Group travel privacy policy

This policy covers the group registration form, your private group progress page and the messages we send you about your registration. It does not cover other parts of the website.

1. Data controller

   Agencia Marruecos Tours, Rissani 52450, Morocco. Email: agenciamarruecostours@gmail.com. WhatsApp: +212 652 179 033.

   We decide how your data is used in the group form and on your group progress page.

2. What data we collect

   We only collect what we need to find a group that suits you:

   • Full name, email address and WhatsApp number with country code.
   • Tour or destination you are interested in, preferred date and date flexibility.
   • Number of travelers, duration, communication language and accommodation type.
   • Room preference, whether you are open to other dates or an alternative itinerary, and any notes you write.
   • The date and time you gave consent, and an irreversible fingerprint (hash) of your IP address.

   We never store your IP address in clear text. The fingerprint only helps us stop mass submissions. We do not ask for passport details, payment card details or other sensitive information.

3. Why we use it and on what legal basis

   We use your data to record your interest, look for other compatible travelers and contact you by email or WhatsApp about your group, including any price change you need to accept.

   The legal basis is your consent, which you give by ticking the form's checkbox and can withdraw at any time, and the steps prior to a contract that you request when asking for a group.

   Your registration only expresses interest: it is not a booking and the form takes no payment. If you confirm your participation, our booking and cancellation terms apply.

4. Who can see your data

   Only the Agencia Marruecos Tours team that manages the groups.

   Our website hosting provider (Hostinger) stores the site, and with it the data, on our behalf. Once email sending is enabled, we use an email service for messages.

   We do not sell your data or pass it on for advertising.

5. What other travelers can see

   Other travelers never see your name, email, phone number or registration details.

   The group progress page only shows general figures: confirmed places, the group target, the price per person when one exists, and the group status.

6. How long we keep it

   We keep your data as long as it is needed to manage your registration or trip. After that we only keep what the law requires us to keep as commercial records.

   If you cancel or ask us to delete your data, we will delete your personal data, except where the law requires us to keep it. We periodically review records we no longer need.

7. Your rights

   You can ask us to access, correct or delete your data, restrict or object to its use, or receive it in a portable format. You can withdraw your consent at any time without affecting what was already processed.

   Write to agenciamarruecostours@gmail.com. We will reply within one month at the latest. If you are not satisfied with our reply, you can complain to the data protection authority in your country (for example, the AEPD in Spain).

8. Security and cookies

   Pages are served over HTTPS. Admin passwords are stored only as a hash, access is limited to our team, and the forms are protected against automated submissions and repeated attempts.

   Your progress page opens only with the private link you received. Do not share it.

   The group pages load no advertising or analytics tools. They use only a technical session cookie, needed for the form and your progress page to work. Your browser also keeps two settings with no personal data: light or dark theme, and whether you have already seen the loading screen.

9. Changes to this policy

   We may update this policy. The date of the latest revision is shown at the bottom of the page.

Last updated: 24 October 2026.