Last Updated: 13/08/2025
When you make a Paddle Out Morocco booking, your privacy is our priority. This policy explains how we protect and use your data during the reservation process and beyond.
1. Information We Collect
When you complete a Paddle Out Morocco booking, we gather necessary details to ensure your safety and service quality. This includes your full name, contact information (email and WhatsApp number for local coordination), and encrypted payment data processed through secure gateways like Stripe or PayPal. For equipment liability purposes, we may request passport/ID copies which are stored securely and deleted after your stay. Our system also automatically captures technical information including IP addresses for security monitoring and cookies to improve website functionality. We never collect unnecessary data – every piece of information serves a specific purpose in enhancing your surf experience while maintaining strict privacy standards.
2. How We Use Your Data
Your Paddle Out Morocco booking information enables us to deliver personalized services tailored to your needs. We process reservations efficiently by matching surf instructors to your skill level, preparing appropriate gear, and arranging accommodations based on your preferences. Contact details allow us to send real-time updates about weather conditions, meeting points, or schedule changes that may affect your plans. Payment information is used exclusively for transaction processing through certified providers. Anonymous data helps analyze booking trends and improve our website’s user experience. Importantly, we never use your data for unrelated marketing unless you explicitly opt into our newsletter during the booking process.
3. Data Protection Measures
We implement robust security protocols to safeguard your information throughout the Paddle Out Morocco booking journey. All data transmissions are encrypted using SSL/TLS technology equivalent to banking standards. Payment details are tokenized and never stored on our servers, with processing handled by PCI-DSS compliant services. Physical copies of documents are kept in locked facilities with restricted staff access. Our team undergoes regular GDPR and Moroccan data protection training, ensuring they understand proper information handling procedures. System security is audited quarterly by third-party experts to identify and address potential vulnerabilities proactively.
4. Third-Party Data Sharing
Your information is shared only when essential to fulfill your Paddle Out Morocco booking. Trusted payment processors receive minimal required data to complete transactions securely. Local authorities may access details when mandated by Moroccan tourism laws. Equipment partners receive necessary information to prepare your gear safely. We maintain strict contracts with all service providers requiring GDPR-compliant data handling. Notably, we never sell or rent customer information to external marketers. In rare cases of business transfers, data protection terms remain binding for all successors through legal agreements.
5. Data Retention Periods
We retain your Paddle Out Morocco booking details for specific operational and legal needs. Active reservation data is maintained throughout your stay plus three years to comply with Moroccan tax regulations. Marketing consent records are kept until you unsubscribe. Anonymized website analytics may be stored indefinitely to improve services. Passport/ID copies are deleted within 30 days after your departure. You may request early deletion of non-essential data, though certain information must be retained to meet legal obligations or resolve disputes.
6. Your Privacy Rights
You maintain control over your Paddle Out Morocco booking information through several rights. Request access to review what data we hold or ask for corrections to inaccuracies. European guests may invoke GDPR rights including data portability or erasure (where legally permissible). Object to specific processing like direct marketing through simple opt-out mechanisms. Submit requests via email with verification for security. We respond within 30 days, though complex cases may require additional time with proper notification. No fees apply unless requests are manifestly unfounded or excessive.
7. Cookie Usage
Our website employs cookies to optimize the Paddle Out Morocco booking experience. Essential cookies maintain your session during reservations, disappearing when you close the browser. Performance cookies anonymously track site usage patterns to improve navigation. Preference cookies remember language selections for return visits. Third-party cookies from services like Google Analytics help measure marketing effectiveness. You can manage preferences through browser settings, though disabling cookies may affect booking functionality. Our cookie banner provides granular control options without compromising core services.
8. Policy Updates
This privacy policy evolves to reflect operational changes and legal requirements. Significant modifications are highlighted on our website with clear revision dates. Active clients receive email notifications about updates affecting their Paddle Out Morocco booking data. We maintain version histories to document changes transparently. Your continued use of services after updates constitutes acceptance of revised terms, though we always handle existing data according to the policy version in effect during collection.
9. Contact Information
For privacy concerns regarding your Paddle Out Morocco booking, contact our Data Protection Officer at dpo@paddleout-morocco.com or +212 682-619422 (WhatsApp preferred). Include your booking reference for faster resolution. Formal requests require verification to prevent unauthorized access. We acknowledge all inquiries within 48 hours and resolve most matters within 30 days. For complex cases, we provide regular status updates until completion.