Privacy
Policy
This policy explains how HDIDA Tours handles personal data when you visit hdidatours.com, contact us or book a tour. It follows Moroccan Law No. 09-08 on the protection of personal data. Last updated: Nov 4, 2026.
1. Privacy at a Glance
General information
The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. You will find detailed information on data protection in the sections below.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in section 3 under “Information about the controller”.
How do we collect your data?
Some data is collected when you give it to us, for example when you fill in our contact form, write to us by email or start a WhatsApp chat. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data, such as the browser, the operating system or the time of your visit. This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website works without errors. Other data may be used to answer your enquiries, to process your bookings and to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request that it is corrected or deleted. If you have given your consent to data processing, you can withdraw it at any time with effect for the future. You can also object to certain processing of your data. You can contact us at any time about this and other questions on data protection.
Analytics and third-party tools
When you visit this website, your surfing behaviour may be statistically evaluated. This happens mainly with analytics tools. You will find detailed information on these tools in sections 4 and 5.
2. Hosting
We host our website with Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The personal data collected on this website is stored on the hosting provider’s servers in France. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated via a website.
The hosting is used for the purpose of fulfilling our contracts with potential and existing customers and in our interest of a secure, fast and efficient provision of our online offer by a professional provider. We have concluded a data processing agreement with our hosting provider. It ensures that the provider processes the personal data of our website visitors only on our instructions and in line with data protection rules.
3. General Information and Mandatory Disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmission over the internet (for example, communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Applicable law
This website is operated from Morocco and can be visited from all over the world. We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
Information about the controller
The controller responsible for data processing on this website is:
Hdida Tours
36 Lot Abwab Al Atlas, Mhamid
Marrakech, Morocco
Phone: +212 666-801574
Email: contact@hdidatours.com
The controller is the person or company that decides on the purposes and means of the processing of personal data (for example names or email addresses).
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for data processing no longer applies. If you ask us to delete your data or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing it (for example retention periods under tax or commercial law). In that case, the data is deleted once these reasons no longer apply. As a rule, enquiries are deleted 12 months after the last contact, and booking and invoice data is kept for the period required by Moroccan accounting and tax law.
Legal bases of the data processing
We process your personal data if you have given your consent, if it is necessary to carry out a contract with you or to take steps before entering into one (for example answering a booking enquiry), if we are required to by law (for example keeping accounting records), or if we have a legitimate interest in doing so (for example keeping our website secure and working). If you tell us about health-related or other sensitive information, for example an allergy or a mobility need relevant for your tour, we only use it to organise your tour and with your explicit consent. You can withdraw consent at any time.
Recipients of personal data
We do not sell your data. In the course of our business activities, we work with various external parties and may pass personal data to them where this is necessary: our hosting provider, our analytics and advertising providers (see section 5), our booking and payment providers, and the guides, drivers, hotels, camps and other partners who deliver your tour. We also disclose data to authorities where the law requires it.
Transfer of data to other countries
Some of the tools we use are operated by companies in other countries, including the USA. When these tools are active, your personal data may be transferred to and processed in these countries. The level of data protection there may differ from the one in your country or in Morocco. We have limited influence over how these providers process data. Where we transfer data, we only do so where this is necessary to provide our services or with your consent.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time by email to contact@hdidatours.com. The lawfulness of the data processing carried out before the withdrawal remains unaffected.
Right to object
If we process your data because we have a legitimate interest, you have the right to object to this processing at any time, for reasons relating to your particular situation. You can also object at any time to the use of your data for advertising. If you object, we will no longer process your data for these purposes, unless we can show compelling legitimate grounds for the processing or it serves to establish, exercise or defend legal claims.
Right to lodge a complaint with the competent authority
If you believe that your data is processed in breach of data protection law, you have the right to lodge a complaint with the competent data protection authority, for example in your country of residence. This right exists regardless of any other legal remedies. We would appreciate it if you contact us first so that we can resolve your concern.
Information, correction and deletion
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, and, where applicable, a right to correction or deletion of this data. You can contact us at any time about this and other questions on personal data.
No automated decision-making
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser line. If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Children
Our website and tours are aimed at adults. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. Travellers book for minors through a parent or guardian.
4. Data Collection on this Website
Cookies
Our website uses cookies. Cookies are small text files that your browser stores on your device. They do not cause any damage. Some cookies are deleted automatically at the end of your visit (session cookies). Others remain on your device until you delete them (persistent cookies). Cookies from other companies, such as Google or Meta, are called third-party cookies.
We distinguish between necessary cookies, analytics cookies and advertising cookies. Necessary cookies are required to provide the website and certain functions you have requested. We have a legitimate interest in storing them so that our website works without errors. Analytics cookies help us understand how visitors use our website (see Google Analytics in section 5). Advertising cookies help us measure and show our ads (see Meta Pixel in section 5).
You can set your browser so that you are informed about the setting of cookies, accept cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website may be limited.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. We have a legitimate interest in the technically error-free presentation and the optimisation of our website. For this purpose, the server log files must be recorded.
Contact form
If you send us enquiries via the contact form, we store your details from the form, including the contact details you provide there (name, email address, tour interest, travel dates, number of travellers and your message), in order to process your enquiry and in case of follow-up questions. We do not pass this data on without your consent.
The data is processed because your enquiry is related to a possible contract or is necessary for pre-contractual measures, or because we have a legitimate interest in the effective processing of the enquiries addressed to us. The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies (for example after your enquiry has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.
Enquiries by email, phone or WhatsApp
If you contact us by email, phone or WhatsApp, your enquiry, including all resulting personal data (name, enquiry), is stored and processed by us for the purpose of processing your request. We do not pass this data on without your consent. The data remains with us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies. Mandatory legal provisions, in particular statutory retention periods, remain unaffected.
WhatsApp click-to-chat
Our website contains a button that opens a chat with us on WhatsApp. The button is a simple link. Until you click it, no data is transferred to WhatsApp. If you click the button, you are taken to WhatsApp, and your phone number, name and messages are processed by WhatsApp (Meta) under its own privacy policy, which you can find on the WhatsApp website. We receive your phone number and the content of your messages. By starting the chat you consent to this. WhatsApp is operated by companies in the USA and Ireland.
Bookings via Bokun
If you book a tour on our website, we process your booking through the Bokun booking system. When you book, you enter your name, email address, phone number, travel dates, number of participants and special requests. This data is stored on the provider’s servers. We process it to carry out the contract with you. Bokun processes the data on our behalf.
Payments
You can pay for your tour online when you book, or on site by credit card or in cash. If you pay by credit card, the payment is processed by the payment terminal provider and your bank. We do not store your complete card details. If you pay online when you book, the payment is processed through the Bokun booking system and its payment service provider. We keep records of payments for the period required by Moroccan accounting and tax law.
5. Analytics and Advertising
Google Analytics
This website uses functions of the web analytics service Google Analytics, which we integrate through the plugin Site Kit by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For visitors outside Europe, the provider is Google LLC, USA.
Google Analytics enables us to analyse the behaviour of our website visitors. Among other things, we record page views, the time spent on pages, the operating system used and the origin of the user. This data is assigned to the user’s device. It is not assigned to a user ID.
Google Analytics uses technologies that allow the recognition of the user for the purpose of analysing user behaviour (for example cookies). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there. We use Google Analytics because we have a legitimate interest in understanding how our website is used and in improving it. More information can be found in Google’s privacy policy at https://policies.google.com/privacy.
Browser add-on
You can prevent the collection and processing of your data by Google by downloading and installing the browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=en. More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Meta Pixel
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to show our ads to relevant people. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, for users in Europe, and Meta Platforms, Inc., USA, for other users. The pixel records, among other things, the pages you visit and actions you take on our website, together with identifiers such as cookies, and sends this data to Meta. Meta’s information on the use of your data can be found at https://www.facebook.com/privacy/policy. You can manage ad settings in your Facebook and Instagram accounts and block cookies in your browser.
6. Plugins and Tools
Google Fonts (local hosting)
This site uses so-called Google Fonts for the uniform display of fonts. The Google Fonts are installed locally on our own server. A connection to Google servers does not take place when you visit the site, and no data is sent to Google for this purpose. More information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy.
7. Changes to this Privacy Policy
We may update this policy when our website, our tools or the law change. The date at the top of this page shows the latest version. For questions about this policy or your data, write to contact@hdidatours.com.