Privacy Policy

​

Sharing of Personal Data

​

We do not sell personal data to third parties. Personal data may be shared with the following categories of recipients where necessary:

• Service Providers & Suppliers — hotels, transport providers, local guides, and activity operators required to fulfil booked tours

• Payment Processors — third-party payment service providers for secure transaction processing

• Technology Providers — website hosting, CRM, email, and booking management platform providers

• Legal & Regulatory Authorities — where required by law, court order, or regulatory obligation

• Professional Advisors — legal, accounting, and insurance advisors where necessary

All third-party service providers are required to handle personal data securely and in accordance with applicable data protection regulations.

​

International Data Transfers

​

As a Morocco-based operator serving international customers, personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• Transfers to countries recognised as providing an adequate level of data protection

• Other legally approved transfer mechanisms under GDPR and applicable US state privacy laws

 

Data Retention

​

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:

• Booking and transaction records — retained for a minimum of 7 years for legal and accounting compliance

• Marketing data — retained until consent is withdrawn or an opt-out request is received

• Website usage and technical data — retained for up to 12 months

• Enquiry and correspondence records — retained for up to 3 years

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

 

Data Security

​

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure, including:

• SSL/TLS encryption for all data transmitted via the website

• Secure, access-controlled storage of customer records

• Restricted staff access to personal data on a need-to-know basis

• Regular review of security practices and procedures

In the event of a data breach that poses a risk to individuals' rights and freedoms, we will notify the relevant supervisory authorities and affected individuals in accordance with applicable legal requirements.

 

Cookies & Tracking Technologies

​

Our website uses cookies and similar tracking technologies to enhance functionality and analyse usage. The categories of cookies used include:

• Strictly Necessary Cookies — essential for the website to function and cannot be disabled

• Analytics Cookies — used to understand how visitors interact with the website (e.g., Google Analytics)

• Marketing & Preference Cookies — used to personalise content and, where applicable, deliver relevant advertising

Upon first visiting the website, users are presented with a cookie consent banner and may accept, reject, or customise non-essential cookie preferences at any time via the cookie settings panel.

 

Your Privacy Rights

​

Depending on the applicable privacy regulations in the user's country of residence, the following rights may apply:

​

🇪🇺 European & UK Users (GDPR / UK GDPR)

​

• Right of Access — request a copy of personal data held

• Right to Rectification — request correction of inaccurate or incomplete data

• Right to Erasure — request deletion of personal data ("right to be forgotten")

• Right to Restriction — request that processing be restricted in certain circumstances

• Right to Data Portability — request transfer of data in a structured, machine-readable format

• Right to Object — object to processing based on legitimate interests or for direct marketing

• Right to Withdraw Consent — withdraw consent at any time where processing is consent-based

• Right to Lodge a Complaint — with the relevant national data protection supervisory authority

 

🇺🇸 California Users (CCPA / CPRA)

​

• Right to Know — request disclosure of personal data collected, used, shared, or sold

• Right to Delete — request deletion of personal data

• Right to Correct — request correction of inaccurate personal data

• Right to Opt-Out — opt out of the sale or sharing of personal data (we do not sell personal data)

• Right to Limit Use of Sensitive Personal Information — limit the use of sensitive personal data

• Right to Non-Discrimination — exercise privacy rights without receiving discriminatory treatment

 

🇲🇦 Morocco Users (Law No. 09-08)

​

• Right to access, rectify, and oppose the processing of personal data

• Right to lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP)

To exercise any of the above rights, please submit a request to: privacy@amazingtrailsmorocco.com

Requests will be responded to within 30 days in accordance with applicable regulatory requirements.

 

Marketing Communications

​

Marketing emails and promotional communications are only sent to individuals who have provided explicit consent. Every marketing communication includes an unsubscribe link, and opt-out requests are processed promptly. Withdrawal of marketing consent does not affect the lawfulness of prior processing.

 

Children's Privacy

​

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children without verifiable parental consent. Where data relating to a minor is required in the context of a family booking, it is collected and processed solely for the purpose of fulfilling the travel booking.

 

Updates to This Privacy Policy

​

This Privacy Policy may be updated periodically to reflect changes in our practices, services, or applicable legal requirements. The updated policy will be published on this page with a revised effective date. Where changes are material, users will be notified via email or a prominent website notice.

 

Contact & Complaints

​

For any questions, concerns, or requests relating to this Privacy Policy or the handling of personal data, please contact:

• Amazing Trails Morocco — Data Privacy

• Email: privacy@amazingtrailsmorocco.com 

• Phone: +1-407-801-0867

​

Users also have the right to lodge a complaint with their local data protection supervisory authority:

• 🇪🇺 EU: Relevant national Data Protection Authority (DPA)

• 🇬🇧 UK: Information Commissioner's Office (ICO) — www.ico.org.uk

• 🇺🇸 USA: Relevant State Attorney General's Office

• 🇲🇦 Morocco: CNDP — www.cndp.ma

​

​

​

​