Privacy Policy Kite Maroc – Surf, Kite & Wingfoil School Essaouira, Morocco
Effective Date: April 2026 Last updated: April 11, 2026
At Kite Maroc, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you interact with us — whether through our website, bookings, lessons, rentals, emails, WhatsApp, or in person at our school in Essaouira.
By using our services or providing your personal information to us, you consent to the practices described in this policy. We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data (and its implementing decree) and, where applicable, relevant international standards.
1. Information We Collect
We collect the following types of personal data:
- Contact and Identification Information: Name, email address, phone number (including WhatsApp), date of birth, nationality, and passport/ID details (where required for safety or legal reasons).
- Booking and Service-Related Data: Details of your lessons, courses, rentals, or packages; dates and times; payment information (processed securely via third-party providers where applicable); and any special requests or medical information you voluntarily provide.
- Health and Safety Information: Any medical conditions, allergies, injuries, or disabilities you disclose to us for safety purposes during activities (kitesurfing, surfing, wingfoiling). This is considered sensitive data and is processed only with your explicit consent or where necessary for your vital interests.
- Usage and Technical Data: If you visit our website, we may collect IP address, browser type, device information, and cookies (for basic functionality and analytics).
- Media and Marketing Content: Photos or videos taken during your sessions (with your consent where possible).
- Other: Any additional information you voluntarily provide when contacting us or filling out forms.
We only collect data that is relevant, adequate, and not excessive for the purposes outlined below.
2. How We Use Your Personal Data
We use your personal data for the following legitimate purposes:
- To process and manage your bookings, lessons, rentals, and payments.
- To provide and personalize our water sports services, including safety briefings and tailored instruction.
- To communicate with you (e.g., confirmations, reminders, weather updates, or important safety notices).
- To comply with legal obligations (e.g., safety regulations, tax requirements, or requests from authorities).
- To improve our services, conduct internal analysis, and maintain records.
- For marketing and promotional purposes (e.g., sending offers or newsletters), but only with your prior consent. You can opt out at any time.
- To protect the safety of our participants and staff.
- To defend our legal rights or respond to disputes.
We do not sell your personal data to third parties.
3. Legal Basis for Processing
Under Moroccan Law 09-08, we process your data based on:
- Your consent (where required, e.g., for marketing or certain sensitive data).
- The performance of a contract (your booking and service agreement).
- Compliance with legal obligations.
- Legitimate interests of Kite Maroc (e.g., operational needs, safety, and service improvement), provided these do not override your rights and freedoms.
4. Sharing Your Personal Data
We may share your personal data with:
- Trusted service providers (e.g., payment processors, hosting providers, or insurance partners) who act on our behalf and are bound by confidentiality.
- Local authorities or emergency services if required for safety, legal compliance, or in the event of an incident.
- Professional advisors (lawyers, accountants) when necessary.
We do not transfer your data outside Morocco unless necessary (e.g., for international payment processing) and only with appropriate safeguards or your consent, in line with Law 09-08 requirements.
5. Data Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include secure storage, access controls, and staff training. However, no system is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Moroccan law (e.g., accounting or safety records). Once no longer needed, we securely delete or anonymize it.
7. Your Rights
Under Moroccan data protection law, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Ask us to correct inaccurate or incomplete data.
- Right to Object: Object to the processing of your data in certain circumstances (e.g., for direct marketing).
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of prior processing).
- Right to Restriction or Erasure: Request restriction of processing or deletion of your data where permitted by law.
To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe as required by law. Note that we may need to verify your identity and that certain rights may be limited by legal obligations.
8. Cookies and Website Tracking
Our website may use essential cookies for functionality. Any non-essential cookies (e.g., analytics) will only be placed with your consent. You can manage cookie preferences through your browser settings.
9. Children’s Privacy
Our services are not directed at children under 18. If you are under 18, you must have parental or guardian consent to participate and provide any personal data.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with the new “Last updated” date. We encourage you to review it periodically.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Kite Maroc Essaouira, Morocco Email: [insert your email address] Phone/WhatsApp: [insert your phone number]
You may also contact the Moroccan data protection authority (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel – CNDP) if you believe your rights have been infringed.
Thank you for trusting Kite Maroc with your personal information. We are committed to handling it responsibly while delivering unforgettable experiences on the waves of Essaouira.
Safe rides, The Kite Maroc Team