1. Data Controller
| Company | Extra Mile DMC, trading as Marrakech Desert Trips |
| License | N° 16D/19 — Morocco Tourism Authority |
| Address | Bureau B3, Immeuble Riad Nawal G, Boulevard Mozdalifa, Marrakech 40000, Morocco |
| contact@marrakech-desert-trips.com | |
| Phone / WhatsApp | +212 615 346 108 |
Extra Mile DMC is the data controller responsible for your personal data collected through this website (marrakech-desert-trips.com), email, WhatsApp, and telephone communications.
2. Legal Basis & Applicable Law
We process personal data in accordance with:
- Morocco's Law 09-08 (Loi relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel) — the primary data protection law in Morocco, enforced by the CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel).
- EU General Data Protection Regulation (GDPR) — applicable when we process personal data of individuals located in the European Economic Area. As a Moroccan operator serving EU visitors, we apply GDPR-aligned standards to all personal data.
Our legal bases for processing are: performance of a contract (booking a tour), legitimate interest (responding to enquiries, improving our services), and consent (newsletter, marketing).
3. What Data We Collect
| Data Type | Examples | Source |
|---|---|---|
| Identity | Full name, nationality | Booking form, email, WhatsApp |
| Contact | Email address, phone number, WhatsApp number | Contact form, booking form, WhatsApp |
| Booking | Tour dates, hotel pickup location, number of guests, special requests, dietary needs | Booking form, email, WhatsApp |
| Payment | Transaction ID, payment method (card type, PayPal email). We do NOT store card numbers. | PayPal, Stripe |
| Technical | IP address, browser type, device, operating system, pages visited, referral source | Automatic (server logs, analytics) |
We only collect personal data that is necessary to fulfil your booking, respond to your enquiry, or improve our website. We do not collect sensitive personal data (health, religion, biometrics) unless you voluntarily provide it as a special request (e.g., dietary requirements).
4. How We Use Your Data
- Process bookings: confirm your tour, arrange transport, accommodation, and activities, and communicate logistics.
- Respond to enquiries: answer questions received via email, WhatsApp, or website contact forms.
- Payment processing: process deposits and balances through PayPal, Stripe, and our payment providers. We never see or store your full card number.
- Improve our services: analyse website usage patterns (anonymised) to improve content and user experience.
- Legal obligations: comply with Moroccan tax and business reporting requirements.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Who We Share Data With
| Recipient | Purpose | Data Shared |
|---|---|---|
| Drivers & guides | Tour logistics (pickup, dates, group size) | First name, hotel, tour date, group size |
| Hotels & desert camps | Accommodation booking | Name, dates, number of guests, special requests |
| PayPal / Stripe | Payment processing | Transaction amount, email. Card data handled by PayPal/Stripe directly. |
| Google Analytics | Website usage analysis (anonymised) | IP (anonymised), pages visited, device, referral |
| Hosting provider | Website hosting & server logs | IP address, access logs |
We do not share data with advertising networks, data brokers, or any third parties beyond what is necessary to operate your tour and maintain this website.
6. Cookies
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Session cookie | Website functionality (form submissions, language preference) | Session (deleted on browser close) | Essential |
| Google Analytics (_ga, _gid) | Anonymised traffic analysis | Up to 2 years | Analytics |
| Language preference | Remember your EN/ES/FR language choice | 1 year | Functional |
We do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time. Disabling essential cookies may affect form submissions.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Booking records | 5 years from tour date (Moroccan tax and legal requirements) |
| Enquiry emails / WhatsApp | 2 years from last communication, then deleted |
| Payment records | 5 years (financial reporting obligations) |
| Website analytics | 26 months (Google Analytics default, anonymised) |
| Server logs | 90 days, then automatically purged |
8. Your Rights
Under Morocco's Loi 09-08 and the EU GDPR (where applicable), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Objection — object to processing based on legitimate interest.
- Portability — receive your data in a structured, machine-readable format (GDPR only).
- Withdraw consent — where processing is based on consent, you can withdraw at any time.
To exercise any of these rights, contact us at contact@marrakech-desert-trips.com. We will respond within 30 days.
You also have the right to lodge a complaint with the CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel) in Morocco, or with your local data protection authority if you are in the EU.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption on all website communications, secure payment processing through PayPal and Stripe (both PCI DSS compliant), and restricted access to personal data within our team. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children
Our services are available to travellers of all ages, but this website is not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have inadvertently collected such data, please contact us for immediate deletion.
11. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last modified" date. Continued use of the website after changes constitutes acceptance of the revised policy.
Last updated: March 2026.
12. Contact
For any questions about this privacy policy or to exercise your data rights:
| contact@marrakech-desert-trips.com | |
| +212 615 346 108 | |
| Post | Extra Mile DMC, Bureau B3, Immeuble Riad Nawal G, Boulevard Mozdalifa, Marrakech 40000, Morocco |