Privacy Policy
update date: 04 September 2025
1) Who we are
MarHire (“MarHire,” “we,” “us,” “our”) is a Morocco-based travel platform (online travel agency) that helps you book car rentals, private drivers/transfers, boat rentals, and tours/activities with trusted local partners across Morocco.
Website: https://marhire.com
Email: info@marhire.com
Phone/WhatsApp: +212 660 745 055
Languages supported: EN, FR, ES
For the purposes of applicable data-protection laws (e.g., Morocco Law 09-08 (CNDP), EU GDPR/UK GDPR), MarHire is the data controller for personal data collected via our websites and official channels. When you book a service supplied by a local partner (e.g., a car rental agency, driver, boat owner, or activity provider), that partner also becomes an independent controller for data they receive directly from you or from us to fulfil your booking.
2) Scope
This policy explains how we collect, use, share, and protect personal data when you:
browse our sites or apps,
make an inquiry or booking,
communicate with us via email, phone, WhatsApp, or social media,
receive marketing from us,
or otherwise interact with MarHire.
3) Personal data we collect
Data you provide directly
Identification & contact: name, email, phone/WhatsApp, billing address.
Booking details: travel dates, pick-up/drop-off locations, flight numbers (for transfers), party size, add-ons.
Driver verification (when renting cars): driver’s licence details (number, issuing country, expiry), age/date of birth (where required by law/partner).
Payment details: we do not store full card numbers. Payments are processed by certified payment providers. We may store tokens/last 4 digits, transaction IDs, and status.
Support content: messages, attachments you choose to send (e.g., photos of documents).
Preferences: language, marketing preferences, service interests.
Data collected automatically
Device & usage: IP address, device type, browser, OS, pages viewed, referring URLs, time stamps, error logs.
Cookies & similar tech: identifiers to keep you logged in, remember preferences, measure performance, and support ads/analytics (see Cookies below).
Approximate location: derived from IP for language/currency and fraud prevention.
Data from third parties
Local partners (to confirm/fulfil your booking, handle changes/cancellations, post-service support).
Payment providers (fraud checks, payment confirmations).
Analytics/advertising partners (aggregated insights; no raw card data).
Social/log-in providers if you interact via those channels.
4) Why we use your data (purposes & legal bases)
Provide the services & manage bookings (contract): process enquiries, reservations, changes/cancellations, pick-up/drop-off coordination, send confirmations and essential updates.
Verify eligibility & safety (legal obligation/legitimate interests/contract): e.g., driver’s licence checks required by partners/insurers.
Payments & fraud prevention (contract/legitimate interests/legal obligation): process payments, prevent misuse or unlawful activity.
Customer support (contract/legitimate interests): respond via email/phone/WhatsApp in EN/FR/ES.
Personalize & improve (legitimate interests/consent where required): language, currency, UX, troubleshooting, analytics, A/B tests.
Marketing (consent/legitimate interests): newsletters, offers, retargeting where permitted; you can opt out anytime.
Legal & compliance (legal obligation): tax, accounting, responding to lawful requests, enforcing terms, resolving disputes.
5) Cookies, analytics & advertising
We use:
Strictly necessary cookies (security, session, checkout).
Functional & performance cookies (preferences, load balancing/CDN).
Analytics (e.g., aggregate usage via tools like Google Analytics).
Advertising/retargeting (e.g., Google Ads, Meta, TikTok) to measure campaign performance and show relevant offers.
You can manage cookies via your browser settings and (where implemented) our Cookie Settings panel. In some regions we honour Global Privacy Control (GPC) signals and local consent requirements.
6) Sharing your data
We share personal data only as needed:
Local partners/suppliers (car rental agencies, drivers, boat owners, activity providers) to deliver your booking.
Payment processors & banks (for secure transactions; we don’t store full card PANs).
Hosting, security & CDN (e.g., server/VPS providers, DDoS/WAF/CDN services such as Cloudflare).
Customer communications (email/SMS/WhatsApp tools to deliver confirmations and support).
Analytics & marketing platforms (aggregated/identifiers; subject to your consent and local law).
Professional advisers & authorities (auditors, legal counsel; compliance with lawful requests).
We do not sell your personal information. If we ever “sell or share” personal data as defined under CCPA/CPRA for cross-context behavioural advertising, you will have the right to opt-out.
7) International transfers
We operate with partners and processors that may be located outside your country (including the EEA/UK/US). Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms.
8) Data retention
We keep data only as long as necessary for the purposes set out above:
Bookings & invoices: typically 6 years (tax/accounting/claims).
Driver/ID checks: for the duration required to deliver the service and by law/insurers, then securely deleted or anonymized.
Support tickets: up to 3 years after closure (service quality/defence of claims).
Marketing data: until you unsubscribe or your consent is withdrawn (then we keep minimal suppression records).
Web logs/analytics: typically 12–24 months, then aggregated or anonymized.
Retention may be longer if required by law or to resolve disputes.
9) Security
We use reasonable technical and organizational measures to protect personal data, including TLS encryption in transit, access controls, logging, firewalling/WAF/CDN, and regular patching/monitoring. No system is 100% secure; please contact us immediately if you suspect unauthorized use of your account or data.
10) Your rights
Your rights depend on where you live, but may include:
Access to a copy of your personal data.
Rectification of inaccurate or incomplete data.
Erasure (“right to be forgotten”) in certain cases.
Restriction or objection to processing (e.g., direct marketing).
Portability of data you provided to us.
Withdraw consent at any time (does not affect past lawful processing).
Complain to a supervisory authority.
Morocco (Law 09-08 — CNDP): you may exercise rights of access, rectification, and opposition; you can contact the CNDP if you believe your rights are violated.
EU/UK (GDPR): includes rights listed above and complaint to your local authority or the ICO (UK).
California (CCPA/CPRA): right to know/access, correct, delete, and opt-out of selling/sharing; no discrimination for exercising your rights.
How to exercise: email info@marhire.com (subject: “Privacy Request”). We may need to verify your identity. If a local partner holds your data as their own controller, we may direct you to contact them as well.
11) Children’s privacy
Our services are not directed to children. We do not knowingly collect personal data from children under 16 in the EU/UK (or under 13 in the US). If you believe a child has provided data to us, contact info@marhire.com and we will take appropriate steps.
12) WhatsApp and other messaging apps
If you contact us via WhatsApp or similar apps, your phone number and message content will be processed by those platforms under their own terms. We use this channel only to coordinate enquiries/bookings and support. You can switch to email at any time.
13) Automated decision-making
We do not make decisions producing legal or similarly significant effects based solely on automated processing. We may use limited profiling for fraud prevention, risk scoring, or to present relevant offers. You can object to marketing profiling at any time.
14) Third-party links
Our site may include links to partner sites or social networks. We are not responsible for their privacy practices. Review their privacy policies before providing data.
15) Changes to this policy
We may update this policy from time to time to reflect changes in our practices or applicable laws. We will post the updated version with a new “Effective date.” Significant changes may be notified on-site or via email where appropriate.
16) How to contact us
If you have questions or wish to exercise your rights, contact:
Email: info@marhire.com
Phone/WhatsApp: +212 660 745 055