Privacy Policy

The data controller is STE Corazon de Marruecos SARL, trading as Morocco Trip Joy, Ksar El Khamlia, Merzouga, Morocco. Email: info@moroccotripjoy.com.

We process personal data in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, where it applies to you, the European General Data Protection Regulation (GDPR).

We collect the data you give us when you use our contact or booking forms, or when you write to us by WhatsApp or email. This may include your name, email address, phone number, country, travel dates, number of travellers, preferences and any other information you choose to share.

For confirmed bookings, we may also ask for passport details and information needed for your trip, such as dietary needs.

We use your data to answer your questions, prepare proposals, organise and manage your tour, and comply with legal obligations such as accounting and accommodation registration. The legal basis is your request, the performance of a contract with you, our legal obligations and, where needed, your consent.

We share only the data needed with the service providers that make your trip possible, such as hotels, camps and local guides. Our website is hosted by Netlify, which processes technical data needed to deliver the site. Messages you send by WhatsApp or email are also handled by those services.

We do not sell or rent your personal data to anyone.

We keep enquiry data for as long as needed to answer you and follow up your request. Booking data is kept for the period required by Moroccan accounting and tax rules. After that, the data is deleted or anonymised.

You have the right to access, correct and delete your data, to object to its processing and, where applicable, to restrict processing, to receive your data in a portable format and to withdraw your consent at any time.

To exercise these rights, write to info@moroccotripjoy.com. You may also contact the Moroccan data protection authority (CNDP) or, if you live in the European Union, your local data protection authority.

We take reasonable technical and organisational measures to protect your data. We may update this policy when needed; the date at the top shows the latest version.