Privacy Policy

Who we are

This website, kasbahtransfers.com, is operated by Kasbah Transfers, a private transport company based at 26 Avenue Allal El Fassi, 4th floor, Marrakech, Morocco. Kasbah Transfers is responsible for the personal data described on this page.

For any question about your personal data, contact us at booking@kasbahtransfers.com or by phone/WhatsApp on +212 624-010407.

The personal data we collect

We only collect the data you choose to send us through the website, plus the technical data needed to run it:

Booking requests: first and last name, email address, phone/WhatsApp number, pick-up and destination, flight number, hotel, date and time, number of passengers and bags, preferred language and any special requests you write.
Contact form: name, email address, phone number, subject and message.
Newsletter: your email address.
Blog comments: name, email address, optional website and your comment. Approved comments show your name publicly; your email address is never published.
Technical data: the IP address from which a form is sent (recorded with booking requests, contact messages, newsletter sign-ups and comments, to help prevent spam and abuse), and standard server logs kept by our hosting provider.

How we use your data

To answer your request, prepare a quote, confirm and carry out your transfer, excursion or tour, and contact you about it (by email, phone or WhatsApp).
To send you an email confirming that we received your booking request, with a private link to your request.
To issue invoices and keep the accounting records we are legally required to keep.
To send our newsletter, only if you subscribed to it. If you are one of our customers, we may also occasionally send you a courtesy message (for example a birthday greeting). You can ask us to stop either at any time.
To publish your blog comment after moderation, and to protect the website against spam and abuse.

We use your data because it is needed to provide the service you request, because we have a legitimate interest in running and protecting our business, because the law requires it (accounting), or because you gave your consent (newsletter, comments).

Who we share it with

We do not sell your personal data and we do not use it for advertising. We share it only when needed:

Our drivers and team, who need your name, phone number, pick-up details and flight information to carry out your transfer.
Hostinger, our website hosting and email provider, which stores the website, its database and our mailbox.
PayPal, if you choose to pay by card through PayPal. PayPal processes your payment under its own privacy policy; we do not receive your card details.
Partners you ask us to book for you (for example a desert camp, guide or hotel during a tour), limited to what they need.
Authorities, when the law requires it.

Cookies

The website itself sets only two cookies, both strictly necessary for it to work. They do not track you and expire after 2 hours:

kt_session — keeps your session (for example your chosen language: English, French or Spanish).
kt_csrf_cookie — a security token that protects the forms against forgery.

We do not use analytics, advertising or tracking cookies. However, some pages load content from other companies (see below), which may set their own cookies in your browser.

Content from other companies

To display the website, your browser connects directly to these services, which receive your IP address and may set cookies under their own privacy policies:

Google Fonts (typefaces) and Google Maps (the map on our contact page).
cdnjs (Cloudflare) and jsDelivr (icons and style files).
Gravatar (Automattic), which shows profile pictures next to blog comments, based on an anonymised code made from the commenter’s email address.

Our WhatsApp, Facebook, X (Twitter) and LinkedIn buttons are plain links: nothing is sent to those services unless you click them. Once you contact us on WhatsApp, WhatsApp’s own privacy policy applies to that conversation.

How long we keep it

Booking requests and messages: for as long as needed to handle your request and any follow-up questions.
Invoices and accounting records: for the period required by law.
Newsletter: until you ask us to unsubscribe you (email booking@kasbahtransfers.com).
Blog comments: as long as the article is online, or until you ask us to remove your comment.

Security

The whole website uses an encrypted HTTPS connection. Booking confirmation pages can only be opened with a private, random link that is sent to you, and are hidden from search engines. Access to our administration area is restricted to our team.

Your rights

Under Moroccan Law No. 09-08 on the protection of personal data — and, if you are in the European Union, the GDPR — you can ask us to access, correct or delete your personal data, object to its use, or withdraw your consent (for example to the newsletter) at any time. If you are in the EU, you can also ask for a copy of your data in a portable format or ask us to restrict its use.

To use these rights, email booking@kasbahtransfers.com. We may ask you to confirm your identity before acting on the request.

If you are not satisfied with our answer, you can contact the Moroccan data protection authority, the CNDP (www.cndp.ma), or the data protection authority of your country.

Children

Our booking and contact forms are intended for adults. Information about children travelling with you (for example the need for a child seat) is only used to provide the service.

Changes to this policy

We may update this policy when our website or services change. The date of the latest version is shown at the top of this page.

How we handle your personal data