Privacy Policy

Company: Allotrips (“we”, “our”, or “us”)

1. Introduction

At Allotrips, the operator of Moratra, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website or use our travel and booking services.

We comply with applicable Moroccan data protection laws (Law 09-08), the EU GDPR, UK GDPR, and U.S. privacy laws including the CCPA and CPRA.

By using our website, you agree to this Privacy Policy. If you do not agree, please discontinue using our site.

Allotrips is based in Marrakech, Morocco.

2. Information We Collect

We collect both information you provide directly and information collected automatically.

A. Information You Provide

Full name, phone number, and email address
Country of residence and preferred language
Booking details (tour selected, date, number of people, special requests)
Payment-related data (securely processed; we do not store credit card info)
Messages, emails, and feedback

B. Automatically Collected Information

Device, browser, and operating system
IP address and approximate location
Date, time, and pages visited
Referring source (social media, ads, search engines)
Cookies and analytics logs

C. Cookies and Tracking Technologies

We use cookies to enhance your experience and analyze usage. Non-essential cookies are only used after your consent, in line with GDPR requirements.

3. How We Use Your Information

To manage and confirm your bookings
To send confirmations and updates
To send promotional offers (with consent)
To improve our website and services
To comply with legal obligations
To prevent fraud and ensure security

We never sell your personal data.

4. Legal Bases (GDPR)

Contractual necessity: Process bookings or inquiries
Legitimate interests: Improve services
Consent: Marketing and analytics
Legal obligation: Compliance with law

5. Sharing Information

Service providers – hosting, email, analytics
Business partners – local operators, transport
Legal authorities – as required
Business transfers – merger or acquisition

6. International Data Transfers

Data may be transferred outside your country, including Morocco, EU, and the U.S., using Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data Retention

We retain data only as long as necessary, then securely delete or anonymize it.

8. Data Security

We use SSL, encryption, firewalls, and audits to protect your data. No system is 100% secure.

9. Your Rights

Under GDPR: access, correct, delete, restrict, object, portability, withdraw consent.

Under CCPA/CPRA: know, delete, opt-out, non-discrimination.

10. Children’s Privacy

Not intended for users under 16 (or 13 in the U.S.).

11. Contact Information

Email: contact@moratra.com
Phone: +212 662-893100
Address: Marrakech, Morocco

12. Updates

We may update this policy periodically. The “Effective Date” will be revised accordingly.