Privacy & Cookie Policy

1. Information We Collect

We collect personal information that you provide directly to us when planning or booking your Moroccan journey, contacting our team, or subscribing to updates. This includes:

• Contact and Identity Details: Your full name, email address, telephone / WhatsApp number, and country of residence.
• Booking & Travel Specifications: Travel dates, preferred tour itineraries, party size, dietary requirements, and custom excursion requests.
• Technical & Device Information: IP address, device type, browser specification, and general geographic location collected through server logs and optional analytics.

We never collect sensitive personal categories (such as racial background, political opinions, or religious beliefs) without your explicit consent or operational necessity.

2. How We Use Your Information

We process your data strictly in accordance with international data protection standards (GDPR) and Moroccan Law No. 09-08 (CNDP) for the following lawful purposes:

• Contract Fulfillment: To arrange your guided tours, desert camps, transportation, and hotel bookings.
• Customer Care & Communication: To answer booking inquiries, provide pre-departure briefings, and respond via email or WhatsApp helpline.
• Service Optimization: To analyze aggregate visitor trends, troubleshoot technical issues, and improve website navigation.
• Legal Compliance: To comply with Moroccan tourism regulations, tax requirements, and safety reporting.

We never sell, rent, or lease your personal information to third parties or data brokers.

3. Comprehensive Cookie Policy

Cookies are small text files stored on your computer or mobile device when you browse websites. They enable the website to remember your actions and preferences over a period of time, ensuring smooth and secure operation.

Legal Bases for Cookies

Under EU GDPR (Regulation 2016/679) and the ePrivacy Directive (Directive 2002/58/EC):

• Strictly Necessary Cookies are placed based on our legitimate interest (Art. 6(1)(f)) and contractual necessity (Art. 6(1)(b)) to provide secure, core services you specifically requested.
• Analytics and Functional Cookies are placed exclusively upon your freely given, informed, and revocable consent (Art. 6(1)(a)).

Cookie Inventory & Usage Table

Cookie / Token	Provider	Category	Purpose	Lifespan
amsirar_cookie_consent	Amsirar Trip (First-party)	Strictly Necessary	Records your chosen cookie consent preferences across sessions	1 Year
app-locale / astro-locale	Amsirar Trip (First-party)	Strictly Necessary	Remembers your chosen language (English, French, German, Spanish)	1 Year
Security / Anti-CSRF Tokens	Amsirar Trip / Hostinger	Strictly Necessary	Protects contact and booking forms against cross-site request forgery and malicious bots	Session
_ga, _ga_*	Google Analytics (Third-party)	Analytics & Performance	Tracks aggregated, anonymous visitor statistics, popular itineraries, and page load speeds	Up to 2 Years
NID, CONSENT	Google LLC (Third-party)	Functional & Experience	Powers the optional interactive map displaying our Marrakech office location upon user interaction	Up to 6 Months

Manage Your Cookie Preferences

You have full control over optional cookies. You can grant, customize, or withdraw your consent at any time without affecting your ability to browse our tours and contact us.

Browser-Level Controls

In addition to our consent manager, most modern web browsers allow you to control cookies through their configuration settings:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data.
• Apple Safari: Preferences > Privacy > Block all cookies.
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data.
• Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies.

4. Data Security & Storage

We implement robust administrative, technical, and physical safeguards designed to protect personal data against accidental loss, unauthorized access, alteration, and disclosure:

• Encryption in Transit: All web traffic is encrypted using modern TLS 1.3 cryptographic protocols with HTTPS enforcement.
• Strict Content Security Policy (CSP): Nonce-based execution guards against Cross-Site Scripting (XSS) and code injection.
• Access Restrictions: Access to booking details is strictly limited to authorized personnel handling your travel arrangements.

5. Third-Party Service Providers

To operate our services effectively, we partner with reputable third-party processors who adhere to stringent confidentiality and data protection standards:

• Hosting & Infrastructure: Hostinger Cloud VPS (European datacenters).
• Transactional Email: Google Workspace / Gmail SMTP for booking confirmations.
• Interactive Mapping: Google Maps API (only loaded upon explicit visitor interaction).

6. Your Rights Under GDPR & Moroccan Law

Depending on your jurisdiction, you have extensive legal rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal information.
• Right to Erasure / To Be Forgotten (Art. 17 GDPR): Request deletion of your personal data when no longer needed for legal or contractual purposes.
• Right to Restrict Processing (Art. 18 GDPR): Request limitation of how we process your information.
• Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw your consent for analytics or marketing at any time.

7. Contact Us & Data Protection Inquiries

If you have questions about this Privacy & Cookie Policy, wish to exercise your data rights, or need assistance with your booking records, please contact our Data Protection Team:

• Email: amsirare@gmail.com
• Phone / WhatsApp: +212 (0) 6 61 17 31 44
• Agency Address: Imm. J appt N° 5, Résidence La Perle de l’Atlas, Marrakech, Morocco
• Supervisory Authority: Moroccan National Commission for Personal Data Protection (CNDP - Commission Nationale de contrôle de la protection des Données à caractère Personnel).