Privacy policy

What we collect when you use this website or reserve a trip, and why.

Last updated 25 October 2026. Also available in French, German and Dutch.

1. Who is responsible

The Moroccan Secret, Hassan Bedah, Tamri, Agadir 80502, Morocco. Questions about your data: [email protected].

2. What we collect and why

WhenWhatWhyKept
You reserve a tripName, WhatsApp number, email (optional), hotel or pickup place, day and time, number of guests, chosen option, language and currency shownTo run the trip, confirm the pickup and send the booking email. This is needed to perform the contract.3 years after the trip, for accounting and in case of a complaint
You write to usName, email, the messageTo answer you1 year
You message us on WhatsAppYour number and the conversation, processed by WhatsApp (Meta)To confirm and organise the tripUntil the conversation is deleted on the phone, at the latest 2 years
You visit the websiteTechnical data: pages seen, device type, approximate country (from the IP address through Cloudflare), time of visitTo make the site work, choose your currency and keep it safe. Our legitimate interest.Logs: 30 days
You accept analytics or advertising cookiesCookie identifiers, pages seen, events such as viewing a trip or sending a reservationTo measure the site and our advertising on Google and Meta. Only with your consent, which you can withdraw in the cookie banner.Per the provider, at most 13 months

3. Who receives your data

  • Our team and call centre, to confirm and run the trip.
  • Our web host and Cloudflare, who store and deliver the website.
  • WhatsApp (Meta Platforms Ireland) when you message us or when we message you.
  • Our email provider for the booking emails.
  • Google and Meta for analytics and advertising, only if you consented to those cookies.

We never sell your data and we do not send marketing emails or messages unless you asked for them.

4. Transfers outside your country

We are in Morocco. Providers such as Cloudflare, Google and Meta may process data in the European Union and the United States under their standard contractual clauses. Morocco's data protection law (Law 09-08) applies to us, and the GDPR applies to guests from the European Union.

5. Cookies

The website works without cookies. We store your language, currency and dark-mode choice in your browser only. Analytics and advertising cookies (Google Tag Manager, Google Analytics, Google Ads, Meta Pixel) are set only after you accept them in the banner. You can change your choice at any time from the link in the footer.

Measuring our ads. If you accept cookies, when you reserve a trip we also tell Meta (Facebook and Instagram) from our server that a booking was made, so we can measure which ads work. We send the trip, the price, the booking reference, your IP address, your browser type and the Meta cookie IDs stored in your browser. We do not send your name, phone number or email. If you choose "Only necessary", nothing is sent to Meta. You can change your choice at any time with the link in the footer. We also keep, for your visit only and without cookies, the ad or website link that brought you here, and save it with your booking so we know which ads work.

6. Your rights

You can ask what we hold about you, have it corrected or deleted, or object to its use, by writing to [email protected] or on WhatsApp. We answer within 30 days. If you are in the European Union you may also complain to your data protection authority; in Morocco to the CNDP.

7. Security

The website is served over HTTPS behind Cloudflare. Reservations are stored in our booking system, which only our team can open with a password. Booking confirmations are sent by email and WhatsApp to the details you gave; check them before you send the form.

8. Children

Reservations are made by adults. We do not knowingly collect data from children, apart from the number and age range of children travelling, which the booking adult gives us.