Privacy policy

Who is responsible for your data

Aït Benali Lahcen, tour guide, 40100 Marrakech. For any question about your data, write to us at aitbenalihamza87@gmail.com.

The mailbox that receives requests is managed by Hamza, the guide’s partner, in the name and on behalf of the guide, who remains solely responsible for your data. Hamza only uses your information to pass on and follow up your request with the guide, and is bound by confidentiality.

What we collect

The website sends no emails and does not keep your requests. When you submit the form, it formats your request; a click on “Open in Gmail” opens it in Gmail (the Gmail app on a phone), already written and addressed to the guide. Only at that click is your request passed to Gmail (Google), or to your own email app if you choose “Other email app”. You can reread and edit it: nothing reaches us until you click “Send”.

If you send it, we receive:

• your name and email address, to reply to you;
• your phone number, so that we can call you if needed;
• your country of origin, the travel dates, the number of travellers, the means of transport (4x4 or bus) and the chosen stops, to prepare the proposal;
• the language in which you viewed the website, so that we can reply in that language;
• your message describing your plans;
• your consent for this information to be used to reply to you, written in the email.

Please do not include sensitive information in the message (health, religion, opinions…): we do not need it. If a particular need matters for your trip, for example reduced mobility, we will discuss it together in writing.

If you use the WhatsApp button, you leave the website: the conversation goes through WhatsApp (Meta), under its own privacy rules. The website loads nothing from WhatsApp until you click, and passes it no data.

What we do not do: no customer account, no online payment, no audience measurement, no advertising, no social media buttons, no embedded external content (except the anti-robot check described below). The website also prevents your browser from using its ad-targeting tools (Topics API and similar) on its pages.

The website’s language is that of the address you are viewing (/en/ for English, /es/ for Spanish, French otherwise): it is neither recorded nor kept in a cookie.

When you follow a link to another website (WhatsApp, Gmail), your browser does not tell it which page, or which website, you came from.

Before your request is sent, a verification page loads Cloudflare’s Turnstile service, which checks that you are not a robot. To do so, it relies on technical signals from your browser and on your IP address, for security purposes only and never for advertising (see the Turnstile privacy policy). During this step, your details remain encrypted in the page: Cloudflare’s script cannot read them.

To limit abusive submissions, our server keeps in memory for 15 minutes a fingerprint of your IP address, calculated with a secret key specific to the website: the address itself is not stored. Nothing is written to disk by our application. We do not record visits either: the request log of our hosting is switched off, and only the website’s error messages, containing no personal data, are kept. The host may keep its own technical security logs.

Why and on what basis

Your data is used only to reply to your request, to prepare a proposal and, if you travel with us, to organise the guiding.

They are processed with your consent, given by ticking the box on the form, in accordance with Moroccan Law No. 09-08.

Cloudflare’s protection of the website is based on our legitimate interest in protecting it from abuse and attacks.

We do not sign you up to any newsletter and we do not sell, rent or transfer your data.

The website honours the Global Privacy Control (GPC) signal that some browsers send to refuse the sale or sharing of data. In any case it has nothing to switch off: no sale or sharing takes place.

Who has access to it

• The guide, who reads and handles your request.
• Hamza, the guide’s partner, who manages the receiving mailbox on the guide’s behalf.
• Your email provider and ours (Google, for Gmail), which carry your email and keep it in our respective inboxes.
• The website host: Cloudflare, Inc.
• Cloudflare, Inc., which hosts the website or routes connections to it, and protects it from attacks; it therefore sees the exchanges between your browser and the website, including the form, for this service only, and which checks, when the form is sent, that the request comes from a person and not a robot (Turnstile service).
• If the guide arranges a replacement: the replacement guide, for what he needs (name, dates, programme, contact).
• If you ask us to, and only with your consent: the people we contact on your behalf (accommodation, a driver), for what they need.

Some of these providers may store data outside Morocco.

How long

• Request with no follow-up: 3 years after our last exchange, then deletion.
• Completed trip: payment records are kept for as long as the law requires; everything else is deleted on the same timescale as above.
• IP address fingerprint: 15 minutes.

Your rights

You may at any time access your data, have it corrected, object to its processing or request its deletion (Moroccan Law No. 09-08). You may withdraw your consent at any time, without affecting what was done before.

To do so, write to us at aitbenalihamza87@gmail.com. We reply within one month at most.

Security

The website is served over HTTPS only. It does not store requests and sends no emails: you send your request yourself, from your own email account, and the draft is only ever addressed to the guide. The form is protected against fraudulent submissions, checked against robots by Cloudflare and limited in the number of submissions. The website refuses to be embedded in another page and rejects requests that another website might try to make on your behalf.

Cookies

The website sets a single, strictly technical cookie; Cloudflare may add two, used solely to protect against robots. The details are on the Cookies page.