Privacy Policy

Nmorocco is an online travel platform based in Morocco that connects travelers with trusted local guides, drivers, and hosts across Morocco's cities, mountains, deserts, and coastal regions. Nmorocco, based in Marrakech, Morocco, is the controller responsible for your personal data. We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, where it applies to travelers in the European Union, the EU General Data Protection Regulation (GDPR). For any privacy-related question, contact our privacy team at contact@nmorocco.com.

When you use Nmorocco, we may collect the following types of information: Account information: your name, email address, phone number (including WhatsApp number), and date of birth when you register. Booking information: tour details, selected dates, group size, pickup or accommodation location you pin on the map, and payment information processed securely via Stripe. Profile information: any optional information you add, such as preferences, languages, or travel history. Sign-in information: if you sign in with Google or Facebook, we receive basic profile data (such as your name, email, and profile picture) from that provider. Mobile app data: if you use our mobile app, we may collect device identifiers and push-notification tokens so we can send you booking updates. Usage data: pages visited, search queries, device type, browser, IP address, and interaction data used to improve and secure our platform. Communications: messages between you and guides, and between you and our support team.

We use your personal data for the purposes below, each with its legal basis: • Setting up your account, managing bookings, and enabling communication between travelers and guides: to perform our contract with you. • Verifying your phone number and sending booking confirmations, reminders, and updates by WhatsApp, SMS, or email: to perform our contract and for our legitimate interest in a secure, reliable service. • Processing payments (via Stripe) and host payouts (via Wise): to perform our contract and to comply with legal, tax, and accounting obligations. • Improving and personalizing the platform, analytics, fraud prevention, and security: for our legitimate interests. • Sending optional newsletters and marketing: only with your consent, which you can withdraw at any time. • Meeting legal obligations under Moroccan and applicable international law: to comply with the law.

By providing your phone or WhatsApp number, you consent to receive transactional messages from Nmorocco by WhatsApp and/or SMS related to your bookings and account, including verification codes (OTP), booking confirmations, reminders, updates, and support replies. These are service messages, not marketing. Message frequency varies, and standard message and data rates may apply. Some transactional messages (such as security codes and booking confirmations) are necessary to use the service. You can opt out of non-essential messages at any time by contacting us at contact@nmorocco.com, or, where supported, by replying STOP; reply HELP for assistance.

You can create an account or sign in using Google or Facebook. When you do, that provider shares basic profile information (such as your name, email address, and profile picture) with us, and their own privacy terms apply in addition to this policy. • Google: https://policies.google.com/privacy • Facebook (Meta): https://www.facebook.com/policy.php We use this data only to create and secure your Nmorocco account. We never post to your social accounts.

We do not sell your personal data. We share limited information only as needed to run the platform: Local guides & hosts: when you book, we share your first and last name and a link to your profile so the host can confirm the booking; once confirmed, we share your phone number so they can coordinate the tour. Your billing details are never shared with a host. Payment providers: Stripe processes traveler payments; Wise processes payouts to hosts. We do not store your full card details. Technology providers: we use trusted providers to operate the service, including Supabase (database, authentication, and storage), Google (Maps and sign-in), Meta/WhatsApp (messaging), and an email delivery provider, all under confidentiality obligations. Legal requirements: we may disclose information if required by law, or to protect the rights, property, or safety of Nmorocco, our users, or the public.

Nmorocco is based in Morocco, and some of our technology providers process data outside Morocco, including in the European Union and the United States (for example Stripe, Supabase, Wise, Google, and Meta/WhatsApp). When your data is transferred across borders, we take steps to ensure it receives an adequate level of protection, including using providers that offer recognized safeguards such as the EU Standard Contractual Clauses or an equivalent framework.

We keep your personal data only as long as your account is active or as needed to provide our services. You can request deletion of your account and associated data at any time from your Account Settings. Booking, payment, and payout records may be retained for up to 5 years to meet legal, tax, and accounting obligations.

You have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete information • Delete your account and associated personal data • Object to or restrict certain types of processing • Withdraw consent for marketing at any time • Data portability: you can download a copy of your personal data (in JSON or HTML) at any time from your Account Settings To exercise any of these rights, use your Account Settings or contact us at contact@nmorocco.com. You also have the right to lodge a complaint with the Moroccan data protection authority, the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel, www.cndp.ma). Travelers in the EU may also contact their local data protection authority.

You can delete your account and all associated data at any time: On the website: open Account Settings from your profile menu and use the account-deletion option, or visit nmorocco.com/account-deletion and follow the instructions. In the mobile app: open Settings from the account menu and use the account-deletion option. When you delete your account, you are logged out on all devices and your account is disabled. Some records may be retained where required by law (see Data Retention). For help, contact contact@nmorocco.com.

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Our platform uses encrypted connections (HTTPS), and passwords are stored using secure hashing. No method of transmission over the internet is 100% secure. We encourage you to use a strong password and keep your login credentials private. If a data breach affects your personal data, we will notify you and the relevant authorities where legally required, without undue delay.

We use cookies to keep you logged in, remember your preferences, and analyze platform usage. See our Cookie Policy for full details.

Nmorocco is not intended for children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us at contact@nmorocco.com and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, if the changes are significant, notify you by email. We encourage you to review this policy periodically.

If you have any questions or concerns about how we handle your personal data, please contact: Nmorocco, Privacy Team Email: contact@nmorocco.com Address: Marrakech, Morocco