Privacy Policy
Privacy Policy — TONAROZ TOURS (tonaroztours.com)
Last updated: July 22, 2026
1. Who we are
This website, tonaroztours.com, is operated by:
TONAROZ, société au capital de 100 000 Dirhams Appt N°2, 1er Étage, N°577, Saada 1, Lmhamid — Marrakech, Morocco
- Registre de Commerce (RC): 108337
- Identifiant Fiscal (IF): 47255389
- Identifiant Commun de l’Entreprise (ICE): 002652731000093
- N° Patente: 45105716
- N° CNSS: 2259022
In this policy, “we”, “us”, “our”, and “TONAROZ” refer to this company, and “you” refers to anyone who visits tonaroztours.com or books a service through us. We act as the data controller for the personal data described below.
If you have any questions about this policy or how we handle your data, you can contact us at contact@tonaroztours.com or by post at the address above.
2. What this policy covers
This policy explains what personal data we collect when you use tonaroztours.com or book riads, tours, transfers, or other travel services through us, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
It applies to visitors browsing the site, people who make an enquiry or booking, and guests staying at partner riads or properties we manage bookings for.
3. What personal data we collect
Depending on how you interact with us, we may collect:
Identity and contact information
- Full name, email address, phone number
- Nationality and, where required for a reservation or check-in, passport or national ID number and a copy of the document (often requested by riads/hotels to comply with local police registration requirements)
- Postal address, when needed for invoicing
Booking and travel information
- Check-in/check-out dates, number of guests, room or tour preferences
- Special requests (dietary needs, accessibility needs, celebration occasions)
- Flight or transfer details, when you share them for airport pickup arrangements
Payment information
- Billing name and address
- Payment card details or bank transfer references, processed through our payment provider(s) — we do not store full card numbers on our own servers
- Deposit and payment history related to your booking
Communications
- Messages you send us via contact forms, email, WhatsApp, or phone, and our replies
- Reviews, feedback, or complaints you share with us
Technical and website usage data
- IP address, browser type, device type, operating system
- Pages visited, time spent on the site, referring website, general location inferred from IP
- Cookies and similar technologies (see Section 8)
We do not knowingly collect sensitive categories of personal data (e.g., health data, religious beliefs) unless you voluntarily share them with us as part of a special request (for example, a medical dietary restriction), in which case we use that information only to fulfil your request.
4. How we collect your data
- Directly from you, when you fill in a booking or contact form, email or call us, or communicate through a messaging app
- Automatically, through cookies and analytics tools when you browse the site
- From partner platforms, if you book through a third-party travel agent, tour operator, or online travel agency that passes your details to us to fulfil a reservation
- From the riads or service providers we work with, when they share guest details necessary to complete a stay or activity you booked through us
5. Why we use your data (purposes and legal basis)
We process your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Creating and managing your booking (riad stays, tours, transfers) | Performance of a contract with you |
| Processing payments and issuing invoices | Performance of a contract; legal obligation (accounting/tax records) |
| Sharing necessary details with the riad, transport, or activity provider to fulfil your booking | Performance of a contract |
| Complying with local guest registration / police declaration requirements at accommodations | Legal obligation |
| Responding to enquiries, requests, or complaints | Legitimate interest in providing customer service |
| Sending booking confirmations, itinerary updates, and essential service messages | Performance of a contract |
| Sending marketing offers or newsletters | Your consent (you can opt out at any time) |
| Improving our website and services, fraud prevention, security | Legitimate interest |
| Complying with Moroccan tax, commercial, and civil obligations | Legal obligation |
6. Who we share your data with
We share personal data only where necessary, with:
- Riads, hotels, and activity/transport partners who need your details to prepare for and deliver the service you booked
- Payment processors and banks, to complete transactions securely
- IT and hosting providers, who store and support the systems that run our website and booking platform
- Public authorities, where the law requires it (for example, guest registration obligations for accommodation providers in Morocco, or in response to a lawful request)
- Professional advisors, such as our accountant or legal counsel, where necessary
We do not sell your personal data to third parties.
If any of these providers are located outside Morocco (for example, cloud hosting or payment processors based in the EU or elsewhere), we take reasonable steps to make sure your data continues to receive an appropriate level of protection, such as relying on providers with recognized data protection standards or contractual safeguards.
7. How long we keep your data
We keep personal data only as long as necessary for the purposes described above:
- Booking and invoicing records: for the duration required by Moroccan commercial and tax law (generally up to 10 years for accounting documents)
- Identity documents collected for stays: for the period required by local guest-registration rules, then deleted or anonymized
- Marketing contact details: until you unsubscribe or withdraw consent
- Website analytics/cookies: according to the retention periods described in Section 8
When data is no longer needed, we delete it or anonymize it securely.
8. Cookies and similar technologies
Our website uses cookies and similar technologies to:
- Keep the site working properly (essential cookies)
- Understand how visitors use the site, using analytics tools
- Remember your preferences (such as language or currency)
- Where applicable, measure the performance of marketing campaigns
You can control cookies through your browser settings, and where required, we will ask for your consent before placing non-essential cookies via a cookie banner on the site.
9. Your rights
Under Moroccan Law N°09-08 on the protection of individuals with regard to the processing of personal data, and depending on your location, other applicable data protection laws (such as the EU General Data Protection Regulation for visitors from the EU/EEA), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Object to certain processing, including direct marketing
- Request deletion of your data, where legally possible
- Withdraw consent at any time, where processing is based on consent (e.g., marketing emails)
- Lodge a complaint with the Moroccan National Commission for the Control of Personal Data Protection (CNDP), or your local data protection authority if you are outside Morocco
To exercise any of these rights, contact us at contact@tonaroztours.com. We may ask for proof of identity before acting on your request.
10. Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including restricted access to booking and payment systems and secure processing of payment information through our payment provider. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children’s privacy
Our services are intended for adults booking travel arrangements. We do not knowingly collect personal data directly from children. Information about children traveling with you (such as names or ages for booking purposes) is provided by the responsible adult and used solely to arrange the trip.
12. Changes to this policy
We may update this privacy policy from time to time, for example to reflect changes in our services or in the law. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.
13. Contact us
If you have questions, requests, or complaints about how we handle your personal data:
TONAROZ Appt N°2, 1er Étage, N°577, Saada 1, Lmhamid — Marrakech, Morocco Email: contact@tonaroztours.com Phone: +212 671809582