Privacy policy

This policy explains what personal information we collect when you use this website or book a trip, why, and what you can ask us to do with it.

Who is responsible

Marrakech Bus Tour is a brand of Visit Morocco Trip.

• Contact: contact page

What we collect

When you book: your name, email address, and, if you give them, your phone number, pickup area, hotel or riad, preferred language and notes. We also keep the details of the booking itself: trip, date, number of adults and children, prices, payments and refunds.

When you pay: payment happens on PayPal's website. We never see or store your card number. PayPal tells us whether the payment succeeded, the amount and a transaction reference; we do not keep the PayPal account details PayPal sends us, such as your PayPal email address or name.

Technical information: to stop abuse (for example, someone holding every seat without paying, or guessing passwords), we record the IP address that submits a booking form or a sign-in form. These records are deleted automatically after 24 hours. Our hosting provider also keeps standard web server logs. (For our own staff, sign-ins to the booking management area are also kept in an internal security log.)

Why we use it

• To make and manage your booking, take payment, send your confirmation and contact you about your trip (this is needed to provide the service you booked).
• To meet our legal obligations, such as keeping accounting records.
• To keep the website secure.

We do not sell your information, we do not use it for advertising, and we do not send you marketing emails.

Cookies

This website sets one cookie, mbt_sid, and only when you use a form (booking or sign-in). It keeps your progress through the booking and protects the forms against misuse. It is deleted when you close your browser. We use no analytics, advertising or social media cookies, and no tracking scripts. Fonts and images are served from our own server.

Who else receives it

• PayPal, to process your payment and any refund, under PayPal's own privacy policy.
• LWS, our hosting provider in France, which stores the website and its database and sends our emails.
• Our driver and team receive what they need to run your trip, such as your name, pickup point and number of travellers.

How long we keep it

• Booking and payment records: as long as accounting and tax rules require.
• IP addresses used for abuse protection: 24 hours.
• Backups of the database: replaced on a rolling basis, each kept for about 14 days, in addition to our hosting provider's own backups.

Security

The website uses an encrypted connection (HTTPS). Access to booking data is limited to our team, each with their own account and permissions, and staff passwords are stored in a form that cannot be read back.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it when we no longer need to keep it. You can also object to how we use it. Write to us through the contact page. We will answer within one month.

If you are not satisfied with our answer, you can contact the CNDP, the data protection authority in Morocco, or the data protection authority of the country where you live.

Children

Bookings must be made by an adult. We only receive information about children as the number of children travelling.

Changes

If we change this policy, we will publish the new version on this page with its date.