Privacy Policy

1. Who we are

Marrakech Vibrants is a Marrakech-based travel agency arranging excursions, activities, private transfers and concierge services. We are the data controller for the personal information described in this policy.

You can reach us any time at marrakechvibrants@gmail.com or on WhatsApp at +212 648 785 780.

2. What we collect

We only ask for what is needed to arrange and confirm your booking.

• Contact details: name, email address, phone or WhatsApp number, preferred contact method.
• Booking details: dates, number of adults and children, pickup hotel or address, meeting point, special requests and messages you send us.
• Account details: email and password (hashed) if you create an account, plus your role if you work with us as a partner.
• Technical data: IP address, browser type, pages viewed, and which QR code or referral link brought you to the site.
• Payment status: whether a deposit or balance has been paid. We do not store card numbers.

3. Why we use it

• To confirm, organise and deliver the excursion, transfer, stay or service you booked.
• To send booking confirmations, reminders and operational updates by email or WhatsApp.
• To share only the details needed to run your service, your name, party size, date and pickup point, with the team member or supplier assigned to it.
• To calculate referral commission owed to the riad, villa or guest house that referred you.
• To answer questions, handle changes, cancellations and refunds.
• To keep the site secure, prevent fraud and comply with Moroccan legal and accounting obligations.

4. Who we share it with

We never sell your personal data. We share it only with: the team or supplier running your service (limited to what they need to deliver it); our hosting, database and email suppliers acting on our instructions; and the authorities when the law requires it.

Hospitality partners who refer guests can see the guest name, the service booked, the booking status and their own commission. They cannot see our internal costs, margins or your payment card data.

5. How long we keep it

Booking records are kept for as long as needed to deliver the service and then for the period required by Moroccan tax and accounting rules. Enquiries that never become bookings are deleted within 24 months. Account data is kept until you ask us to close the account.

6. Your rights

You can ask us to access, correct, export or delete your personal data, or to stop using it for marketing. Write to marrakechvibrants@gmail.com and we will answer within 30 days. If you are in the EU or UK you also have the right to object to processing and to lodge a complaint with your local data protection authority. In Morocco, the competent authority is the CNDP.

7. Cookies and tracking

We use strictly necessary cookies to keep you signed in and to remember your language and currency choice. When you arrive through a partner QR code we store a referral identifier for up to 30 days so the correct riad receives its commission. We use no advertising cookies and do not sell tracking data.

8. Security

Data is stored on managed, access-controlled infrastructure with encryption in transit. Access is limited by role: suppliers see only the bookings assigned to them, partners see only their own referrals, and financial fields are restricted to our administrators.

9. Children

Our services are booked by adults. Where a booking includes children we only record the number and ages needed for safety, seating and correct pricing.

10. Changes to this policy

If we change how we handle personal data we will update this page and the date shown above. Material changes affecting existing bookings will be sent to you by email.