Privacy
policy

Atlas&Ocean, based in Marrakech, Morocco. Enquiries are handled personally by Zakaria Basraoui, who is also the person to contact about anything on this page: info.atlasandocean@gmail.com.

⚑Registered entity name and address of the data controller to be published

There is no Google Analytics, no Tag Manager, no Meta pixel, no heatmap or session-recording tool, and no advertising or retargeting code anywhere on this site. We do not profile you, we do not build an audience from you, and we sell nothing to anyone. The site sets no cookies of its own, which is why you have not been asked to accept any.

Two consequences worth stating: we genuinely cannot tell you what you looked at before you wrote to us, and we have no idea how many people read any given page.

• The enquiry form. Your name, email address, which trip you are asking about, rough dates, how many people, and whatever you write in the notes field.
• Messages you send. WhatsApp messages and emails, including anything you attach or tell us in them.
• Health and dietary information — only what you choose to tell us about fitness, altitude history, allergies, medication or dietary needs, because we need it to place you safely in a group and to feed you correctly. This is sensitive information and we treat it as such: it goes to the guide who needs it and nowhere else.
• Booking and payment records once you book — what you paid, when, and for which departure. We do not see or store your card number; that stays with the payment provider or your bank.
• Server logs. Our hosting provider records the IP address, timestamp and browser user-agent of requests to the site, to deliver pages and to defend against abuse. We do not use these to identify visitors.

To answer you

Replying to an enquiry and agreeing dates. Basis: your request, and the steps leading to a contract.

To run the trip

Booking accommodation, briefing your guide, arranging transport and food. Basis: performing our contract with you.

To keep you safe

Passing relevant health information to the guide leading your summit day, and using it in an emergency. Basis: your explicit consent, and vital interests where someone is at risk.

To keep records

Accounting, tax and insurance records for bookings taken. Basis: our legal obligations.

• Your guide, and where relevant the cook and driver — name, group, and any health or dietary detail they need to do their job safely.
• The gîte in Aremd and the Toubkal refuge — the names and number of people staying, which is what they need to hold beds.
• WhatsApp, if you message us there. Those messages pass through Meta’s service under Meta’s own privacy terms, not ours. Email us instead if you would rather they did not.
• Formspree, the service that carries the enquiry form to our inbox. It receives what you typed into the form and holds a copy in our account; it processes it on our instructions and for nothing else.
• Our hosting and email providers, who process data on our instructions in order to serve this site and carry our mail.
• Nobody else. We do not sell, rent or share your details with advertisers, data brokers, or other tour operators.

We are based in Morocco and the trips happen in Morocco, so if you write to us from the European Union or the United Kingdom your details are transferred outside it — that is unavoidable when the mountain and the guide are here. We keep those transfers to what is needed to run your trip, and we require anyone handling your details on our behalf to protect them to the standard set out in this policy.

One more hop worth naming: Formspree, which carries the enquiry form, is a United States company, so a form submission passes through the US on its way to us. Writing to us by email instead avoids the Formspree processing step.

Enquiries that go nowhere

Deleted within 12 months of the last message, including the copy held in the form service.

Health & dietary detail

Deleted within 3 months of your trip finishing. It has no use after that.

Booking & payment records

Kept as long as accounting, tax and insurance rules require, then deleted.

Trip WhatsApp groups

These stay open because people want them to. Leave whenever you like — nobody will ask why.

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or withdraw consent for the health information at any time — though if you withdraw it before a trek we may not be able to take you safely, and section 08 of the booking terms explains why.

Email info.atlasandocean@gmail.com and I will deal with it myself within 30 days. There is no form to fill in. If you are in the EU or the UK and you think we have handled your data badly, you also have the right to complain to your national data protection authority.

The minimum age for the trek is 16, and under-18s trek accompanied by a parent or guardian, who is the person we correspond with. We do not knowingly collect details from children.

If this policy changes, the date at the top of the page changes with it. If a change materially affects anyone with a live booking, we will say so directly rather than rely on you re-reading this page.