Privacy Policy

This Privacy Policy applies to agafaydesert.com (this "website") and to the booking and contact forms it provides. It describes what information we collect when you use this website, why we collect it, how long we keep it, and the choices available to you.

This website is used to book Agafay Desert activities directly with the operator — quad biking, camel rides, buggy rides, pool access, and dinner shows near Marrakech, Morocco. Payment is currently collected on site, in cash, when you take part in the activity — see our Terms of Use for details.

This website is operated by Agafay Desert, an independent activity operator based in Morocco. Agafay Desert is not a marketplace or booking reseller — every enquiry and booking made through this website goes directly to the operator.

You can reach us using the contact details in Section 17, Contact, below.

We collect information in three ways:

• Information you provide directly — mainly through the booking form, and optionally through the contact form.
• Information generated by the booking system once you submit a booking — for example, a booking reference and the final price calculated for your booking.
• Limited technical information used to keep the booking form secure and to prevent automated abuse (see Section 11, Security).

We do not ask you to create an account, and this website has no login system.

When you submit a booking through this website, we collect:

• Your full name, email address, and a WhatsApp-capable phone number
• The activity, date, and start time you selected, and the number of participants and their individual ages (used to calculate the correct price for each person and to apply age-based participation rules)
• Whether a participant is driving a quad or buggy, and each participant's vehicle preference (standard or single vehicle), where applicable to the activity
• The price calculated for your booking, and your selected payment method
• Your pickup location, as described in Section 5 below
• Any dietary requests, allergy notes, or special requests you choose to add — these fields are optional, see below

A working WhatsApp-capable number is required for every booking so we can reach you about it. This website does not currently send automated WhatsApp messages — see Section 7.

Optional information

Dietary requests, allergy notes, and special requests are optional and are only used to help us prepare for your activity — for example, arranging a vegetarian meal where possible. Please only share information that is actually necessary for us to fulfil your booking. We do not use this information for any other purpose, and providing it does not amount to a guarantee that every dietary or allergy need can be fully accommodated.

Pickup is included within 5 km of Marrakech city centre; pickup outside that area may require an additional fee. To arrange your pickup, the booking form lets you provide a pickup location in either or both of two ways:

• Typing a pickup place — for example, a hotel or riad name — as free text.
• Sharing your current location — an optional "Use my current location" button that, only if you choose to click it, asks your browser for permission to share your device's GPS coordinates. This is never requested automatically; the page never asks for your location on its own, and typing a pickup place remains fully available whether or not you use this option.

If you share your location, the coordinates are stored with your booking and used only to help identify and arrange your requested pickup point. We do not continuously or repeatedly track your location, we do not track your movement or route, and we do not use your coordinates to automatically calculate a distance, a pickup zone, or a pickup fee — those remain manual, operational decisions made by our team. Your booking confirmation page does not display your raw coordinates back to you; it shows that a location was provided.

We use the information described above to:

• Create and manage your booking, including calculating the correct price
• Arrange pickup for your activity
• Prepare for dietary, allergy, or special requests you have shared with us
• Respond to enquiries sent through the contact form
• Notify our own team that a new booking has been made
• Keep the booking form secure and prevent automated abuse

We do not use your information for advertising, and we do not sell your information.

When you submit a booking, our team is notified by email so we can prepare for your activity. At this time, this website does not send you an automated booking confirmation by email, WhatsApp, or SMS — the confirmation page shown immediately after you book, together with your booking reference, is your record of the booking. Please save your booking reference.

We collect a WhatsApp-capable number so our team can reach you if needed regarding your booking — this website does not currently send automated WhatsApp or SMS messages of any kind, including marketing messages.

We use carefully selected service providers to help us operate this website and process bookings — for example, providers that host our infrastructure or deliver the transactional email notification described in Section 7. These providers only process information on our behalf, to the extent necessary to provide that specific service, and are not permitted to use it for their own marketing or advertising purposes.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. Information may be processed by the service providers described in Section 8 solely to help us operate this website, and may otherwise be disclosed where required by law, to protect our legal rights, or to protect the safety of our customers or team.

We keep booking-related records — such as your name, contact details, and booking details — for up to 5 years, where needed for operational, accounting, dispute- handling, or other legitimate business or legal purposes.

The limited technical information described in Section 11 is kept only for a short period, specifically to prevent automated abuse of the booking form, and is then automatically deleted — it is not kept for 5 years and is not linked to your booking records.

We take reasonable steps to protect the information submitted through this website. Booking information is stored in a database that is not publicly accessible, and your booking is only viewable using your own unique, hard-to-guess booking reference.

To help prevent automated abuse of the booking form (for example, scripted bulk submissions), this website keeps a limited, short-lived security record for each booking attempt. This record does not store your raw IP address — it stores a one-way, cryptographically hashed value derived from it, which cannot practically be converted back into your original IP address, and it is automatically deleted after a short period.

You may contact us to ask what information we hold about a booking, or to request that it be corrected or updated. You may also ask us to delete information you have provided; we will do so where we are able to, except where we need to keep certain booking records for the retention period described in Section 10 — for example, for accounting or dispute-handling purposes.

This website is operated from Morocco, and requests like these are handled on a reasonable-efforts basis rather than under a specific named regulatory framework. If you have a request or concern, please use the contact details in Section 17.

This website does not use advertising or analytics cookies, and it does not use cookies to track you across other websites. There is no customer account or login system on this website, so no account/session cookies are set for that purpose either. If this changes in the future, this Privacy Policy will be updated to reflect it.

This website is intended to be used by adults booking an activity on behalf of themselves and their group, which may include children. Participant ages (including for children and infants) are collected as part of the booking so we can apply the correct pricing and participation rules for each person — see our Terms of Use for the age rules that apply. We do not knowingly collect information directly from children browsing this website independently; booking information for a child participant is submitted by the adult making the booking.

This website and business are based in Morocco. Some of the service providers described in Section 8 — for example, infrastructure or transactional-email providers used to operate this website — may process information on servers located outside Morocco. We only use such providers to the extent necessary to operate this website and deliver the booking service described in this policy.

We may update this Privacy Policy from time to time, for example as the website or booking process changes. The version published on this page applies, and the date at the top of this page shows when it was last updated.

If you have a question about this Privacy Policy, or want to make a request about your information, please contact us at contact@agafaydesert.com, or use our Contact page.