Privacy Policy

Effective date: 21 June 2025

 

1 – Who we are

This website, moroccomosaictours.com (the “Site”), is operated by moroccomosaictours, a tour operator registered in Morocco and trading as Morocco Mosaic Tours (“we”, “us”, “our”).

Data-protection contact: Omar.eladnani10@gmail.com – M’Hamid Marrakesh.

 

2 – Scope

This notice explains how we collect, use, disclose and secure personal information when you:

 

browse our Site, contact us by email, phone or WhatsApp

 

book through our forms or third-party booking engines

 

interact with our ads or social-media pages

 

It is drafted to meet Moroccan Law 09-08 and the EU GDPR.

 

3 – What information we collect

Identity & contact details – name, email, phone, nationality, passport number (for confirmed bookings).

Booking & transaction details – chosen tour, date, group size, price, payment status.

Payment details – last 4 digits of card, billing address (processed by credit card or debit card; we never store full card numbers).

Technical data – IP address, browser type, device information, referring URLs (via cookies and server logs).

Marketing & usage data – page views, clicks, newsletter opens, ad interactions (via Google Analytics, Meta/Facebook Pixel, TikTok Pixel).

Cookies & trackers: We use first-party cookies for essential site functions and third-party cookies for analytics and advertising. You can manage your preferences through our cookie banner.

 

4 – Legal bases for processing (GDPR Art 6)

Processing bookings, taking payment and providing support — contract performance.

 

Sending confirmations, reminders or emergency messages — legitimate interest in delivering a smooth service.

 

Marketing emails or SMS — consent (you can withdraw at any time).

 

Analytics and remarketing cookies — consent via the cookie banner.

 

Compliance with tax or audit obligations — legal obligation.

 

5 – How we use your information

Confirm and manage tour reservations.

 

Personalise itineraries, pick-up routes and logistical details.

 

Process secure payments through credit card or debit card.

 

Analyse traffic and improve our Site, ads and customer experience.

 

Send news, promotions or feedback requests when you opt in.

 

Detect, prevent and investigate fraud or misuse.

 

6 – Sharing & disclosure

We do not sell personal data. We share it only with:

 

Payment processors such as credit card or debit card providers.

 

Analytics and advertising providers such as Google, Meta/Facebook and TikTok.

 

Service partners (drivers, accommodation or activity providers) who need guest lists to deliver your tour.

 

Legal or regulatory authorities when required to comply with the law or defend legal rights.

 

All third-party partners sign data-processing agreements that require GDPR-level safeguards and, where relevant, registration with Morocco’s CNDP.

 

7 – International transfers

Some partners are located outside Morocco or the EU. When data is transferred internationally we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses plus additional security measures.

 

8 – Data retention

Booking records and invoices — kept for 10 years (accounting rules).

 

Marketing consents — kept until you unsubscribe or after 3 years of inactivity.

 

Analytics cookies — deleted automatically after 14 months (Google Analytics default).

 

WhatsApp chat history — kept for 12 months, then deleted.

 

9 – Your rights

Under Law 09-08 and the GDPR you can:

 

Access the personal data we hold about you.

 

Request correction of inaccurate data.

 

Object to or restrict certain processing.

 

Withdraw consent at any time (for marketing or cookies).

 

Request deletion (“right to be forgotten”).

 

Receive a portable copy of your data.

 

Contact Omar.eladnani10@gmail.com and we will respond within 30 days.

EU/EEA residents may also complain to their local data-protection authority. Moroccan residents may contact the CNDP.

 

10 – Security measures

SSL/TLS encryption on every page.

 

PCI-DSS-compliant payment gateways.

 

Role-based staff access, strong passwords and two-factor authentication.

 

Daily malware scans and server firewalls.

 

11 – Children

Our services are not directed to children under 16. We do not knowingly collect their data. If you believe a child has provided us personal information, please contact us so we can delete it.

 

12 – Changes to this policy

We may update this notice to reflect changes in law or our services. We will post the revised version here and, where required, notify you by email.

 

13 – Contact us

moroccomosaictours

M’Hamid Marrakesh

Tel/WhatsApp: +212633257678

Email: Omar.eladnani10@gmail.com