Politique de confidentialité

1. Introduction

This Privacy Policy explains how Sabarat collects, uses, stores, shares, and protects personal information when you visit our website, create an account, submit a booking request, participate in an experience, contact customer support, file a complaint, submit a review, subscribe to communications, or otherwise use our services.

The terms “Sabarat,” “we,” “us,” and “our” refer to the operator of the Sabarat platform, based in Marrakech, Morocco.

We are committed to handling personal information fairly, lawfully, transparently, and only for legitimate purposes connected with our services.

This Privacy Policy should be read together with our Terms of Service and Refund and Cancellation Policy.

2. Scope

This Privacy Policy applies to personal information processed through:

• the Sabarat website and booking platform;
• customer accounts;
• booking and cancellation forms;
• booking-tracking features;
• customer-support and complaint channels;
• email, telephone, SMS, WhatsApp, and similar communications;
• reviews, photographs, and other customer submissions;
• newsletters and promotional communications;
• security, fraud-prevention, and analytics systems; and
• interactions with Operators connected with a booking.

It does not govern the independent privacy practices of third-party websites or services that you choose to use outside Sabarat.

3. Information we collect

Depending on how you use Sabarat, we may collect the following categories of personal information.

3.1 Identity and contact information

This may include:

• full name;
• email address;
• telephone or WhatsApp number;
• country or general location;
• preferred language;
• account username or identifier; and
• profile image.

3.2 Booking and participation information

This may include:

• booking reference;
• selected experience;
• requested date and time;
• pickup or meeting location;
• number of participants;
• participant names and ages;
• accommodation or pickup details;
• preferences and special requests;
• cancellation, rescheduling, and refund information;
• booking status and communication history; and
• complaints or support records.

3.3 Safety and eligibility information

Some activities require limited information needed to determine whether participation is safe and permitted.

This may include:

• age;
• weight or height;
• pregnancy-related eligibility information;
• mobility limitations;
• relevant health or physical restrictions;
• recent injuries or surgery;
• required guardian consent; and
• other information specifically requested for the selected experience.

Please do not provide medical or safety information that is not relevant to the experience.

Where such information concerns another participant, you confirm that you are authorized to provide it and that the participant has been informed of this Privacy Policy where appropriate.

3.4 Payment and transaction information

Where payment features are available, we may process or receive:

• payment status;
• amount;
• currency;
• transaction reference;
• payment method type;
• refund status;
• billing details; and
• fraud or chargeback indicators.

Sabarat does not need to store complete payment-card details where payment processing is handled through an authorized payment provider.

For cash payments made directly to an Operator, we may record the agreed amount, payment status, and related booking information.

3.5 Account and authentication information

This may include:

• login identifiers;
• encrypted or securely processed authentication credentials;
• account status;
• login history;
• account preferences; and
• security events.

3.6 Communications and support information

When you contact us, we may collect:

• the content of messages;
• attachments;
• call or communication metadata;
• complaint details;
• support history; and
• records of actions taken to resolve an issue.

3.7 Reviews and customer content

Where you submit a review or other content, we may collect:

• review text and rating;
• photographs;
• profile image;
• first name;
• country;
• booking verification information;
• feedback;
• complaints; and
• any other content you choose to provide.

Reviews may be translated and published as described in our Terms of Service.

3.8 Technical and usage information

When you use the website, we may automatically collect:

• IP address;
• device type;
• browser type;
• operating system;
• language and locale;
• approximate location derived from technical information;
• pages viewed;
• clicks and navigation events;
• referring page;
• timestamps;
• cookie or similar technology identifiers;
• error and diagnostic information; and
• security and fraud-prevention signals.

3.9 Marketing preferences

We may collect:

• newsletter subscription status;
• communication preferences;
• consent records;
• campaign interaction information; and
• unsubscribe requests.

4. How we collect information

We may collect information:

• directly from you;
• from the person making a booking on your behalf;
• through your account or booking activity;
• from an Operator involved in your booking;
• through website cookies and similar technologies;
• from communications and customer-support interactions;
• from payment or identity-verification processes;
• from publicly available sources where lawful and relevant; and
• from security, fraud-prevention, or technical service providers.

5. Why we use personal information

We use personal information only where reasonably necessary for legitimate and lawful purposes, including:

5.1 Providing booking services

We use information to:

• receive and assess booking requests;
• verify availability;
• confirm or reject bookings;
• coordinate with Operators;
• arrange pickup, meeting, or participation details;
• deliver booking communications;
• manage changes, cancellations, refunds, and rescheduling; and
• provide booking-tracking features.

5.2 Safety and eligibility

We may use relevant information to:

• verify listing requirements;
• help Operators assess whether a participant can safely take part;
• communicate restrictions or preparation instructions;
• respond to emergencies; and
• protect customers, Operators, and the public.

5.3 Customer support and complaints

We use information to:

• answer questions;
• investigate complaints;
• resolve disputes;
• verify booking history;
• communicate outcomes; and
• improve service quality.

5.4 Payments and accounting

Where payment features are available, we use information to:

• process or verify payments;
• issue refunds;
• detect duplicate or unauthorized transactions;
• manage chargebacks;
• maintain accounting records; and
• comply with financial or tax obligations.

5.5 Accounts and personalization

We use information to:

• create and manage accounts;
• authenticate users;
• remember language and preference settings;
• display relevant booking information; and
• prevent unauthorized access.

5.6 Security and fraud prevention

We may use information to:

• detect suspicious activity;
• prevent fraudulent bookings, attacks, scraping, impersonation, and abuse;
• protect accounts and systems;
• investigate incidents; and
• enforce our Terms of Service.

5.7 Reviews, content, and marketing

Subject to this Policy, our Terms, and applicable law, we may use submitted reviews, ratings, photographs, and profile information to:

• display verified customer feedback;
• translate reviews;
• improve listings;
• promote Sabarat and its experiences;
• publish social-media or marketing content; and
• identify fraudulent or abusive submissions.

5.8 Service improvement and analytics

We may use usage and diagnostic information to:

• understand how the website is used;
• improve design, performance, accessibility, and localization;
• identify errors;
• measure campaign performance;
• develop new features; and
• protect service reliability.

5.9 Legal and regulatory compliance

We may process information to:

• comply with applicable law;
• respond to lawful authority requests;
• establish, exercise, or defend legal claims;
• maintain required business records; and
• protect the rights, safety, and property of Sabarat, customers, Operators, and others.

6. Legal grounds and fairness

Sabarat processes personal information where the processing is necessary for one or more of the following:

• taking steps requested before confirming a booking;
• performing or administering a booking or service agreement;
• complying with legal obligations;
• protecting the vital interests or safety of a person;
• pursuing legitimate interests such as service operation, fraud prevention, security, complaint handling, and improvement, where those interests do not override the rights of the person concerned;
• obtaining and recording consent where consent is required; or
• another lawful ground available under applicable Moroccan law.

Where processing is based on consent, you may withdraw that consent for future processing. Withdrawal does not make earlier lawful processing invalid and may affect our ability to provide an optional feature.

7. Information required to provide the service

Some information is necessary to assess or administer a booking.

Where required information is not provided, Sabarat may be unable to:

• process the booking request;
• confirm availability;
• determine eligibility;
• communicate pickup or safety information;
• process a payment or refund; or
• investigate a complaint.

We aim to request only the information reasonably necessary for the relevant purpose.

8. Sharing personal information

We do not sell personal information.

We may share limited personal information only where reasonably necessary with the following categories of recipients.

8.1 Operators

We may share booking and participation information with the Operator assigned to deliver the experience.

This may include the customer’s name, telephone number, booking date and time, pickup details, participant count, language, special requests, and relevant safety or eligibility information.

Operators may use this information only for legitimate purposes connected with the booking, safety, service delivery, payment, or complaint handling.

8.2 Service providers

We may use specialist providers that support functions such as:

• website hosting and storage;
• communications;
• authentication;
• payment processing;
• fraud prevention;
• analytics;
• customer support;
• translation;
• security;
• database administration; and
• technical maintenance.

These providers may process information only as needed to perform their services and subject to appropriate contractual, confidentiality, and security obligations.

8.3 Professional advisers and authorities

We may share information with lawyers, accountants, insurers, auditors, regulators, law-enforcement bodies, courts, or public authorities where reasonably necessary and legally permitted or required.

8.4 Business transfers

If Sabarat is reorganized, incorporated, merged, acquired, financed, or transfers all or part of its business, relevant information may be disclosed to advisers, counterparties, or a successor, subject to confidentiality and applicable law.

A successor must continue to protect personal information in accordance with applicable legal requirements.

8.5 With your direction or consent

We may share information where you ask us to do so or provide valid consent.

9. International processing and transfers

Some technical or operational service providers may process information outside Morocco.

Where personal information is transferred or made accessible internationally, Sabarat will take reasonable steps to use lawful transfer mechanisms, contractual safeguards, access controls, and security measures required by applicable law.

Any notification, declaration, authorization, or other formality required for international processing or transfer will be handled in accordance with applicable Moroccan data-protection requirements.

10. Public information

Reviews and customer content may be visible publicly where you submit or authorize them for publication.

Public review information may include:

• first name;
• country;
• profile image;
• rating;
• review text;
• submitted photographs;
• experience name; and
• general travel context.

Do not include sensitive, confidential, or unnecessary personal information in a public review.

Sabarat may translate reviews and make minor formatting corrections without intentionally changing their meaning.

You may contact us to request removal or correction of published personal information, subject to applicable law, legitimate recordkeeping, and the rights of others.

11. Cookies and similar technologies

Sabarat may use cookies, local storage, pixels, and similar technologies to:

• keep the website functioning;
• maintain sessions and security;
• remember language or preferences;
• understand website use;
• diagnose errors;
• prevent abuse;
• measure performance; and
• support communications or marketing where permitted.

Where required, non-essential cookies will be used only after the appropriate choice or consent has been obtained.

You may manage available cookie choices through the website’s cookie settings and through your browser. Disabling some cookies may affect website functionality.

More detailed information may be provided in a separate Cookie Policy or cookie-preference panel.

12. Marketing communications

Sabarat may send promotional emails or messages only where permitted by law and consistent with the preferences or consent you have provided.

You may unsubscribe using the link provided in a marketing email or by contacting support@sabarat.com.

Unsubscribing from marketing does not stop essential operational communications concerning an active booking, account security, complaint, refund, or legal notice.

13. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

• administering bookings and refunds;
• handling complaints and disputes;
• preventing fraud and abuse;
• maintaining accounting and legal records;
• protecting safety and security;
• enforcing agreements; and
• complying with applicable legal obligations.

Retention periods vary according to the type of information and the reason it is held.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely restrict it, unless continued retention is required or permitted by law.

Some records may remain in encrypted backups for a limited period before routine deletion.

14. Security

Sabarat uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, misuse, or disclosure.

Measures may include:

• access controls;
• authentication safeguards;
• encryption in transit where appropriate;
• restricted administrative access;
• monitoring and logging;
• secure storage practices;
• backups;
• vendor controls;
• software maintenance; and
• incident-response procedures.

No website, electronic transmission, database, or storage system can be guaranteed to be completely secure.

You should protect your account credentials, use secure devices and networks, and notify us promptly if you suspect unauthorized access.

15. Personal-data incidents

Where Sabarat becomes aware of a personal-data incident, we will investigate and take reasonable steps to contain, assess, and remedy the incident.

Where notification to an authority or affected person is required by applicable law, Sabarat will provide the required notice within the applicable legal framework.

16. Your rights

Subject to applicable law and verification of identity, you may have the right to:

• receive information about the processing of your personal information;
• request access to personal information held about you;
• request correction or updating of inaccurate or incomplete information;
• request deletion, blocking, or restriction where legally available;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request that marketing communications stop;
• raise a complaint concerning the handling of personal information; and
• exercise other rights granted by applicable Moroccan law.

Some rights may be limited where information must be retained to comply with law, establish or defend legal claims, protect safety, prevent fraud, or complete an active booking or refund.

17. Exercising your rights

To submit a privacy request, contact:

Email: support@sabarat.com

Please include:

• your full name;
• the email address or telephone number associated with your account or booking;
• the type of request;
• relevant booking or account references; and
• enough information for us to locate the relevant records.

We may request reasonable proof of identity to prevent unauthorized disclosure or deletion.

We will respond within the period required by applicable law.

You may also contact the competent Moroccan data-protection authority where you believe your rights have not been respected.

18. Children and minors

Sabarat’s booking services are intended to be used by adults or by persons who otherwise have legal capacity to make a booking.

A booking involving a minor must be made or authorized by a parent or legal guardian.

We do not knowingly request unnecessary personal information directly from children.

Where we learn that a child’s information was provided without appropriate authority, we may delete or restrict it unless retention is required to protect safety, administer a valid booking, or comply with law.

19. Third-party links and services

The Sabarat website may contain links to or integrations with third-party services.

Those third parties may process information under their own privacy policies.

Sabarat is not responsible for an independent third party’s privacy practices, except where Sabarat remains legally responsible for selecting, instructing, or supervising a processor acting on its behalf.

You should review the relevant privacy information before submitting personal information directly to an external service.

20. Automated decisions

Sabarat may use automated rules or signals to help detect spam, fraud, attacks, suspicious bookings, or account abuse.

We do not intend to make a legally significant decision about a customer solely through automated processing without appropriate review where human review is required by law or reasonably appropriate.

A booking may still be reviewed manually before acceptance or rejection.

21. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, legal obligations, security practices, payment features, or data-processing activities.

The current version and effective date will be published on this page.

Where required by law, material changes will be communicated through the website, email, or another appropriate method.

22. Language

This Privacy Policy may be made available in several languages.

The English version is the controlling version where translated versions conflict, to the extent permitted by applicable law.

Translations do not remove or reduce rights granted by mandatory law.

23. Contact information

Questions, complaints, and personal-data requests may be sent to:

Sabarat Marrakech, Morocco Email: support@sabarat.com