Legal

Privacy Policy

How Exploreze handles your personal information, in line with Moroccan Law 09-08 and international best practice.

Last updated: 17 July 2026

1. Who we are

Exploreze is a Moroccan technology platform headquartered in Agadir. For the purpose of applicable data-protection laws, Exploreze acts as the data controller of the personal data processed through its website, mobile interfaces and WhatsApp channels.

2. Data we collect

  • Account data: name, email, phone/WhatsApp number, country, preferred language, encrypted password.
  • Booking data: service reserved, dates, participants, pick-up details, special requests, price and payment status.
  • Provider data: business identifiers, tax numbers, licences, insurance certificates, bank details for payouts.
  • Communications: messages exchanged with support, reviews and complaints.
  • Technical data: device type, browser, IP address, approximate location, pages visited, referral source.

3. Why we process your data

  • To create and manage your account and authenticate your sessions.
  • To confirm, deliver and support your bookings (including transmitting the necessary data to the Provider).
  • To process payments, issue receipts and prevent fraud.
  • To provide customer service and handle complaints.
  • To publish, on your own initiative, reviews of services you have consumed.
  • To comply with legal obligations (tax, accounting, tourism, consumer protection).
  • To improve the platform, its security and its content, on the basis of legitimate interest.
  • To send you service-related communications and, only with your consent, marketing communications.

4. Legal bases

We rely on the following legal bases: performance of the contract (bookings and account management), compliance with legal obligations, legitimate interest (security, fraud prevention, service improvement), and your consent (marketing, non-essential cookies). Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Sharing of data

Personal data is shared only with (i) the Provider strictly needed to perform your booking, (ii) payment and infrastructure sub-processors bound by confidentiality and security obligations, (iii) professional advisors and auditors, and (iv) public authorities where required by law. Data is never sold to third parties.

6. International transfers

Some of our technical sub-processors may be located outside Morocco. Where such transfers take place, we ensure appropriate safeguards, such as adequacy findings, standard contractual clauses or equivalent mechanisms recognised by the Moroccan National Commission for the Protection of Personal Data (CNDP).

7. Retention

Booking and accounting records are retained for the periods required by Moroccan tax and commercial law (typically up to ten years). Account data is kept while your account is active and for a reasonable period thereafter for legal defence. Marketing preferences are kept until you withdraw them. Technical logs are rotated on short cycles.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with the CNDP or with the data-protection authority of your country of residence. To exercise these rights, contact us at contact@exploreze.com. We may verify your identity before responding.

9. Cookies

Exploreze uses strictly necessary cookies to run the platform (authentication, security, load balancing), and, only with your consent, analytics and preference cookies to measure audience and remember your language. You can manage your preferences from your browser settings at any time.

10. Security

We implement reasonable technical and organisational measures proportionate to the sensitivity of the data, including encryption in transit, hashed passwords, role-based access controls, activity logging and regular security reviews. No system can guarantee absolute security; users must keep their credentials confidential and notify us of any suspected compromise.

11. Children

The platform is not directed to children under 16. Minors may only be listed as travelling participants under the responsibility of an adult account holder.

12. Updates

We may update this policy from time to time. Material changes will be signalled on the platform and, where appropriate, notified by email.

Contact

General inquiries, booking support and requests: