1. Introduction and scope
Morocco Easy is a travel website that presents tours, day trips, activities and experiences in Morocco and lets travellers send direct booking requests to our team. To answer those requests we need some personal information, such as your name and contact details.
This policy covers information collected through the website and the follow-up communications by email, phone or WhatsApp. It does not cover third-party websites linked from our pages, which have their own privacy policies.
2. Who is responsible for your information
The website is operated under the Morocco Easy brand, which is responsible for the personal information described in this policy. The operator details and contact information available to us are shown below. For any privacy question or request, write to us using these details or our contact form.
3. Information collected through booking requests
When you send a booking request for a tour or activity, we collect the information needed to review and organise it:
- your first and last name, email address, phone number (with country code) and country of residence;
- the tour, option, date, start time and the number of travellers in each age category you selected;
- your hotel or pickup location, if you provide one, and any special requests you write in the form;
- your preferred language, the price quoted at the time of the request and the channel you used (website form or WhatsApp);
- a booking reference and the status of your request (for example pending, confirmed or cancelled), together with notes our team adds while handling it.
We do not ask for the names, ages or documents of each traveller, and no payment card details are collected on this website. Please do not include sensitive information, such as health data, in free-text fields unless it is necessary for your trip (for example an accessibility need you want us to take into account).
4. Information collected through contact and other forms
Other forms on the site collect only what is needed for their purpose:
- Contact form: your name, email address, optional phone number and subject, and your message.
- “Build Your Tour” request: your travel dates or period, destinations, interests, group details, service preferences, contact details (name, email, phone, country, accommodation if provided, preferred contact method) and any notes, budget, dietary or accessibility information you choose to share.
- Reviews: the name you want displayed, your country if you provide it, your rating and your comment. Reviews are checked by our team before they are published, and published reviews show the name you entered.
- Newsletter: your email address and the date you subscribed or unsubscribed.
Each form includes a hidden anti-spam field. Information submitted by automated spam is discarded and not stored.
5. Technical information needed to run the website
Like any website, our hosting infrastructure processes technical data when you visit pages, such as your IP address, browser type, the page requested and the time of the request. This is necessary to deliver the site, keep it secure and investigate errors.
We also record simple first-party usage statistics on our own server, for example that a “Book now” button was clicked or that a booking request was sent from a given page and language. These statistics do not use cookies and do not contain names, email addresses, phone numbers or message content.
Your browser stores a few essential items locally, such as your cookie choice and your wishlist. They are described in our Cookie Policy.
6. Google Analytics 4
With your consent only, we use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use Morocco Easy: which pages are viewed, how visitors move between pages, which tours are viewed or selected, and whether a booking request or contact message was successfully sent. This helps us improve content, navigation and the booking experience.
Google Analytics uses cookies and processes data such as a randomly generated browser identifier, your IP address (used by Google to estimate an approximate location), device and browser information, and the pages and interactions of your visit. This information is not completely anonymous. We do not send your name, email address, phone number, booking notes or other form content to Google Analytics, and we have disabled Google signals and advertising personalisation for this property.
Google Analytics is not loaded and no analytics data is sent until you accept analytics cookies. If you reject them, Google Analytics stays off.
7. Why we use your information
We use personal information to:
- review booking requests, check availability, confirm or decline them and organise the services you requested;
- communicate with you about your request, your booking, pickup details, changes and cancellations;
- answer messages and prepare proposals for custom tours;
- moderate and publish reviews and send the newsletter to subscribers;
- keep the website secure, prevent spam and abuse, and fix technical problems;
- understand how the website is used and improve it (Google Analytics only with your consent);
- comply with legal obligations and establish or defend legal claims where necessary.
8. Legal bases for processing
Where data protection laws such as the EU General Data Protection Regulation (GDPR) or Moroccan Law No. 09-08 apply, we rely on the following grounds, depending on the situation:
- steps taken at your request before entering into a contract, and the performance of that contract (booking requests and bookings);
- our legitimate interests in answering enquiries, running and securing the website, preventing fraud and spam, and producing cookieless usage statistics;
- your consent (Google Analytics cookies and the newsletter), which you can withdraw at any time;
- compliance with legal obligations, for example accounting or requests from competent authorities.
9. Booking management and customer communications
Booking requests are reviewed manually by our team. We contact you by email, phone or WhatsApp, using the details you gave, to confirm availability, explain the next steps and share practical information such as the pickup time. Automatic emails may also be sent to confirm that we received your request.
If you choose to send your request or contact us via WhatsApp, the conversation also takes place on WhatsApp and is subject to WhatsApp’s own terms and privacy policy. We only use your contact details for your request and booking, and for the newsletter if you subscribed to it.
10. Analytics consent and withdrawal
When you first visit the site, a banner lets you accept all cookies, reject optional cookies or choose your preferences. Analytics is off by default. Your choice is stored in your browser so you are not asked on every page.
You can change your mind at any time through “Cookie settings” at the bottom of every page. If you withdraw consent, Google Analytics stops collecting data immediately and the Google Analytics cookies set on our domain are deleted. Withdrawal does not affect data collected before it.
You can review or change your analytics choice at any time.
11. Service providers we use
We share personal information only with service providers that help us operate the website and handle your requests, and only as far as needed for that purpose:
- website hosting and delivery (Vercel);
- database hosting where requests and messages are stored (MongoDB);
- image hosting and delivery (Cloudinary), which receives technical data such as your IP address when images load;
- an email service provider used to send and receive booking and contact emails;
- Google, for Google Analytics (only with your consent) and for the Google Maps views embedded on some destination and place pages;
- WhatsApp (Meta), only when you choose to contact us through WhatsApp.
We may also share information with the local guides, drivers or activity providers who carry out the services you booked, limited to what they need, such as your name, phone number, pickup location, date and group size. We do not sell your personal information.
12. International data transfers
Some of our service providers operate servers in several countries, including outside Morocco and outside the European Economic Area, for example in the United States. When information is transferred internationally, we rely on the safeguards offered by these providers, such as standard contractual clauses where they are required.
13. Data security
The website is served over an encrypted HTTPS connection. Booking requests and messages are stored in a database that is not publicly accessible, and only authorised members of our team can view them through a password-protected administration area with role-based permissions. Access credentials for our systems are kept out of the website code.
No method of transmission or storage is completely secure, but we take reasonable measures to protect your information and review them as the site evolves.
14. Data retention and deletion
We keep personal information only for as long as it is needed for the purposes described above: handling your request and booking, after-sales questions, legal and accounting obligations, and the defence of possible claims. Newsletter data is kept until you unsubscribe. When information is no longer needed, it is deleted or anonymised.
Google Analytics data is kept according to the retention setting of our Google Analytics property. You can ask us at any time to delete your information, subject to the information we are legally required to keep.
15. Your rights
Depending on the law that applies to you, you may have the right to:
- access the personal information we hold about you and receive a copy;
- have inaccurate information corrected;
- have your information deleted;
- object to or ask us to restrict certain processing;
- receive the information you provided in a portable format;
- withdraw your consent at any time, without affecting earlier processing;
- lodge a complaint with a data protection authority, for example the authority in your country of residence or, in Morocco, the CNDP.
To exercise your rights, contact us using the details in section 2. We may ask for information to confirm your identity before answering, and we will reply within the time limits set by the applicable law.
16. Children’s privacy
Booking requests, messages and reviews should be submitted by adults. When children travel, we only ask for the number of travellers in each age category, not their names. If you believe a child has sent us personal information, please contact us so we can delete it.
17. Changes to this policy
We may update this Privacy Policy when our services, the website or legal requirements change. The date at the top of the page shows the latest version. If changes are significant, we will make them visible on the site and, where required, ask for your consent again.
