Privacy Policy
HAYYA MOROCCO LTD
Company Registration Number: 17472452
Registered in: England and Wales, United Kingdom
Last Updated: 9 October 2026
1. Introduction
Welcome to Hayya Morocco.
Understanding our Privacy Policy is essential as it outlines how we handle your personal data and your rights regarding it.
At Hayya Morocco, we respect your privacy and recognise the importance of protecting personal information when you explore, plan, and book travel experiences in Morocco.
This Privacy Policy is crucial for ensuring transparency and trust, detailing the steps we take to protect your information.
Our Privacy Policy also informs you about your rights under data protection laws.
It is essential to read our Privacy Policy to understand how we protect your data.
The Privacy Policy will be updated periodically, so please review it regularly for any changes.
By using our services, you agree to the terms outlined in our Privacy Policy.
This Privacy Policy explains how HAYYA MOROCCO LTD collects, uses, shares, stores, and protects personal information through https://hayyamorocco.com and its associated booking and communication services.
Our services include individual activities, cultural experiences, outdoor adventures, multi-day tours, personalised itineraries, and optional travel arrangements such as accommodation, transportation, guiding, and meals.
We encourage you to contact us if you have questions about our Privacy Policy.
We process personal information in accordance with applicable data protection legislation, including the UK GDPR and the UK Data Protection Act 2018, as amended. Moroccan Law No. 09-08 and other applicable privacy laws may also apply to relevant activities.
Our Privacy Policy governs the processing of your personal information.
2. Who Is Responsible for Your Personal Data?
For the processing activities described in this policy, HAYYA MOROCCO LTD generally acts as the data controller, meaning that it determines why and how personal information is processed.
Company: HAYYA MOROCCO LTD
Registration Number: 17472452
Place of Registration: England and Wales, United Kingdom
Registered Office: [Insert verified UK registered office address]
Email: contact@hayyamorocco.com
Telephone / WhatsApp: +212 623-671750
Website: https://hayyamorocco.com
Some service providers and payment partners may act as independent controllers for activities they manage under their own legal obligations.
3. Personal Information We Collect
Depending on how you interact with Hayya Morocco, we may collect:
A. Contact and Identity Information
- Full name.
- Email address.
- Telephone number.
- Country of residence.
- Contact preferences.
- Billing details where required.
B. Travel and Booking Information
- Selected experiences and tours.
- Travel dates and preferred times.
- Number of adult and child participants.
- Booking references.
- Meeting or pickup arrangements.
- Accommodation and transport requirements.
- Requests for private guides or meals.
- Additional travel preferences and special requests.
- Booking changes, cancellations, and customer communications.
C. Payment and Transaction Information
We use Stripe to process online payments.
Depending on the payment integration, we may receive transaction details such as the payment amount, currency, payment status, transaction reference, payment method type, and limited card information such as its last four digits.
Stripe handles payment information according to its own applicable processing arrangements and privacy practices.
Customers should not send full payment card details or security codes through email or WhatsApp.
D. Account Information
If you create an account, we may process your login details, account preferences, booking history, and information needed to manage access.
Passwords should be handled through the website’s authentication systems rather than shared with our staff.
E. Technical and Usage Information
When you use our website, technical information may be collected, including:
- IP address.
- Browser and device characteristics.
- Website access and security logs.
- Session information.
- Pages viewed and website interactions.
- Cookie and consent preferences where relevant.
The exact information depends on the website features and third-party tools enabled.
F. Additional Information Needed for Particular Activities
Certain activities may require information about participation requirements, accessibility needs, or other practical arrangements.
We request such information only where relevant and appropriate to the selected service. Any processing of sensitive personal information must have an appropriate legal basis and additional safeguards where required.
4. How We Collect Information
We collect personal information when you:
- Complete a booking or enquiry form.
- Request a personalised itinerary.
- Create or use an account.
- Contact us through email, telephone, or WhatsApp.
- Request additional accommodation, transport, guiding, or meals.
- Make a payment or request a refund.
- Communicate with our support team.
- Visit or interact with our website.
We may also receive necessary booking or payment information from service providers, payment processors, or other partners involved in delivering the services you request.
5. Why We Use Personal Information
We process information for the following purposes:
A. Managing Bookings and Travel Services
To receive booking requests, check availability, confirm reservations, coordinate the selected activities, and provide the agreed services.
Legal basis: Performance of a contract or steps requested before entering into a contract.
B. Processing Payments
To arrange payments, deposits, invoices, balances, refunds, payment confirmations, and transaction reconciliation.
Legal basis: Contractual necessity, applicable legal obligations, and legitimate interests where appropriate, including fraud prevention.
C. Customer Communication
To respond to enquiries, send booking information, discuss optional services, arrange pickup details, and communicate important itinerary changes.
Legal basis: Contractual necessity or legitimate interests, depending on the communication.
D. Legal and Financial Compliance
To meet applicable accounting, tax, consumer-protection, regulatory, and recordkeeping obligations.
Legal basis: Compliance with legal obligations.
E. Website Security and Service Improvement
To protect the website, investigate technical problems, maintain service availability, prevent fraud, and improve the booking experience.
Legal basis: Legitimate interests, subject to applicable safeguards, or another appropriate legal basis.
F. Marketing and Promotional Communications
Where permitted by law, we may communicate news, travel inspiration, promotions, or other marketing information.
We use consent where required. In limited circumstances, other permitted arrangements, such as the applicable existing-customer marketing exception, may be available.
Customers can unsubscribe or object to direct marketing at any time.
G. Analytics and Advertising
Where enabled and lawfully configured, we may use analytics or advertising technologies to understand website usage and evaluate advertising campaigns.
Non-essential tracking technologies will be subject to the applicable consent requirements.
6. Individual Experiences and Additional Services
When a customer books an individual experience, the booking may involve a deposit or full payment.
During the process, the customer may also request accommodation, transport, private guiding, or meals.
If additional services are requested, we may use the customer’s booking and contact information to prepare a quotation, contact suitable service providers, and communicate the available arrangements.
The customer may receive a separate invoice or secure payment link after accepting the proposed services.
Only information reasonably necessary to arrange the requested services should be shared with relevant partners.
7. Customised Itineraries and Multi-Day Tours
When a customer uses Design Your Experience, we process information about the selected activities, travel dates, participants, requested services, and preferences.
This information helps us prepare an appropriate travel proposal and quotation.
For multi-day tours, we may share relevant participant and travel-arrangement information with accommodation providers, transport operators, guides, activity providers, and other partners necessary to deliver the confirmed itinerary.
Different service providers may have their own legal responsibilities regarding the personal information they receive.
8. Stripe and Payment Information
Hayya Morocco uses Stripe for online payment processing.
Stripe may process information needed to authenticate transactions, facilitate payments, prevent fraud, manage disputes, and fulfil applicable regulatory obligations.
Depending on the processing activity, Stripe may act as a processor or an independent controller.
For further information, please consult:
We use transaction information received through the payment arrangements for booking administration, financial records, refunds, customer support, and applicable legal obligations.
9. Sharing Personal Information
We may share necessary personal information with:
- Local activity and experience providers.
- Accommodation providers.
- Transport operators and private guides.
- Suppliers providing requested meals or other travel services.
- Stripe and other relevant financial institutions.
- Website hosting, technical support, email, and communication service providers.
- Professional advisers and authorised accounting providers.
- Public authorities where disclosure is legally required.
We aim to limit shared information to what is reasonably necessary for the relevant purpose.
We do not sell customer booking information as a commercial contact list.
10. International Data Transfers
Hayya Morocco is registered in the United Kingdom and arranges travel services delivered in Morocco.
Personal information may need to be accessed or transferred between the United Kingdom, Morocco, and locations where relevant technology or service providers operate.
Where international data transfer restrictions apply, we will identify an appropriate legal transfer mechanism and implement the safeguards required by the applicable legislation.
Depending on the transfer, this may involve recognised adequacy arrangements, appropriate contractual safeguards, or another permitted mechanism.
Additional information about relevant transfer safeguards may be requested using our contact details.
11. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy or to meet applicable legal obligations.
Retention depends on the type of information and may be determined by:
- The duration of a booking or customer relationship.
- The need to provide travel and customer support.
- Applicable accounting and tax obligations.
- Payment and dispute-resolution requirements.
- Security and fraud-prevention needs.
- Legal claims or regulatory obligations.
When information is no longer required, it should be deleted, anonymised, or otherwise handled securely according to the applicable retention process.
We adhere to the principles of our Privacy Policy when handling your data.
Understanding our Privacy Policy is vital for ensuring compliance with data protection regulations.
Different categories of information may have different retention periods.
12. Your Privacy Rights
Depending on the law applicable to your personal information, you may have rights to:
Your rights under our Privacy Policy include the right to access and delete your data.
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request erasure where applicable.
- Request restriction of processing in certain circumstances.
- Object to certain processing activities.
- Obtain or transfer eligible personal information.
- Withdraw consent where consent is the legal basis.
- Challenge certain decisions based solely on automated processing where applicable.
For more information, please refer to our detailed Privacy Policy.
You have the right to object to processing of your personal data for direct marketing at any time.
Please ensure you are familiar with our Privacy Policy when engaging with our services.
Not every right applies in every circumstance. Some information may need to be retained to satisfy applicable legal obligations.
To exercise your rights, please contact contact@hayyamorocco.com.
We may request reasonable information to verify identity before disclosing or changing personal records.
13. Privacy Complaints
If you have a concern about the handling of your personal information, you can submit a complaint to:
We will acknowledge a data protection complaint within the period required by applicable law, investigate it appropriately, and communicate the outcome.
You may also have the right to complain to a competent data protection authority.
In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO):
For processing subject to Moroccan data protection law, the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) may be relevant:
14. Marketing Choices
Booking and service-related messages are different from promotional marketing messages.
We may need to contact customers about confirmed bookings, payments, schedule changes, or requested services regardless of whether they subscribe to marketing.
For promotional messages, we will apply the relevant marketing and privacy rules, including consent and opt-out requirements where applicable.
Our Privacy Policy is designed to protect your rights and personal data.
Customers may request to stop promotional messages through the unsubscribe facility provided or by contacting us.
15. Cookies and Tracking Technologies
Our website may use cookies and similar technologies for booking sessions, account functionality, website security, payment processing, analytics, and advertising where enabled.
Some technologies are necessary for services requested by the user. Others may require consent.
Please review our Cookie Policy for information about categories of technologies and cookie choices.
A dedicated cookie-preference interface will be implemented as part of our website privacy controls. Until it is operational, non-essential tracking must be managed in accordance with applicable consent requirements.
16. Children’s Personal Information
Travel bookings may include children participating alongside their parents or guardians.
We may process the limited participant information necessary to organise an age-appropriate booking and meet relevant safety or contractual requirements.
We do not intentionally request unnecessary personal information about children.
Where parental authorisation or additional protection is required by applicable law, the relevant requirements must be followed.
17. Data Security
We recognise the importance of protecting personal information against unauthorised access, misuse, alteration, disclosure, or loss.
Our security arrangements should be appropriate to the risks associated with the information and the services involved.
These arrangements may include technical, organisational, contractual, and administrative controls, depending on the system and processing activity.
No internet-based service can guarantee absolute security.
More information about our data-handling approach is available in our Data Protection statement.
18. External Websites and Services
Our website may contain links to websites or services operated by third parties.
Those third parties may have their own privacy notices and data-handling practices.
We encourage customers to review the relevant notices when using external services.
19. Updates to This Privacy Policy
We may update this policy when our services, legal obligations, technologies, or personal-data processing activities change.
The revised version will be published on this page with an updated date.
Where required, we will provide additional notice or obtain consent before introducing new processing activities.
20. Contact Us
HAYYA MOROCCO LTD
Company Registration Number: 17472452
Registered in England and Wales, United Kingdom
Email: contact@hayyamorocco.com
Telephone / WhatsApp: +212 623-671750
Website: https://hayyamorocco.com
Changes to our Privacy Policy will be communicated to users proactively.
Engagement with our services indicates agreement with our Privacy Policy.
Our Privacy Policy outlines how we process personal data in compliance with legal standards.
Understanding the implications of our Privacy Policy is essential for all users.
The Privacy Policy is pivotal in safeguarding user privacy and data integrity.
Users must agree to our Privacy Policy before using our services.
The Privacy Policy serves as a guideline for the ethical handling of personal data.
Regular updates to our Privacy Policy will reflect changes in data handling practices.
Your engagement is understood as acceptance of our Privacy Policy terms.
Users should regularly review our Privacy Policy to stay informed.
If you have any questions regarding our Privacy Policy, please reach out.
We value transparency as outlined in our Privacy Policy.
By using our services, you acknowledge that you have read our Privacy Policy.
Our Privacy Policy is designed to ensure user rights are respected and upheld.
For a clear understanding, users should refer to the Privacy Policy before proceeding.
In case of concerns, users can refer to our Privacy Policy for guidance.