Privacy Policy

1. Introduction

Welcome to viajarconlosnomadas ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vipmarrakehtrips.com and use our travel booking services.

By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Booking Information

When you book a tour with us, we collect:

• First name and last name
• Email address
• Phone number
• Country of residence
• Travel dates
• Number of travelers
• Tour type preference (group or private)
• Special requests (optional)

2.2 Technical Information

• Browser and device information
• Website usage analytics
• Cookies for website functionality

3. How We Use Your Information

We use your information to:

• Process and confirm your tour bookings
• Send booking confirmations via email
• Provide customer support
• Improve our website and services
• Comply with legal requirements

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To fulfill our booking agreement with you
• Legitimate Interest: To improve our services and prevent fraud
• Consent: For marketing communications and cookies
• Legal Obligation: To comply with tax and travel regulations

5. Data Sharing and Third-Party Services

5.1 Service Providers

We use the following services to operate our website:

• Convex - Database hosting for bookings
• Clerk - User authentication
• Resend - Email delivery for confirmations
• UploadThing - File and image hosting

5.2 Legal Requirements

We may disclose your information when required by law or to protect our rights and ensure customer safety.

6. Data Security

We implement appropriate security measures to protect your personal information, including secure hosting and encrypted data transmission.

7. Data Retention

We retain your booking information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time.

8. Your Rights (GDPR & Privacy Laws)

You have the right to:

• Access: Get a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Restriction: Limit how we use your data
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: For marketing communications
• Lodge Complaints: With your local data protection authority

9. Data Security

We implement appropriate security measures including:

• SSL encryption for all data transmission
• Secure database hosting with Convex
• Regular security audits and updates
• Staff training on data protection
• Limited access to personal information
• Secure payment processing

9. Contact Information

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.