Privacy Policy

This privacy policy applies to Marrakech Express Tour, a Marrakech-based tour operator specialising in private desert tours, day trips, and multi-day excursions across Morocco. When this document says "we," "us," or "our," we mean the company operating this website.

Our office and our data controller are based in Marrakech, Morocco. If you have any questions about how your personal data is handled, you can reach us anytime at marrakechexpresstour@gmail.com.

Solo recopilamos lo necesario para gestionar la reserva — nada especulativo, nada revendido. Las categorías siguientes cubren todo lo que almacenamos sobre ti.

Nos lo das directamente

• Booking details — your name, email address, phone number, the tour you booked, the date, the number of travellers, and any pickup address you provide.
• Communications — anything you send us through email, the contact form, WhatsApp, or our live chat.
• Reviews and photos — content you voluntarily submit after your tour, including your name and country of origin if you choose to include them.

Recopilado automáticamente

• Technical data — IP address, browser type, device, time zone, and the pages you visited. Used to keep the site fast and secure.
• Cookies — small files stored in your browser. See the dedicated section below.

Cada dato tiene un único trabajo específico. Aquí está la lista completa:

• Run your booking — confirm your spot, share the meeting point, send weather updates, and pair you with the right guide and vehicle.
• Process your payment — securely via Stripe; we do not store card data on our servers.
• Customer support — answer your questions before, during, and after the tour.
• Service improvements — analyse anonymised usage data to fix bugs, speed up pages, and design better itineraries.
• Optional marketing — only with your consent, and only to share new tours, seasonal offers, and stories from our local guides. One-click unsubscribe in every email.
• Legal compliance — Moroccan tax records, anti-fraud checks, and any obligation we have as a licensed tour operator.

Las cookies son pequeños archivos que permiten al sitio recordar cosas entre cargas de páginas. Mantenemos su uso mínimo y divulgamos cada categoría aquí.

• Strictly necessary — your currency choice (EUR / USD / MAD), the items in your booking flow, your login session for the customer dashboard. The site cannot function without these.
• Performance — anonymous page-speed and error data that helps us spot broken flows.
• Analytics — aggregated browsing data via Google Analytics (used only with your consent).

Puedes borrar o bloquear cookies en la configuración de tu navegador en cualquier momento. Algunas funciones de reserva pueden dejar de funcionar si bloqueas la categoría estrictamente necesaria.

No vendemos ni alquilamos tus datos personales. Compartimos lo mínimo estrictamente necesario con una pequeña lista seleccionada de proveedores de servicios.

• Stripe (United States / Ireland) — payment processing. stripe.com/privacy
• Google Maps / OpenStreetMap — interactive maps on tour pages and pickup-zone previews.
• Email delivery — transactional confirmations sent via a reputable provider that signs your delivery with SPF / DKIM.
• Hosting — the website is hosted on a managed WordPress platform with daily encrypted backups and a Web Application Firewall.

Independientemente de dónde vivas, puedes pedirnos en cualquier momento:

• Access — get a copy of the personal data we hold about you.
• Correct — fix any inaccuracy.
• Delete — erase your data, subject to legal record-keeping duties.
• Restrict or object — limit how we process your data, or opt out of marketing emails.
• Port — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, for any consent-based processing.

Your data is encrypted in transit (HTTPS / TLS 1.2+) and at rest. Access to our admin systems is restricted to a small team, protected by strong passwords and two-factor authentication.

We keep booking records for the period required by Moroccan tax and accounting law (typically 10 years). Reviews stay on the site as long as the underlying tour exists. Marketing-list entries are deleted on unsubscribe.

Nuestros tours dan la bienvenida a niños cuando un padre o tutor reserva en su nombre y los acompaña durante todo el viaje. No recopilamos conscientemente datos personales de menores de 13 años. Si crees que un menor nos ha proporcionado información personal, por favor contáctanos y la eliminaremos.

When we make a material change, we update the "Last updated" date at the top of this page and — if you have an active booking — let you know by email. Continued use of the site after a change means you accept the revised policy.