Last updated 8 August 2026.
Morocco Travel Vibe is an independent publication about travelling in Morocco, published at moroccotravelvibe.com. This page sets out what we collect, why we collect it, and what you can do about it. It describes what the site actually does, not a generic template.
We are the controller of the information described here, and you can reach us at any time through our contact form.
Which rules apply to you
People read this site from everywhere, so the law that protects you is the law where you are, not the law where we are. Rather than run different rules for different readers, we have written this page to the strictest standard we are subject to, the UK and EU GDPR, and applied it to everyone. The sections on your rights set out the extra protections that readers in California, Canada, Australia and Brazil have on top of that.
What we collect
- Contact form. If you write to us we receive your name, email address, subject and message. The message is emailed to us and also stored on this website so we can find it again later. It is not added to a mailing list and it is not sold.
- Analytics. We use Google Analytics 4 to see which pages are read, how people arrive, and roughly which country or city they are in. It is reported to us in aggregate, we do not use it to identify individuals, and visits by logged-in site staff are excluded from it.
- Security and delivery logs. Cloudflare sits in front of this site, and our web host runs it. Both record IP addresses, browser details and requested pages in order to serve pages quickly and block abuse.
What we do not collect matters just as much. Comments are switched off across this site. We run no newsletter and no mailing list. We ask you to create no account, we take no payment details, and we never ask about your health, religion, politics or anything else that counts as sensitive data.
Why we collect it, and on what legal basis
- To answer you. Contact form details, used to reply to your message and nothing else. Our basis is that you asked us to, and our legitimate interest in responding to readers.
- To decide what to write next. Analytics, used to see which guides earn their place. Where the law where you live requires consent before analytics cookies are set, including the EEA and the UK, that consent is the basis, and you can refuse or withdraw it as described below.
- To keep the site up and unattacked. Security and delivery logs, on the basis of our legitimate interest in a site that loads and does not get broken into.
- To meet legal obligations. Where a law or a valid legal order requires us to keep or hand over information.
Cookies
Google Analytics sets cookies that distinguish one visitor from another and group page views into a session. Cloudflare sets cookies used for security and performance. We do not currently set advertising cookies that build a profile of you across other websites.
You can block or delete cookies in your browser settings at any time. You can also opt out of Google Analytics entirely, on every site you visit, using Google’s official browser add-on at tools.google.com/dlpage/gaoptout. Blocking any of this does not stop you reading anything on this site, and nothing here is held back from people who refuse cookies.
When you first arrive, a consent banner asks whether you accept analytics and marketing cookies. Until you answer it, analytics and advertising storage are switched off and nothing beyond the cookies needed to serve the page is set. You can change or withdraw your answer at any time through the cookie settings on this site, and our Cookie Policy lists every cookie individually, with what it does and how long it lasts.
Affiliate links and advertising
Some links on this site earn us a commission if you book or buy through them, at no extra cost to you. Where a link is an affiliate link, it is disclosed on the page it appears on, near the link itself, not only here. Booking through one of them creates a contract between you and that company, and your data then sits with them under their own privacy policy, not ours.
We do not currently display advertising on this site. If we add it, the ad provider will set its own cookies, those cookies will only be set if you accept marketing cookies in the consent banner, and this page will be updated before the first advert appears.
Commission never decides what we recommend. No operator, riad, advertiser or affiliate partner can pay to change a published price, alter a safety warning, or see a page before it is published. Where a company we earn from is the wrong choice for you, the page says so.
Who we share information with
- Google, for analytics.
- Cloudflare, for delivery and security.
- Our web host, which stores the site and anything submitted to it.
- Our email provider, which carries contact form messages to us.
Each of these acts on our instructions and may only use the data to provide the service to us. We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not pass it to tour operators, riads or anyone else we write about. If a valid legal order compels us to disclose something, we will comply, and we will tell you unless we are forbidden from doing so.
Where your information goes
Google and Cloudflare are United States companies and process data on servers in several countries, including the United States. Both are certified under the EU-US Data Privacy Framework and its UK extension. Where a transfer is not covered by that framework, it relies on the standard contractual clauses approved by the European Commission, or the equivalent mechanism for your country.
How long we keep it
- Contact form messages are kept for as long as the correspondence is useful, and then deleted. Ask us to delete yours sooner and we will.
- Analytics data is deleted automatically at the end of the retention period configured in our Google Analytics property.
- Security and delivery logs are held by Cloudflare and our host under their own retention policies, which are measured in days and weeks rather than years.
Your rights
Wherever you live, you can ask us what personal data we hold about you, ask us to correct it, ask us to delete it, and ask for a copy of it. Ask through the contact form and we will action it. It costs nothing, and we will not treat you differently for asking. We may need to check that the request really comes from you before we act on it.
If you are in the United Kingdom, the EU, or the EEA
You have the right of access, rectification, erasure, restriction of processing, and data portability. You may object to processing carried out on the basis of our legitimate interests, and you may withdraw consent at any time without affecting anything done before you withdrew it. We answer within one month. You also have the right to complain to your national data protection authority, which in the United Kingdom is the Information Commissioner’s Office.
If you are in California or another US state with a privacy law
You have the right to know what personal information is collected and why, to have it deleted, to have it corrected, to opt out of its sale or its sharing for cross-context behavioural advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of them. We collect no sensitive personal information, and we neither sell nor share personal information, so those two opt-outs have nothing to act on. We answer within 45 days. The same applies if you are in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana or any other state with a comparable law, whether or not the thresholds in those laws would exempt a site this size.
If you are anywhere else
Readers in Canada under PIPEDA, in Australia under the Privacy Act, in Brazil under the LGPD, and in every other country with a data protection law, keep the rights that law gives them, including the right to complain to their own regulator. In practice we apply the list above to everyone, so you do not need to work out which regime covers you before you write to us.
Do not sell or share my personal information
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in California law. There is therefore nothing here to opt out of. If that ever changes, we will put an opt-out link in the footer of every page, we will honour Global Privacy Control signals sent by your browser, and we will say so on this page before it takes effect.
Children
This site is written for adults planning travel and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, tell us and we will delete it.
Keeping it safe
The whole site is served over HTTPS, sits behind Cloudflare, and administrative access is limited to the people who run it. No website is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data, we will notify the relevant regulator within 72 hours where the law requires it, and we will tell you directly where the risk to you is high.
Changes to this policy
If this policy changes we will update the date at the top. We do not make quiet changes.
Contact
Questions about anything on this page, and any request about your own data, can go through our contact form. Related pages: our Cookie Policy, our Disclaimer and our Terms and Conditions.