Privacy Policy

At The Marrakech Pass, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our website and services.

Personal Information

When you purchase a Marrakech Pass or create an account, we collect:

• Full name and email address
• Phone number (optional)
• Billing address
• Payment information (processed securely by our payment provider)
• Pass activation date and preferences

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website or source
• Cookies and similar tracking technologies

We use your personal information to:

• Process your pass purchases and deliver digital passes
• Provide customer support and respond to inquiries
• Send order confirmations, receipts, and important updates
• Improve our website, services, and user experience
• Prevent fraud and enhance security
• Send marketing communications (with your consent)
• Comply with legal obligations

We use cookies and similar technologies to:

• Essential Cookies: Required for website functionality (shopping cart, login, etc.)
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track ad performance and personalize marketing (with consent)

You can control cookies through your browser settings, though disabling certain cookies may affect website functionality.

We work with trusted third-party service providers:

• Payment Processors: Stripe, PayPal for secure payment processing
• Email Service: For transactional and marketing emails
• Analytics: Google Analytics for website performance
• Authentication: Clerk for secure user authentication
• Hosting: Vercel for website hosting and CDN services

These providers have access only to information necessary to perform their functions and are bound by confidentiality agreements.

We implement industry-standard security measures:

• SSL/TLS encryption for all data transmission
• PCI DSS compliance for payment processing
• Secure servers with regular security audits
• Access controls and authentication protocols
• Regular backups and disaster recovery plans

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Under GDPR and applicable privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (with certain exceptions)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications anytime

To exercise these rights, contact us at privacy@marrakechpass.com

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account data: Until you request deletion or account closure
• Purchase records: 7 years for tax and legal compliance
• Marketing preferences: Until you unsubscribe
• Website analytics: 26 months (Google Analytics default)

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be notified via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.