Privacy Policy

This policy explains what personal data Surfing in Taghazout ("we", "us") collects when you visit our website, request a booking or talk to us by email or WhatsApp, how we use it and what your rights are.

Who we are

Surfing in Taghazout, Taghazout, Agadir, Morocco.

Email: contact@surfingintaghazout.com

We are responsible for your personal data under Moroccan Law 09-08 on the protection of personal data and, for guests in the European Union, the General Data Protection Regulation (GDPR).

What we collect

• Booking details: name, email address, phone / WhatsApp number, country, dates of stay, number of guests, package, room, and the messages you send us.
• Stay details you choose to share: surf level, diet or allergies, flight number and times for airport transfers, activities you book.
• Payment details: the amount and date of your deposit and payments, and the proof of payment you send us. We do not store card numbers.
• Website data: basic technical data (IP address, browser, pages visited) collected by our hosting and, if you accept them, cookies.

Why we use it

• To answer your questions and confirm your availability.
• To manage your booking: deposit request, confirmation, booking document, changes and cancellations.
• To organise your stay: room, meals, surf lessons, activities and airport transfers.
• To keep accounting records required by law.

We use your data because it is needed for your booking (contract), because you asked us to contact you (consent), or to meet legal obligations. We never sell your data and we do not send you advertising without your consent.

WhatsApp and email

If you give us your WhatsApp number, we contact you on WhatsApp about your request and your stay. WhatsApp is operated by Meta; messages are handled under WhatsApp's privacy policy. We only send messages related to your booking. Reply "STOP" at any time and we will stop contacting you on WhatsApp.

To answer faster, we may use an AI assistant to help us draft replies to your messages and to read booking requests. A member of our team checks the messages we send. Your data is processed only for your booking and is not used to advertise to you.

Who we share it with

Only what is needed, with:

• The camp hosting you, so it can prepare your room, meals and lessons.
• Our driver, for airport transfers (your name, number of people, flight and WhatsApp number).
• Activity partners, for activities you book (your name and number of people).
• Service providers who run our tools: website hosting, email, WhatsApp (Meta) and the AI assistant. They may process data outside Morocco, with appropriate safeguards.
• Authorities, when the law requires it (for example, guest registration in Morocco).

How long we keep it

Booking requests that do not become bookings: up to 12 months. Bookings and payment records: as long as required by accounting and tax law (up to 10 years). Messages: up to 24 months after your stay. Then we delete or anonymise it.

Your rights

You can ask to access, correct or delete your data, to object to its use, or to receive a copy. Write to contact@surfingintaghazout.com. We reply within 30 days. You can also complain to the CNDP in Morocco (cndp.ma) or to the data protection authority of your country.

How to delete your data

Send an email to contact@surfingintaghazout.com with the subject "Delete my data" and the email or WhatsApp number you used with us. You can also send "Delete my data" on WhatsApp.

We delete your data within 30 days and confirm by email. We keep only what the law requires (for example invoices and payment records).

Cookies

Our website uses cookies needed for it to work and, only with your consent, cookies for statistics. You can change your choice in your browser settings at any time.

Security

Access to booking data is limited to our team, protected by passwords and encrypted connections (HTTPS).

Changes

We may update this policy. The date at the top shows the latest version.