Privacy & trust
Privacy Policy
How information is handled when you browse Exotic Morocco, use planning tools, contact us or follow a link to our guide store.
Reviewed 29 September 2026
1. Scope & contact
This policy describes the Exotic Morocco editorial website and its connections to our established guide store. Exotic Morocco is an independent travel and cultural platform. For a privacy question or request, use Contact and identify it as a privacy enquiry. Do not include sensitive information unless it is necessary for the request.
The guide store, payment services, embedded maps and social platforms also have their own privacy information. Their involvement depends on what you choose to open or use. This page distinguishes information handled by the editorial website from services reached through it.
2. Browsing & hosting
Pages, images and other files are delivered through Cloudflare. Delivering and protecting a website involves technical request information such as an IP address, requested URL, browser or device information, request time and network or security signals. The hosting provider processes relevant information for delivery, reliability, security and abuse prevention.
The current editorial pages do not contain a first-party analytics tracker, advertising pixel, newsletter signup or visitor account system. That does not mean browsing is anonymous to hosting networks or embedded third parties. See Cloudflare’s Privacy Policy for its own processing.
3. Search & planning tools
Site Search compares what you type with a site index in your browser. The current Search tool does not send those typed queries to a search service or save a search history. Following a result loads the selected page in the usual way.
Plan checklists store checkbox choices locally in your browser under a page-specific key beginning em-plan-checklist:. The saved values record selected or unselected items, not an account profile. They remain until overwritten or removed through your browser’s website-data controls. Reset clears the selections but leaves an unticked saved checklist. The Cookie Policy explains this storage in more detail.
4. Messages & customer support
The contact link opens the existing Payhip-powered store contact form. It asks for a name, email address and message. A purchase enquiry may also need a product name, order reference and checkout email. This information is used to understand and respond to the enquiry, check an order where necessary, address a correction or resolve a rights request.
Please do not send payment-card details, passwords or unrelated sensitive information. Form protection and service providers may process technical information to prevent spam and abuse. The editorial site itself has no separate message-submission backend.
5. Purchases & payment services
Guide purchases take place through the linked guide store. Checkout and delivery require order and contact information, and the payment provider handles payment details. Available payment methods and any associated providers are shown during checkout. The editorial site does not collect card numbers in its own pages.
Order information may be used to deliver the purchased file, provide support, handle refunds, prevent fraud and satisfy applicable accounting or legal obligations. Read the checkout information and Payhip’s Privacy Policy before purchasing. Do not treat the editorial Search or planning checklist as a purchase record.
6. Maps, external links & social platforms
Some destination and region pages embed Google Maps. Loading such a map connects your browser to Google, which can receive technical information including your IP address and browser information and may read or set cookies according to its service and your settings. The site currently does not place these embeds behind a separate consent control.
Ordinary links to Payhip, social profiles, venues or other websites take you to their services when followed. Those sites may have additional cookies, accounts, analytics and privacy practices. Read Google’s Privacy Policy and the privacy information of any external service you use.
7. Purposes, legal grounds & sharing
Where data-protection law applies, responding to an enquiry or arranging a purchase may be necessary to take steps you request or perform a contract. Security, reliable delivery and handling ordinary correspondence may involve legitimate interests, subject to your rights. Accounting and other required records may be kept to meet legal obligations. Where consent is required for a particular use, that use needs an appropriate consent basis; this policy alone is not consent.
Information is shared with service providers where needed for the relevant function, such as hosting, contact handling, checkout and payment, and where disclosure is legally required. The current editorial implementation does not include advertising pixels or a system for selling visitor profiles. This does not replace the separate responsibilities of external platforms.
8. Retention, security & international processing
Information should be kept for the purpose for which it is needed, including responding to an enquiry, fulfilling an order, resolving a dispute or meeting a legal recordkeeping obligation. The appropriate period depends on the record and applicable obligations; no single fixed period is promised for all messages, orders or provider logs.
Browser checklist data has no automatic expiry in the current implementation. Provider-operated services have their own retention and security arrangements. Services may process information outside your country, including through international infrastructure, under the safeguards applicable to them. No website or transmission can be guaranteed completely secure; avoid sending unnecessary sensitive data.
9. Your choices & rights
Depending on your location and the applicable law, you may have rights to access, correct, erase or restrict use of personal information, object to certain processing, receive portable data or withdraw consent where processing relies on it. Rights have conditions and exceptions, for example where a record must legally be retained. Withdrawing consent does not invalidate earlier lawful processing.
Use Contact to explain your request and the information or interaction concerned. We may need proportionate information to establish that a request relates to you. You can also raise concerns with the competent data-protection authority. The European Commission’s information for individuals explains EU rights.
10. Changes to this policy
This page may be updated when the platform or its integrations change. The review date identifies this version. A new feature should be assessed on its actual operation; this policy does not imply that future analytics, newsletters, accounts or contact systems already exist. For related browser controls, see the Cookie Policy.