1. Who We Are

Agafay & Palmeraie Adventures is a tourism excursion service based in Marrakech, Morocco. We act as the data controller for personal information collected through our website and WhatsApp communications.

Contact: info@quadbikingmarrakechtours.com | WhatsApp: +212 649 928 937

2. What Data We Collect

Personal data you provide

• Name
• Email address
• Phone number
• Hotel or accommodation address
• Group size and special requirements

This information is collected when you make a booking via our website contact form or WhatsApp.

Technical data collected automatically

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referring website

This data is collected via cookies and analytics tools to help us improve our website.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing and managing your bookings
• Communicating with you about your excursions (confirmations, reminders, updates)
• Sending booking confirmations and receipts
• Improving our services and website experience
• Marketing communications (only with your explicit consent)

4. WhatsApp Data

We use WhatsApp as our primary communication channel for bookings and customer support. Please be aware of the following:

• Messages exchanged via WhatsApp are stored for booking management and customer service purposes.
• Chat history is retained for a maximum of 12 months after your last interaction, then permanently deleted.
• WhatsApp (Meta) has its own privacy policy that governs the platform itself. We encourage you to review it separately.

5. Legal Basis (GDPR)

We process your personal data under the following legal bases:

• Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.
• Contractual necessity: To process and fulfill your bookings and provide the services you requested.
• Legitimate interest: For service improvement, website analytics, and fraud prevention, where these interests do not override your rights.

6. Data Sharing

We may share your personal data with the following parties:

• Excursion operators and guides: Your name and hotel address are shared solely for the purpose of arranging pickup and providing the booked activity.
• Analytics providers: We use Google Analytics (or similar tools) to understand website usage. This data is anonymized where possible.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

7. Cookies

Our website uses cookies to enhance your browsing experience:

• Essential cookies: Required for the website to function properly (e.g., language preference). These are set by default.
• Analytics cookies: Used to understand how visitors interact with our website. These are only set with your consent.
• Advertising cookies: We do not use advertising or tracking cookies.

You can manage your cookie preferences through your browser settings at any time.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Booking data: Retained for 2 years after your last booking for record-keeping and potential future bookings.
• Marketing data: Retained until you withdraw your consent.
• Analytics data: Retained for 14 months, then automatically deleted.
• WhatsApp chat history: Retained for 12 months after last interaction.

9. Your Rights

Under applicable data protection laws (including GDPR for EU/EEA residents), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request limitation of processing in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest or for direct marketing.

To exercise any of these rights, please contact us at info@quadbikingmarrakechtours.com or via WhatsApp. We will respond within 30 days.

10. International Transfers

Your personal data may be processed and stored in Morocco. Where data is transferred outside of the EU/EEA, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

11. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verified parental consent. If we become aware that we have collected data from a child under 13 without appropriate consent, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date.

For material changes that significantly affect how we process your data, we will notify you via email or WhatsApp where possible.

13. Contact

For any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:

• Email: info@quadbikingmarrakechtours.com
• WhatsApp: +212 649 928 937