Privacy

Last updated: August 2026. This policy explains how Excursions Maroc collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and Moroccan Law 09-08.

1. Data controller

The data controller is Excursions Maroc, Marrakech, Morocco. Contact: contact@excursions-maroc.com.

2. Data collected

We only collect data that is strictly necessary:

  • Full name (for booking)
  • Email address (to contact you)
  • Phone / WhatsApp number (for tour coordination)
  • Trip details (date, number of participants, selected tour)
  • Optional message (for specific requests)
  • Email address only, if you sign up for the newsletter (optional)

3. Purposes of processing

Your data is used exclusively for:

  • Process your booking request and send you a personalized quote
  • Contact you to confirm the logistical details of your tour
  • Improve our services and your experience
  • Send you our newsletter — new tours and seasonal offers — only if you signed up for it

The newsletter is optional and relies on your consent, given by submitting the form in the footer. We keep only your email address and the sign-up date; it is never sold or passed to a third party. To unsubscribe at any time, write to contact@excursions-maroc.com and your address is removed from the list.

Processing is based on your explicit consent (booking form) and on the execution of a tourism service contract.

5. Your rights

In accordance with GDPR and Law 09-08, you have the following rights:

  • Right of access to your personal data
  • Right of rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with the CNDP (Morocco) or CNIL (EU)

To exercise these rights, write to contact@excursions-maroc.com.

6. Cookies

This site only uses cookies strictly necessary for operation (language memory, anti-spam protection). No advertising or third-party tracking cookies are used.

7. Audience measurement

We count our visitors ourselves, on our own server, with no third-party tool: no Google Analytics, no ad network, no social platform. No browsing data leaves this server.

This measurement uses no cookie and writes nothing into your browser. It keeps no IP address, no device identifier and no history of the pages you viewed. Instead, each visit produces an anonymous fingerprint computed from the request with a secret key that changes every night: two visits made two days apart by the same person produce two unrelated fingerprints that cannot be linked — including by us. The day's fingerprints are deleted after two days.

All we take from it are totals: visitors and page views per day, most-read pages, the site you came from, device type and browser language. Nothing that identifies you.

Two measurements coexist, and they do not do the same job. The first counts a visit only when a real browser has run our measurement script and shown a sign of human activity; that is what produces the visitor numbers. The second is a single transparent one-pixel image, loaded by the page itself: it increments a counter of pages loaded, and nothing else. It exists because the first is blind to any browser that blocks, refuses or does not run JavaScript — without it, a perfectly real visit can appear nowhere at all.

If your browser sends the “Do Not Track” or “Global Privacy Control” signal (Brave and DuckDuckGo send it by default), our measurement script does not run at all: no fingerprint is computed and nothing is sent. The pages-loaded counter then records only that a page was opened: no fingerprint, no identifier, not even the address of the page. We know a page was displayed; we know neither by whom nor which one.

Robots that declare themselves as such (search engines, indexing crawlers, AI crawlers) are counted separately, by name, and never among visitors. Their full browser identifier is not kept.

8. Security

The site is served entirely over encrypted HTTPS. Your data is kept only for as long as it takes to handle your request, and access to it is limited to the people at the agency who deal with your booking.

9. Modifications

This policy may be updated. The last modification date appears at the top of this page.