- Home
- Privacy policy
Privacy policy
Last updated [DATE] · Applies to marrakeshquads.com and to bookings made through it
In plain terms: we collect what we need to get you to the desert and back, we keep it as long as the law makes us, and we don't sell it. Everything below is the detail behind that sentence.
Who we are
This website is operated by [LEGAL ENTITY NAME], trading as MarrakeshQuads, registered in Morocco under commercial register number [RC NUMBER], ICE [ICE NUMBER], with its place of business at [FULL ADDRESS], Marrakech, Morocco.
We decide what personal data is collected through this site and why, which makes us the data controller. If you have any question about this policy, or want to exercise one of the rights described in section 8, write to privacy@marrakeshquads.com.
What we collect
When you make a booking
The booking form asks for your name, email address, phone number, the hotel or riad you're staying at, and anything you write in the notes field. We also record which machine you chose, your date and departure, any add-ons, and the total.
When you message us on WhatsApp
We keep the conversation, including your phone number and WhatsApp display name. WhatsApp is operated by Meta, not by us — their handling of your messages is governed by their own privacy policy.
When you email or call
Your address or number and whatever you send us. Nothing more.
When you browse the site
Our host records your IP address, browser type and the pages you request, as part of ordinary server logging. If you accept analytics cookies we also collect the pages you visit and how you arrived — see section 6.
We do not collect payment card details on this site. You pay at our base on the day, in cash or through a card terminal operated by our bank, and no card number reaches this website.
Why we use it, and on what basis
Under the GDPR we must tell you our legal basis for each use. Under Moroccan law 09-08 we must tell you the purpose. Both are below.
| What we do | Data used | Legal basis |
|---|---|---|
| Confirm and run your booking | Name, email, phone, hotel, ride details | Performance of a contract with you |
| Arrange your hotel pick-up | Name, phone, hotel | Performance of a contract |
| Answer your questions | Whatever you sent us | Our legitimate interest in replying to enquiries |
| Keep accounting records | Name, booking, amount paid | Legal obligation under Moroccan tax law |
| Handle an accident or insurance claim | Booking record, incident notes | Legal obligation and legitimate interest |
| Measure how the site is used | Analytics cookies | Your consent |
| Advertising on Meta platforms | Advertising cookies | Your consent |
| Send you offers by email | Email address | Your consent — we only do this if you ask |
We do not sell your data, and we do not build advertising profiles of you beyond what the cookies in section 6 do.
Who else sees it
We share your data only with the people who need it to get you into the desert and back:
- Our guides and drivers — your name, phone number and pick-up address, on the day.
- The desert camp, if you booked dinner — first name, number of people, dietary notes.
- The camel handlers, if you booked a camel ride — number of riders only.
- [HOSTING PROVIDER] — our web host, which stores the site and its database.
- [EMAIL PROVIDER] — sends your confirmation email.
- Google — analytics, if you consent.
- Meta — advertising measurement, if you consent, and WhatsApp when you message us there.
- Our accountant and, where legally required, the Moroccan tax authorities.
If a claim arises we may also share your booking record with our insurer or our lawyer.
Where your data is stored
Our website and database are hosted in [HOSTING COUNTRY]. Our email and analytics providers process data in the European Union and the United States.
If you are in the EEA or the UK, that means some of your data leaves it. Those transfers rely on the European Commission's standard contractual clauses, which our providers have signed, or on an adequacy decision where one applies. You can ask us for a copy of the safeguards in place.
How long we keep it
- Enquiries that never became a booking — 12 months, then deleted.
- Booking records — 10 years, because Moroccan tax and commercial law requires it.
- WhatsApp conversations — 24 months, then the thread is deleted.
- Marketing consent — until you withdraw it, and for 3 years after your last interaction.
- Server logs — 30 days.
- Analytics data — as set out in the cookie table above.
Your rights
You can ask us to:
- Show you what we hold about you, and give you a copy.
- Correct it if it's wrong — a misspelled name, an old phone number.
- Delete it, unless we're legally required to keep it (accounting records, mainly).
- Stop using it for a particular purpose, or restrict what we do with it while a dispute is resolved.
- Send it elsewhere in a machine-readable format.
- Withdraw consent for analytics, advertising or marketing email, at any time, without affecting what we did before you withdrew it.
Write to privacy@marrakeshquads.com. We reply within 30 days. We may ask you to confirm your identity first — usually by writing from the address you booked with.
If you think we've handled your data badly, you can complain to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) in Rabat. If you are in the EEA or the UK, you can complain to your own national data protection authority instead.
How we protect it
The site runs over HTTPS. The booking database sits behind the hosting provider's access controls and only two people in the business have administrative access to it. Booking notifications go to a single company mailbox, not to personal accounts.
No system is perfectly secure. If a breach ever affects your data and creates a real risk to you, we will tell you and the CNDP without undue delay.
Children
This site is not aimed at children and we don't knowingly collect data from anyone under 16 through it. Children do ride with us — as passengers, and from the minimum ages set out on each activity page — but the booking is always made by an adult, and it is that adult's details we hold.
Changes to this policy
When we change how we handle data, we update this page and change the date at the top. If a change materially affects you, we'll say so more visibly than a date change — by email if we hold your address for a live booking.
Contact
[LEGAL ENTITY NAME]
[FULL ADDRESS]
Marrakech, Morocco
Privacy questions: privacy@marrakeshquads.com
Bookings: booking@marrakeshquads.com
WhatsApp: +212 6 00 00 00 00
See also our terms and cancellation policy.