Privacy Policy

Marruecosguia is the name of this website and the brand used to present travel information and enquiries about Morocco. It is not, by itself, verification of the operator's legal identity or status.

The website operator's full legal identity has not been verified for this notice.

The operator's postal address has not been verified for this notice.

For privacy enquiries and rights requests, contact info@marruecosguia.com.

Whether an EU representative or data protection officer is applicable, and any corresponding contact details, has not been confirmed in this notice. You can use the privacy email below for enquiries and rights requests.

Contact Support asks for a name, email address and message, with an optional phone number. Required fields are needed to handle and answer the enquiry. Please provide only what is necessary and avoid sensitive information in free text.

Request Quote holds the name, contact details and trip information you enter while preparing a WhatsApp draft: travel dates, group size and children’s ages where supplied, destinations, accommodation/transport preferences, guide language, budget and notes. The quote form does not submit those values to our Contact Support API or Google Analytics. Your browser and network connections also generate technical information, such as IP addresses and request metadata.

To limit support abuse, the application keeps a pseudonymous network reference and attempt counter in server memory for 15-minute rate-limit windows. Expired entries are cleared on later requests or when that server instance ends; this is separate from email and provider log retention.

We use enquiry information to respond, prepare requested travel arrangements and handle follow-up communications. Essential storage supports language preferences, cookie choices, staff authentication and protection against duplicate support submissions. Security measures help protect the service against misuse.

Enquiry data is used to handle what you ask us to do. An enquiry about a possible booking can involve steps you request before a contract. The operator's documented legal bases for other support enquiries, security and any statutory retention have not been confirmed in this notice. Cookie acceptance is not consent to all of those activities and does not replace that information.

Optional Google Analytics processing is based on your consent. You can refuse it without losing access to the quote or support functions. No marketing consent is inferred from an enquiry or a cookie choice.

Google's tag loads only after explicit analytics consent. Advertising storage, advertising user data and advertising personalization remain denied. Google signals and advertising personalization are disabled by the website configuration.

We manually measure selected public page visits and three actions: quote_start (the first new form focus/change or submit attempt with consent), whatsapp_handoff (an attempt to open WhatsApp, including a retry link), and tour_whatsapp_click (a tour's WhatsApp action). These are not completed bookings or proof that a message was sent. Admin and legal routes are excluded from this manual tracking.

Manual analytics parameters use general page categories and language, synthetic titles and the site's canonical origin. They exclude names, emails, phone numbers, form contents, trip slugs, outgoing WhatsApp links, query strings and fragments. Google can receive a pseudonymous cookie identifier, IP/network and device information, and generate session/engagement measurements. This is pseudonymous analytics, not anonymous browsing.

The quote button opens WhatsApp with your draft in the outgoing URL. Opening that URL passes it to WhatsApp before you press Send there. The message is not delivered to our team as a WhatsApp message until you send it in WhatsApp. Optional consented analytics can already have measured your interaction; it never receives the draft.

The page can keep your draft in memory while you edit or use its copy function. This does not provide permanent storage or a booking confirmation. WhatsApp and your device/browser can retain information under their own settings and policies.

Contact Support sends the details you submit through Resend to the site's support mailbox. Resend handles email delivery; the mailbox provider also processes the resulting email. Hosting, infrastructure and security providers can process connection metadata needed to operate the website. The website uses Supabase for content/staff access and Cloudflare R2 for uploaded images.

With analytics consent, Google receives analytics identifiers and technical/usage information. Using WhatsApp involves WhatsApp's own service and privacy terms. Clicking an ordinary external link opens that provider's service; it does not authorize our Google Analytics tracking.

These services can involve processing outside Spain or the European Economic Area. The actual contracted entities, processing countries, provider roles and applicable international-transfer safeguards have not been verified for this notice. We do not claim EU-only storage or a particular adequacy decision, contractual safeguard or certification. The provider notices linked below describe their services; they do not prove which arrangements apply to this website. You can ask the privacy contact for information about recipients and transfers.

The support API does not archive form contents in the project's database or application content logs. However, delivered emails and WhatsApp correspondence can remain with their recipients and service providers. A verified retention/deletion schedule for the support mailbox, Resend delivery records, WhatsApp correspondence, hosting/security logs and backups is not available in this notice. No fixed deletion period or automatic erasure is promised for those records. Ask the privacy contact about your enquiry or request erasure, subject to applicable legal conditions.

The event/user-data retention setting in the Google Analytics account has not been verified for this policy. The website's 180-day analytics cookie configuration and consent-choice validity do not establish Google's data retention or guarantee deletion after 180 days. Withdrawal stops future site analytics; requests concerning previously collected data can be sent to the privacy contact.

Cookie choice validity, browser storage and Google-side retention are separate. Choices are honored for 180 days. An expired localStorage choice is ignored but is not automatically deleted. Support deduplication hashes/tokens/status also have no automatic client-side deletion; a support token's 23-hour server validity does not erase that browser record. You can clear site storage in your browser. See the Cookie Policy for details.

Where the GDPR applies, you may request access, correction, erasure, restriction and, where applicable, portability or object to processing. Send your request to info@marruecosguia.com. We may request proportionate information needed to verify your identity. The GDPR provides a one-month response period, subject to its permitted extensions and exceptions.

You can withdraw analytics consent through Cookie preferences at any time. Withdrawal stops future analytics and removes accessible analytics cookies; it does not undo processing that was lawful before withdrawal or automatically erase Google-side records. A separate erasure request can be made where applicable.

You may complain to the competent supervisory authority, including the Spanish Data Protection Agency (AEPD), where applicable. These rights are subject to legal conditions and exceptions.

The website does not use these enquiry or manual analytics events to make automated decisions with legal or similarly significant effects. The current analytics setup does not enable advertising personalization. If purposes or providers change, the notices and consent choices must be reviewed before the new processing starts.