Privacy Policy
Your information deserves the same care as your journey. Here is how this website handles personal details and privacy choices.
Who is responsible
The controller is the legal business operating VIP Luxe Travel, to be identified in the editable business details below. Contact the business through the private enquiry page and mark your message as a privacy request until a dedicated privacy contact is confirmed.
Information collected
Enquiries collect your name, email, optional telephone, preferred date, guest count, travel style, budget and message. Newsletter subscriptions collect email and consent. A later booking may require traveler identities, necessary travel documents and service requirements through a separately agreed secure channel. Do not submit sensitive documents in the general form.
Purposes and legal grounds
We use enquiry details to respond and take pre-contractual steps you request. Confirmed booking information is used to perform the agreed services and meet applicable legal duties. Where relevant law permits, proportionate security and service administration may rely on legitimate interests. Optional marketing and non-essential analytics require separate consent where applicable; refusing them does not prevent an enquiry.
Forms and newsletters
Submitting an enquiry stores your details for a personal response; it does not reserve a trip. The newsletter is optional and uses separate consent. You may withdraw newsletter consent or request changes through the enquiry page. No email delivery service is enabled in this source release unless the business later configures one.
Payments and providers
This website does not collect card numbers or process a payment. If a payment provider is introduced, its identity, privacy information and relevant sharing must be communicated before use. Hotels, guides, transport operators and hosting/database providers receive only information needed for their role, under appropriate arrangements. The final provider list and hosting locations must be completed by the business.
Cookies, analytics and consent
Essential functionality is available without optional analytics. Your privacy preference may be stored locally in your browser. If a valid Google Analytics identifier is configured, the analytics script loads only after you accept optional measurement. Enquiry success and meaningful CTA events contain page and journey context, never form names, emails, phone numbers or messages. Change your choice using Privacy choices in the footer.
International transfers
Moroccan Law 09-08 and CNDP procedures must be assessed for the actual processing and any transfers abroad. If GDPR applies to the business’s activities, relevant territorial, transparency and transfer requirements also need assessment. Provider locations, the applicable transfer mechanism and any required CNDP formalities must be verified before production use. This policy does not assert that a filing, authorisation or compliance review has been completed.
Retention and deletion
Keep enquiries only for the period needed to respond and manage the relationship, and booking records for the applicable contractual and legal requirements. Newsletter data is retained while consent remains valid unless a shorter period is adopted. Exact retention periods, deletion routines and backup expiry must be set in the business details and operational procedure; this release does not silently invent a legal retention period.
Security and your rights
We use server-side validation, restricted database access and proportionate safeguards, but no system can guarantee absolute security. Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection and withdraw consent without affecting prior lawful processing. Identity checks should be proportionate. You may contact the CNDP in Morocco or the competent supervisory authority where GDPR applies.
Changes and privacy requests
This policy reflects the features delivered with the website. The business must update it when providers, analytics, payment flows or processing purposes change. Use the enquiry page for a privacy request, quoting only the information needed to identify your record; do not send identity documents until a secure method has been agreed.
MoroccoSpeak with us on WhatsApp
Business details to confirm
These fields must be completed by the business before booking contracts are issued.
- Legal business name
- [To be completed by the business]
- Registered address
- Av. Mohamed El Fassi, Agadir 80000
- Business and privacy contact
- info@vipluxetravel.com
- Hosting, processors and transfer safeguards
- [To be completed by the business]
- Retention periods and deletion procedure
- [To be completed by the business]