Data protection
SafarWay Privacy Policy
This policy explains how SafarWay handles information you choose to share when requesting a quote, arranging private transport or contacting us.
Contents
1. Who is responsible for the data
The data controller responsible for processing personal data collected through the SafarWay website and its communication channels is:
- Trading name: SafarWay
- Country of establishment: Morocco
- Email: safarwaytours@gmail.com
- Phone / WhatsApp: +212 606 236 435
SafarWay is a private transport service operating under the commercial name SafarWay, based in Essaouira, Morocco.
SafarWay has not appointed a Data Protection Officer (DPO). For any question about your personal information, use the contact details in section 2.
2. How to contact SafarWay about privacy
For any question relating to this policy, to how your personal data is processed, or to exercise your rights, you may contact SafarWay by the following means:
- Email: safarwaytours@gmail.com
- Phone / WhatsApp: +212 606 236 435
SafarWay undertakes to acknowledge your request and respond within a reasonable timeframe, in accordance with applicable legal obligations.
3. Scope of the policy
This privacy policy applies to the processing of personal data carried out by SafarWay in the context of the following activities:
- Use of the SafarWay website and its online quote form
- Communications via WhatsApp, telephone or email initiated by customers or prospective customers
- Preparation and execution of private transport services offered by SafarWay
This policy does not apply to third-party websites or services that may be linked from the SafarWay website. SafarWay is not responsible for the privacy practices of those third parties.
4. Information supplied through forms
The SafarWay website includes an online quote or booking-request form. Contact details and message content are prepared locally in your browser. Depending on the channel you choose, the site either opens WhatsApp (wa.me link with a prefilled message) or your email application (mailto: link to safarwaytours@gmail.com with a prefilled subject and body). SafarWay does not receive your personal information until you manually send the WhatsApp message or email. The website does not store requests in a server-side database and does not operate a newsletter.
To calculate a fare on a supported route, the form sends only the origin ID, destination ID, passenger count and journey type (one-way or round-trip) to the SafarWay server. That pricing request does not include name, phone, email, exact address or flight number. Pricing requests are not stored in an application database. Hosting infrastructure may produce technical logs; SafarWay does not intentionally log the private fare matrix.
The form includes an invisible anti-spam field (honeypot) implemented client-side for real users. This mechanism does not result in any additional server-side data storage.
The data typically entered in this form is described in sections 7 and 8.
5. Information supplied through WhatsApp
When you click a WhatsApp link (wa.me) on the SafarWay website or contact us directly via WhatsApp, you leave the SafarWay website and enter the WhatsApp application, which is subject to WhatsApp's (Meta Platforms) own terms of service and privacy policy. A prefilled message from the quote form is not sent automatically; you must confirm and send it in WhatsApp.
SafarWay receives your message in its WhatsApp Business account only after you send it. The content of the conversation is accessible to members of the SafarWay team responsible for bookings and customer relations.
WhatsApp applies end-to-end encryption to its messages. However, metadata (send time, phone number, etc.) is processed by WhatsApp / Meta in accordance with their policy.
If you prefer not to use WhatsApp, alternatives are available: telephone (+212 606 236 435) and email (safarwaytours@gmail.com).
6. Information supplied by telephone or email
You may also contact SafarWay by telephone at +212 606 236 435 or by email at safarwaytours@gmail.com.
Information communicated during a telephone call (name, contact details, journey details) is noted manually by SafarWay in order to prepare your quote or booking. SafarWay does not systematically record telephone calls.
Regarding email: if you choose the email option on the quote form, the site opens your email application via a mailto: link addressed to safarwaytours@gmail.com with a prefilled subject and body. You must send the email yourself; SafarWay does not send it on your behalf. The address safarwaytours@gmail.com also remains available for direct contacts outside the form. Emails received are retained in SafarWay's inbox.
7. Journey and passenger information
To prepare and carry out a transport service, SafarWay collects the following information relating to the journey and passengers:
- Pick-up location and destination
- Desired date and time of travel
- Number of passengers
- Number and type of luggage
- Special requests: child seat, accessibility (wheelchair, etc.), pets
- Any particular pick-up or drop-off instructions
SafarWay does not request sensitive data (health status, ethnic origin, etc.) unless the customer voluntarily provides it in connection with a specific accessibility request. In that case, such data is used solely to organise the requested service.
8. Flight information
For airport transfers, SafarWay may collect the following information in order to coordinate the pick-up or drop-off:
- Flight number (arrival or departure)
- Scheduled arrival or departure time
- Arrival or departure terminal
- Airport concerned
This information is used solely to ensure punctuality of the service and to adjust the driver's schedule in the event of a flight delay. SafarWay may consult publicly available flight tracking sources to verify the actual arrival time.
9. Technical and security information
When you browse the SafarWay website, technical information may be automatically collected by the server or the underlying infrastructure:
- Visitor IP address (recorded in standard server logs)
- Browser type and version
- Operating system
- Pages visited and timestamps
- Referral URL (page from which you accessed the site)
SafarWay does not use Google Analytics or advertising tracking tools. To measure site traffic (page views), SafarWay uses Vercel Web Analytics, provided by the hosting platform. This service is designed without advertising cookies and without advertising visitor identification.
The website is hosted on Vercel infrastructure. Technical logs may be generated by that platform according to its own retention policies.
11. Purposes of processing
SafarWay processes personal data solely for the following purposes:
- Responding to quote requests and preparing commercial proposals
- Preparing, confirming and executing transport bookings
- Coordinating the service between the driver and the customer
- Communicating with the customer via WhatsApp, telephone or email
- Providing after-sales service and customer support
- Preventing malicious automated submissions via the form (client-side honeypot)
- Complying with applicable legal and regulatory obligations
SafarWay does not process your data for automated direct marketing, targeted advertising, sale to third parties or commercial profiling without your explicit consent.
12. Legal grounds
SafarWay processes personal information only when needed to respond to a request you initiate, prepare the requested service, organise confirmed transport or comply with an applicable obligation.
The following sections describe the practical grounds for these activities in plain language. They do not replace professional legal advice.
13. Quote requests and pre-contractual communication
When you submit a quote request or contact SafarWay to obtain information about a journey, the processing of your data is likely based on the performance of pre-contractual measures taken at your request.
This means SafarWay processes your data in order to provide you with a quote and prepare a potential transport contract, before any formal contract is concluded.
This processing is based on your request and the steps needed to prepare the service you are asking about.
14. Booking and service performance
Once a booking is confirmed, SafarWay processes your personal data to perform the transport contract concluded with you.
This includes transmitting the necessary information to the assigned driver (pick-up location, time, flight information where applicable), coordinating the journey and managing any unforeseen events.
This processing is linked to organising and providing the transport you confirmed with SafarWay.
15. Customer support
SafarWay may process your data to answer your questions, handle complaints or provide assistance after the service has been provided.
This processing is based on SafarWay's legitimate interest in maintaining quality customer relations and resolving any disputes or dissatisfaction, or on the performance of the contract depending on the nature of the request.
This processing helps SafarWay respond to your request and provide useful follow-up.
16. Fraud, abuse and security
The online quote form incorporates an invisible honeypot field implemented client-side. This mechanism is designed to identify and reject malicious automated submissions (bots). No additional data is stored server-side for this purpose.
SafarWay may also process data to prevent abuse, fraud attempts or improper use of its services. This processing is based on SafarWay's legitimate interest in protecting its business and its customers.
17. Legal and regulatory obligations
SafarWay may be required to process or disclose personal data to comply with a legal or regulatory obligation, for example in response to a court order or a request from a competent administrative authority.
In such situations, the processing is based on compliance with a legal obligation. SafarWay will disclose only the data strictly necessary and within the limits provided by applicable law.
18. Data minimisation
SafarWay is committed to collecting only the personal data strictly necessary for the purposes described in this policy.
Customers are invited to provide only the information essential for the preparation of their quote or booking. SafarWay does not request identity documents, payment data or sensitive information beyond what is required for the service.
19. Data retention
SafarWay retains personal data for as long as necessary to achieve the purposes for which it was collected, taking into account applicable legal, accounting and operational obligations.
SafarWay keeps information received only for as long as necessary to handle the request, organise the service, provide useful follow-up or comply with an applicable legal obligation. Depending on the channel used:
- Quote requests submitted via the form: no SafarWay server-side database records this data. Content you send via WhatsApp or email is retained in those channels (WhatsApp conversations, email inbox) according to the practices of those services and SafarWay's account management
- Confirmed bookings and related exchanges: kept in the channels used (WhatsApp, email or internal notes) for as long as necessary for the service and applicable obligations
- WhatsApp exchanges: retained in the SafarWay WhatsApp Business account according to Meta's policy
- Direct emails: retained in the SafarWay inbox according to mailbox practices and applicable obligations
- Technical logs: retention determined by Vercel and hosting infrastructure according to their own policies
At the end of the applicable retention period, data will be deleted or anonymised, unless a legal obligation requires longer retention.
20. Recipients of data
Personal data collected by SafarWay may be disclosed to the following recipients, to the extent necessary:
- SafarWay staff: employees and drivers accessing the information necessary to perform the service
- WhatsApp / Meta Platforms: if you choose WhatsApp on the quote form and send the message, Meta processes the data according to its own policy
- Your email provider: if you choose email on the quote form and send the message, your email provider processes the data according to its own policy
- Hosting provider: Vercel may have access to technical data (server logs, etc.) according to its policy
- Legal authorities: in the event of a legal or judicial obligation, within the limits provided by law
SafarWay does not sell or rent your personal data to third parties for commercial purposes.
21. Service providers and processors
SafarWay uses the following service providers, who may process personal data on its behalf or receive it in the course of providing the service:
- WhatsApp / Meta Platforms: messaging platform used when you choose to send a request or communicate via WhatsApp
- Vercel: hosting and delivery of the SafarWay website, and Vercel Web Analytics (traffic statistics)
- Google: when you use the embedded map or follow Google Maps links from the site
SafarWay does not use Google Analytics or advertising / automated marketing platforms.
22. WhatsApp and external communication platforms
SafarWay offers WhatsApp as one channel for sending quote requests and communicating with customers. The following points are important to understand:
- When you choose WhatsApp on the quote form, a prefilled message opens in the application; it is not sent until you confirm and send it
- When you click a WhatsApp link (wa.me/…) or contact us directly on WhatsApp, you leave the SafarWay website and use the WhatsApp application
- WhatsApp is operated by Meta Platforms and is subject to its own terms of use and privacy policy, available on Meta's website
- SafarWay receives your messages in its WhatsApp Business account; these messages are accessible to members of the SafarWay team
- Meta may process metadata related to conversations (phone number, timestamp, delivery status) according to its policy
- Alternatives to WhatsApp are available: telephone at +212 606 236 435 and email at safarwaytours@gmail.com
23. Quote form — email handoff (mailto)
When you choose email on the quote form, the website prepares a mailto: link to safarwaytours@gmail.com with a prefilled subject and body. Your device's email application opens; SafarWay does not send email from its servers and does not use transactional email services (such as Resend, SendGrid, or similar).
Once you send the email, it is processed by your email application and email provider according to their own terms and policies. SafarWay does not control how those services handle message content, metadata, or retention.
The website does not store quote requests in a database. If SafarWay enables automatic server-side email delivery in the future, this policy will be updated and the relevant provider will be disclosed.
24. Hosting and technical providers
The SafarWay website is hosted and delivered via Vercel.
SafarWay uses the following hosting information:
- Vercel may process technical data needed to host, secure and operate the website
- Vercel's terms and privacy policy apply to this infrastructure
- SafarWay does not directly control every technical setting of the hosting platform
SafarWay is committed to selecting a hosting provider that applies appropriate security measures and, to the extent possible, respects data protection principles.
25. International data transfers
Some personal data may be processed outside Morocco when you use third-party services or when hosting infrastructure requires it:
- WhatsApp / Meta Platforms: data transmitted via WhatsApp may be processed by Meta outside Morocco according to Meta’s own practices. SafarWay does not directly control these transfers, which are governed by Meta's privacy policy
- Web hosting: Vercel may process technical data in infrastructure located outside Morocco according to its own practices
- Gmail (Google): direct emails received by SafarWay are processed via Gmail; Google may process data outside Morocco according to its policy
SafarWay does not fully control the policies of Meta/WhatsApp, Google or Vercel. Please consult their respective documents if you want more detail.
26. Data security
SafarWay implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure:
- Web communications secured by HTTPS (encryption in transit between the browser and the server)
- Access to data limited to SafarWay team members who need it to provide the service
- WhatsApp conversations benefiting from end-to-end encryption provided by WhatsApp
- SafarWay staff awareness of good privacy practices
No method of data transmission or storage over the Internet is completely infallible. SafarWay cannot guarantee absolute security, but is committed to following available best practices and adapting its measures to evolving risks.
27. User rights
Under Moroccan personal data protection legislation (Law 09-08) and applicable general principles, you have the following rights regarding personal data processed by SafarWay:
- Right of access: obtain a copy of the data SafarWay holds about you
- Right to rectification: have inaccurate or incomplete data corrected
- Right to erasure: request deletion of your data in cases provided for by law
- Right to object: object to the processing of your data on legitimate grounds
- Right to restriction of processing: request restriction of processing in certain circumstances
- Right to withdraw consent: withdraw your consent at any time where processing is based on consent
To exercise any of these rights, please contact SafarWay using the contact details provided in section 2. SafarWay will respond to your request within a reasonable timeframe.
28. Access and correction
You have the right to obtain confirmation as to whether or not SafarWay processes personal data about you. If so, you may request a copy of the data concerning you as well as information about how it is processed.
If the data SafarWay holds about you is inaccurate or incomplete, you may request its correction. SafarWay will make the corrections as soon as possible.
To exercise this right, contact SafarWay by email at safarwaytours@gmail.com specifying the nature of your request.
29. Deletion or restriction requests
You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you have exercised your right to object or withdrawn your consent.
You may also request restriction of the processing of your data in certain situations, for example when you dispute the accuracy of the data or the existence of a valid legal basis.
SafarWay will process your request as soon as possible. Legal constraints may prevent the immediate deletion of certain data (for example, accounting or tax obligations).
30. Objection and consent withdrawal, where applicable
Where the processing of your data is based on SafarWay's legitimate interest, you may object to it on grounds relating to your particular situation. SafarWay will then cease the relevant processing, unless it demonstrates compelling legitimate grounds overriding your interests.
Where the processing is based on your consent (for example, processing of sensitive data voluntarily provided), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact SafarWay by email at safarwaytours@gmail.com or by telephone at +212 606 236 435.
32. Data relating to children
SafarWay's private transport services are intended for adults. SafarWay does not knowingly collect personal data from children under 18 years of age acting alone.
Bookings involving minor passengers must be made by an adult parent or legal guardian. Information about minors (for example, number of children, need for a child seat) is collected solely to organise the service.
If you believe that a minor has provided personal data to SafarWay without the consent of a parent or guardian, please contact us at safarwaytours@gmail.com so that we can take appropriate action.
33. Automated decisions and profiling
SafarWay does not carry out solely automated decision-making that produces legal effects or similarly significantly affects you.
SafarWay does not engage in profiling for advertising or commercial purposes.
The honeypot field in the quote form is the only automated mechanism in place: it filters out manifestly automated form submissions (bots) on the client side and involves no data storage and no discriminatory decision-making regarding legitimate users.
34. Changes to the policy
SafarWay reserves the right to modify this privacy policy at any time to reflect changes in its practices, legal obligations or services.
In the event of a material change, SafarWay will notify users by means of a prominent notice on the website or by any other appropriate means.
The date of last update will be indicated at the top of this page. We encourage you to review this policy regularly.
35. Effective date
This privacy policy takes effect on 19 August 2026.
SafarWay may update it if its practices or services change.
36. Contact
For any question, request or concern relating to this privacy policy or the processing of your personal data, please refer to section 2 (Privacy contact) or use the contact details below:
- Email: safarwaytours@gmail.com
- Phone / WhatsApp: +212 606 236 435
Privacy Questions?
For any questions regarding this privacy policy or the use of your personal data, contact us at safarwaytours@gmail.com or via WhatsApp at +212 606 236 435.
We are available for any clarification.