Last updated: 18 October 2026
In short: this website has no account, no database, no analytics and no advertising cookies. When you send us a form, your details are emailed to us and we only use them to answer you and organise your trip.
Who is responsible for your data
Merzouga Online ("Merzouga Online", "we"), Merzouga, Morocco. You can reach us on WhatsApp or by email at any time; see the legal notice.
We follow Moroccan law 09-08 on the protection of personal data and, for visitors from the European Union, the General Data Protection Regulation (GDPR).
What we receive and why
When you use a form (booking or contact)
When you press send, what you typed (the tour, dates, number of travelers, tent type, your name, email address, phone number if you give one, and your message) is sent over an encrypted connection to our web server, which emails it to us at contact@merzougaonlinetours.com. The website does not keep a copy: no database, no account.
To stop spam robots, the server counts how many messages each visitor sends in an hour. It stores this count under a scrambled (hashed) version of your IP address, never the address itself, and deletes it after a day.
We use what you send us to answer your questions, prepare a quote, organise your trip (drivers, camp, hotels) and keep in touch before and during it. The legal basis is the steps you ask us to take before booking, and then the contract for your trip.
During your trip
For some trips we need extra details, such as the names of all travelers, passport numbers for hotels (required by Moroccan law), dietary needs or health information you choose to share for your safety. We ask for these only when needed and share them only with the hotel or camp concerned.
Who else sees your data
- WhatsApp (Meta) carries your messages if you contact us that way. Their own privacy policy applies.
- Our email provider stores the emails and form messages you send us.
- Hotels, guesthouses and drivers receive the details they need for your booking, and nothing more.
- Our web host (our web hosting provider) keeps standard server logs (IP address, pages visited, time) for security, usually for a few weeks.
We never sell your data or use it for advertising.
Services this website loads
- Fonts: the fonts are stored on our own server. No font service (such as Google Fonts) is contacted.
- MET Norway: the live weather in the "Plan your trip" section is loaded from api.met.no, which receives your IP address. Nothing else is sent.
Links to WhatsApp, Google Maps, Tripadvisor, Instagram and Facebook take you to those services; their own policies apply there.
Cookies
This website does not set any cookies and does not track you. That's why there is no cookie banner.
To avoid loading the weather forecast again on every page, your browser keeps it for 30 minutes in its session storage. This stays on your device, is never sent to us, and is deleted when you close the tab.
How long we keep your data
We keep booking messages and trip details for as long as needed to organise your trip and answer any follow-up, then delete them, unless the law requires us to keep invoices or records for longer.
Your rights
You can ask us at any time to see the data we have about you, correct it, delete it, or stop using it. Contact us on WhatsApp or by email and we will reply within one month. If you are not satisfied with our answer, you can contact the Moroccan data protection authority (CNDP, cndp.ma) or, if you live in the EU, the data protection authority of your country.
Changes
If we change how we handle your data, we will update this page and the date at the top.