted access to protect your data. No system is perfectly secure, so contact us right away if you think your data has been exposed.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version. Questions? Read our terms and conditions or contact us.