Privacy policy

We only collect what we need to look after you. The data the guide receives through the site is:

• In a booking request: your name, email, phone or WhatsApp number, the date you choose, the number of travellers and any message you add.
• In the contact form or by email: your name, email, phone number if you give one, and the content of your enquiry.
• On WhatsApp: your phone number, your profile name and the messages you exchange with the guide.
• When you pay by transfer: the proof of transfer, showing the sender’s name, the amount and the reference, if you send it to us to confirm payment.
• In the Guest Pass: the practical details of your trip, such as the meeting point and time, the guide’s name and the type of vehicle.
• Browsing data: if you accept analytics cookies, statistical information about the pages visited, your device and your approximate location, as explained in section 07.

The site’s booking system, Tripvance, works only as an interface. Its developer does not receive or process this data: it reaches the guide alone.

We do not ask for health data. For some activities, the law or a partner (accommodation, insurance, safety procedures) may require identification details such as passport information: in that case we will tell you beforehand and use them only for that purpose. If you choose to tell us about an allergy, a physical limitation or another personal circumstance, we use it only to adapt the activity to you, and by telling us you consent to that use. You can withdraw your consent at any time.

• Handling your booking request and organising the service. Legal basis: performance of a contract, or steps you ask us to take before one.
• Answering your enquiries. Legal basis: our legitimate interest in helping you and, when you write first, your own request.
• Sending you the practical trip details (Guest Pass). Legal basis: performance of a contract.
• Confirming and recording your payment. Legal basis: performance of a contract and compliance with accounting obligations.
• Meeting legal obligations, such as accounting and tax rules. Legal basis: compliance with a legal obligation.
• Measuring how the site is used and improving it. Legal basis: your consent, which you give or refuse in the cookie banner.

We do not use your data for automated decisions or profiling, and we do not sell it to anyone.

• Enquiries and booking requests that do not become a booking: up to 3 years from the last contact.
• Completed bookings and invoices: for the periods required by the applicable accounting and tax rules.
• Analytics data: as set out in our Cookie Policy.

After that we delete or anonymise it. You can ask us to erase it earlier, except for data we are legally required to keep.

We only share your data with those who need it to provide the service:

• Namecheap, Inc., which hosts the site and provides the guide’s professional email service (Private Email).
• Google, for web analytics, and only if you accept statistics cookies.
• WhatsApp (Meta), if you choose to contact the guide on that channel.
• Western Union, MoneyGram and banks, when you pay by transfer: these services receive the transfer details on their own account.
• Licensed partners, such as partner guides, agencies, accommodation and tourist transport companies, when they are involved in your trip. We pass on only the booking details they need and, where required, identification details, with your knowledge.
• Authorities, when a law or court order requires it.

This website does not take online payments and does not collect bank card details. For now, payments are made by transfer through Western Union or MoneyGram or, in some cases, to the guide’s bank account. In every case the recipient is exclusively AIT ISHA Mustapha, in his own name.

• What data is handled: the transfer details, meaning your name as sender, the amount and the reference or control number, along with any proof you send us. We use them only to identify and record your payment, and keep them for the periods the accounting rules require.
• Third parties involved: Western Union, MoneyGram and the banks handle your data as independent controllers under their own terms and policies, which we do not control.
• How to pay safely: we give you the payment details directly when we confirm your booking, by email or WhatsApp. Check that the recipient is AIT ISHA Mustapha and, if you have any doubt, confirm with us through the contact details on this site before sending money. We will never ask for your card number or banking passwords.

If online payment is switched on in the future, we will update this policy before we start using it.

The guide works from Morocco, so your data is handled there, and our providers, such as Namecheap and Google, are based in the United States. If you live in the European Economic Area or the United Kingdom, your data may leave your territory. That transfer is necessary to deal with your request, and where a provider is involved it relies on the safeguards the provider offers, such as standard contractual clauses, as the case may be.

Google Analytics

We use Google Analytics to see which content interests visitors most and to improve the site. It only runs if you accept it in the cookie banner. You can change or withdraw your choice at any time from the site’s cookie settings.

Videos and posts from other platforms

Some pages include videos or posts from YouTube, Instagram, Facebook or other platforms, either embedded or as a plain link. If you play them, or click a link, that platform may receive data such as your IP address or device and set its own cookies. They follow their own privacy policies, which we do not control. More detail in our Cookie Policy.

You can exercise the following rights over your data at any time:

• Access: find out what data we hold about you and get a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete it when it is no longer needed.
• Objection and restriction: object to processing based on our legitimate interest, or ask us to restrict it.
• Portability: receive your data in a structured format.
• Withdrawal of consent: where processing relies on it, without affecting what was done before.

To exercise them, write to info@experiumorocco.com or use the contact page, giving your name and what you are asking for. We may ask you to confirm your identity. We will reply within one month.

We apply reasonable technical and organisational measures to protect your data, such as the site’s encrypted connection and restricted access to email and bookings. No internet transmission is completely secure, but we act with care and, if a breach affecting you ever occurs, we will tell you as the law requires.

Our services are aimed at adults. People under 18 should only send us data through a parent or guardian. If we find we have received a minor’s data without that consent, we will delete it.

We would rather settle any concern with you directly. If you still think your data is not being handled properly, you can complain to the competent authority:

• Morocco: National Commission for the Control of Personal Data Protection (CNDP).
• Spain: Spanish Data Protection Agency (AEPD).
• France: Commission Nationale de l’Informatique et des Libertés (CNIL).
• United Kingdom: Information Commissioner’s Office (ICO).
• Other EU countries: the data protection authority of your country of residence.

We may update this policy if the law or the way we work changes, for example if online payment is switched on. The version published on this page is the one in force. See also our Legal Notice.