Privacy policy
Last updated 22 October 2026. Applies to moroccowild.com and the MoroccoWild Android app.
Who we are
MoroccoWild, Marrakech, Morocco, runs this marketplace where travellers book experiences run by independent local operators. For any privacy question, write to marhaba@moroccowild.com.
What we collect
- Account: name, email, password (stored encrypted, never readable), and optionally phone, country and city.
- Bookings: traveller name, email, phone, number of guests, dates, notes you write, amounts and payment status.
- Payments: handled by Stripe. Your card number is entered on Stripe's secure form and never reaches our servers; we only receive the payment status.
- Reviews: your rating, text and the display name you choose (by default first name and initial).
- Newsletter: your email, only if you subscribe.
- On your device: a session cookie to keep you signed in and protect forms, and local storage for your wishlist, comparison list and currency. The app keeps copies of public pages you visited so it can show them offline. We use no advertising or analytics trackers.
Why we use it
- To create and run your bookings, and to send you confirmations, reminders and cancellation or refund messages (contract).
- To share the booking details the operator needs to run your trip (contract).
- To prevent fraud and keep the platform secure (legitimate interest).
- To keep booking and accounting records as the law requires (legal obligation).
- To send the newsletter, only with your consent. Every email has an unsubscribe link.
Who receives it
- The operator of the experience you book (name, contact details, guests, dates, notes).
- Stripe, for payments and refunds.
- Our hosting and email providers, which process data on our behalf.
- Pages load some images and fonts from third parties (Unsplash, Google Fonts, Google for reviews and maps); these services receive your IP address as for any web request.
We never sell your data.
How long we keep it
Your account stays until you delete it. Booking records are kept for 10 years after the trip for accounting and legal reasons, even if you delete your account. Newsletter data is deleted when you unsubscribe.
Your rights
You can access, correct or delete your data, object to its use, or ask for a copy, by writing to marhaba@moroccowild.com. You can update your profile and delete your account yourself at any time.
In Morocco these rights come from law 09-08 and you may contact the CNDP (cndp.ma); travellers in the European Union are also protected by the GDPR and can complain to their data protection authority.
Security
Data travels encrypted (HTTPS), passwords are hashed, payment data stays with Stripe, and booking pages are only reachable by the traveller, the operator and our team.
Changes
If this policy changes in a way that matters, we will tell account holders by email before it applies.