Privacy Policy

Last Updated: October 26, 2026

Destination.ma ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.destination.ma, in accordance with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data.

1. PUBLIC DIRECTORY DATA VS. PRIVATE USER DATA

We process two categories of data on our platform:

• Public Directory Data: We index public business information (names, publicly available phone numbers, business addresses, and operating categories) to compile an informational travel and service directory for consumers. This data is collected from public sources and is handled under fair-use information parameters.
• Private User Data: This includes personal metadata, customer identity documents, checkout information, and traveler data captured during transactions, which is heavily protected, encrypted, and isolated.

2. THE RIGHT TO ERASURE & DELETION

In compliance with Law No. 09-08, any business owner whose public data is displayed in our unclaimed directory index retains the absolute right to request modification or permanent erasure of their profile. Removal requests are handled free of charge by contacting our data protection desk.

3. PARTNER ONBOARDING RECORDS

When a business representative utilizes our "Claim Listing" mechanism, we collect strict corporate identification records (including Trade Registry certificates - Registre du Commerce, Common Identifier of Enterprise - ICE, and corporate manager identity proofs). This data is ingested solely to verify legitimate business ownership and protect against platform fraud.

4. FINANCIAL & SYSTEM LOGS (LAW 53-05)

In compliance with Moroccan Law No. 53-05 relating to the electronic exchange of legal data, all system logs, transaction history, click-wrap executions, and billing parameters (including automated Monday or monthly payouts and 7-day commission invoices) are securely archived as immutable digital evidence.

5. DATA CONTROLLER

Destination.ma by AbodyStudio Sarl, Tangier, which runs Destination.ma, is the controller of the data described in this policy. Processing is carried out in accordance with Moroccan Law No. 09-08 and with the decisions of the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).

6. WHAT WE COLLECT

• Account: first and last name, e-mail address, phone number, display language and currency, hashed password.
• Bookings: the Service / Offer booked, dates, number of travellers, special requests, amount paid, booking status.
• Payment: the transaction reference and status returned by the payment provider. We never store your full card number.
• Partners: company name, legal identifiers (ICE, IF, RC), bank details used to pay out earnings, and the documents sent to verify the business.
• Acceptance of our Terms: date and time, IP address and browser, kept as proof under Law No. 53-05.
• Technical: IP address, device and browser type, pages viewed — for security and audience measurement.

7. WHY WE USE IT

1. To deliver the booking: pass the Partner the details it needs to welcome you.
2. To collect and invoice: process payment, issue invoices, pay Partners.
3. To keep you informed: confirmations, pre-arrival reminders, changes, refunds.
4. To protect the platform: fraud prevention, access logs, moderation of listings and reviews.
5. To improve the service: aggregated statistics, never personally identifying.
6. Marketing: only with your explicit consent, which you can withdraw from any e-mail.

8. WHO WE SHARE IT WITH

• The Partner of the booking concerned, limited to what it needs to host you.
• The payment provider (CMI for Moroccan cards, PayPal for international payments).
• Technical providers for hosting and e-mail delivery, bound by confidentiality.
• The competent authorities, on lawful request.

We do not sell personal data.

9. HOW LONG WE KEEP IT

• Active account: for as long as the account exists.
• Bookings and invoices: 10 years (accounting obligation).
• Technical logs: 12 months.
• Marketing contacts: 3 years after the last contact.

10. YOUR RIGHTS

You have the right to access, correct, object to and delete your data. Write to [email protected] quoting the e-mail address of your account; we answer within 30 days. You may also refer the matter to the CNDP, Morocco's data-protection authority.

11. COOKIES

We use strictly necessary cookies (session, security, language and currency preference). Analytics cookies are only set after you agree and can be refused without losing any functionality.

12. CONTACT US

If you have any questions or wish to exercise your data rights, please contact our data protection officer at [email protected].