Privacy policy

Last updated: 11 October 2026

This page explains what personal data we collect on surfcamp-morocco.com and when you book or contact us, why we use it, who we share it with and what your rights are. We collect as little as we can.

Who is responsible

Surf Camp Morocco, Aourir, Taghazout, Agadir, Morocco. Email: [email protected]. Write to this address for any question about your data.

What we collect and why

When	What	Why
You book	Name, email, phone number, country, arrival date, number of travellers, the package and extras you choose, and any message you write	To manage your booking, take the deposit, prepare your stay, pick you up at the airport and stay in touch before you arrive (needed for our contract with you)
You start the booking form but do not finish it	What you typed in the form once you have entered a valid email address	So our team can contact you and help you finish your booking (our legitimate interest). The record is deleted as soon as you complete the booking, or after 30 days
You use the contact form	Name, email, phone number (optional) and your message	To answer you
You write to us on WhatsApp or by email	Your number or email address and your messages	To answer you and manage your booking
You visit the website	Technical data such as your IP address and browser, kept by our hosting and security providers	To deliver the website and protect it against attacks (legitimate interest)
You accept cookies	How you use the website (pages, clicks, the ad that brought you here)	To measure our website and our ads (your consent; see the cookie policy)

We also count how many visitors reach each step of the booking form. These are anonymous counters: no cookies, no IP address, no names or emails.

Payments

The deposit is paid through PayPal. PayPal processes your card or account details under its own privacy policy; we never see or store your card number. We receive the payment confirmation, the amount and the name and email of the payer.

Who we share data with

We never sell your data. We only share it with the services we need to run the camp and this website:

• PayPal (payments)
• Our web hosting provider and Cloudflare (website delivery and security)
• Our email provider (booking and contact emails)
• WhatsApp (Meta), if you write to us there
• Trustindex, which shows our Google reviews on the website; your browser loads the reviews from their servers, so they receive your IP address
• Google (Analytics and Ads), only if you accept cookies

Some of these services are based outside Morocco and the European Union, for example in the United States. They use their own safeguards for international transfers.

The map on our website is a picture stored on our own server, so loading it does not share anything with a map provider. The fonts are also stored on our server.

How long we keep it

• Bookings: as long as needed for your stay and afterwards for our accounts and legal obligations.
• Unfinished booking forms: until you finish the booking, or 30 days at most.
• Contact messages: as long as needed to answer you and follow up, then deleted.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, or withdraw your consent at any time (for cookies, use the “Cookie settings” link at the bottom of every page). Write to [email protected] and we will reply within one month.

If you are not happy with our answer, you can complain to the data protection authority in your country. In Morocco this is the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel); in the European Union, the authority of your country of residence.

Children

Bookings are made by adults. When a family books, the parent or guardian gives us the children’s details needed for the stay.

Changes

We may update this policy, for example when we add a new service. The date at the top shows the latest version.