1. Who We Are

Morocco Privilege (“we”, “our”, “us”) is a FastTrack airport services company based in Marrakech, Morocco, operating at airports across Morocco. We provide VIP arrival and departure assistance, meet & assist services, and private airport transfers.

Data Controller: Morocco Privilege, Marrakech, Morocco
Website: https://moroccoprivilege.ma
Contact: contact@moroccoprivilege.ma

This Privacy Policy applies to all personal data collected through our website, booking forms, emails, and related services.

2. Data We Collect

Information You Provide Directly

• Identity data: first name, last name
• Contact data: email address, phone number
• Booking data: airport, flight number, flight date and time, flight type, number of passengers, service type, vehicle preference, pick-up address
• Account data: username, password (stored encrypted)
• Payment data: billing name, billing country (payment card details are processed by PayPal and are never stored on our servers)
• Communications: messages you send us through the booking dashboard

Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: pages visited, time spent, referring URL
• Cookies: session cookies, preference cookies (see Section 9)

Information From Third Parties

• Payment confirmation data from PayPal
• Analytics data from Google Analytics (anonymized)

3. Why We Collect Your Data

• To fulfill your booking | confirming, managing, and delivering the FastTrack service you purchased
• To process payment | creating and managing your WooCommerce order and PayPal transaction
• To create your account | giving you access to your booking history and dashboard
• To communicate with you | sending booking confirmations, status updates, and replies to your messages
• To improve our services | analyzing usage patterns to enhance the website experience
• To meet legal obligations | complying with applicable laws including tax, anti-money laundering, and border regulations
• To protect our business | detecting and preventing fraud or security breaches

We do not use your data for automated decision-making or profiling that produces legal or significant effects on you.

4. Legal Basis for Processing

5. How We Share Your Data

We never sell your personal data. We share it only in the following limited circumstances:

• PayPal | to process payments. PayPal’s privacy policy governs their handling of payment data.
• WooCommerce / Automattic | our e-commerce platform for order management.
• Google Analytics | anonymized usage analytics. You may opt out via Google’s opt-out tool.
• Airport and airline authorities | where required by law or necessary to deliver the FastTrack service.
• Law enforcement or regulators | when required by applicable law, court order, or governmental authority.
• Business transfers | in the event of a merger, acquisition, or sale of assets, with notice provided to you.

All third-party service providers are contractually required to handle your data securely and in compliance with applicable law.

6. Data Retention

• Booking records: retained for 7 years to comply with accounting and tax obligations
• Account data: retained for as long as your account is active, plus 2 years after last login
• Marketing data: retained until you unsubscribe or withdraw consent
• Technical/log data: retained for up to 12 months
• Support communications: retained for 3 years

When retention periods expire, data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• HTTPS / TLS encryption on all data transmissions
• Encrypted password storage (bcrypt hashing)
• Access controls | only authorized personnel access personal data
• Regular security assessments of our website and infrastructure
• Payment data processed exclusively through PCI-DSS compliant PayPal | we never store card numbers

No method of transmission over the internet is 100% secure. We encourage you to use a strong unique password and protect your account credentials.

8. Your Rights

Depending on your location, you have some or all of the following rights:

Everyone

• Access | request a copy of the personal data we hold about you
• Correction | request correction of inaccurate or incomplete data
• Deletion | request erasure of your data (subject to legal retention obligations)
• Portability | receive your data in a structured, machine-readable format
• Objection | object to processing based on legitimate interests

EU / UK Residents (GDPR)

• Right to restriction of processing
• Right to withdraw consent at any time without affecting prior processing
• Right to lodge a complaint with your local Data Protection Authority (DPA)

California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, shared, or sold
• Right to opt out of the sale or sharing of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights
• Right to limit use of sensitive personal information

Canadian Residents (PIPEDA)

• Right to access and challenge accuracy of personal information
• Right to withdraw consent (with notice)
• Right to file a complaint with the Office of the Privacy Commissioner of Canada

How to Exercise Your Rights

Submit a request to contact@moroccoprivilege.ma with your name, email address, and a description of your request. We will respond within 30 days (45 days for CCPA). We may need to verify your identity before processing the request.

9. Cookies

We use cookies and similar tracking technologies. You can control cookies through your browser settings at any time.

Strictly Necessary Cookies

Required for the website to function. Cannot be disabled. Includes session cookies, login tokens, and shopping cart data.

Analytics Cookies

Google Analytics cookies help us understand how visitors use our site. Data is anonymized. You may opt out at tools.google.com/dlpage/gaoptout.

Functional Cookies

Remember your preferences (language, currency, etc.).

Payment Cookies

Set by PayPal to enable secure payment processing. Governed by PayPal’s cookie policy.

By continuing to use our website you consent to our use of non-essential cookies. You may withdraw consent at any time by adjusting your browser settings or using our cookie preference tool.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your own, including Morocco, the United States (PayPal, Google), and the European Union (hosting infrastructure).

For transfers from the EU/UK, we ensure appropriate safeguards are in place including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers only to countries with an adequacy decision where applicable
• Data Processing Agreements with all third-party processors

For other jurisdictions, we apply equivalent protections consistent with applicable local law.

11. Children’s Privacy

Our services are not directed to children under 16 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at contact@moroccoprivilege.ma and we will delete it promptly.

Infant and child passenger data collected during booking (number of children/infants) is used solely to deliver the appropriate service and is not used for any other purpose.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by:

• Posting the updated policy on this page with a revised “Last updated” date
• Sending an email notification to registered users for significant changes

Your continued use of our services after the effective date of any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.