Privacy policy

Who is responsible for your data

Buggy Agafay, Station Afriquia, Km 16 route d’Amizmiz, 40000 Marrakech, Maroc, is the controller of the data collected on https://buggy-agafay.com. For any question or request about your data: contact@buggy-agafay.com.

What we collect and why

Booking form: your first name and your phone number, the only two fields we ask for, plus the message you write if you write one. There is no email field: if you do leave us an address, in your message for instance, it is used only to answer you and to acknowledge your request. The number of people, the hotel and the time are settled in the conversation that follows; whatever you tell us about them is noted with the request. If the ride, the machine or the date are already in the link that brought you to the form, they travel with the request so you do not have to type them again. This information is used only to call you back, check availability and organise the ride. Legal basis: pre-contractual steps taken at your request.

The site language and the page you send the request from travel with it. On arrival, our server records the approximate country our host derives from your IP address, the browser used (user agent) and the page that brought you here (referrer). The IP address itself is not kept: it is used for a few minutes, in memory, to limit repeated submissions. None of this is used to profile you.

Where your visit comes from: your browser keeps in its local storage, under the key “ba_attribution”, up to three time-stamped touches — the first one, the last one that did not come from our own pages and the last one that came from an ad. Each keeps the landing page, the site or search engine that brought you and, if there are any, the campaign parameters and the advertising click identifier present in the address (gclid, fbclid and the like). This is not a cookie and nothing leaves your browser until you send a request: it reaches us only together with a booking request, so that we know how our customers find us.

Site analytics: our host Vercel provides two tools that are active on every page. Web Analytics counts page views and groups them by country, device type and referring site; Speed Insights measures the loading times visitors actually experience. Both work without cookies and without any advertising identifier, and produce aggregated statistics only.

WhatsApp: by clicking a WhatsApp button, you open the WhatsApp app or website (Meta); their privacy policy then applies. No data is sent to WhatsApp before you click.

Retention period

A booking request, the source information that comes with it and the notes our team adds to follow it up are kept for no more than 24 months after the last exchange, then deleted. You can ask us to delete them sooner by writing to contact@buggy-agafay.com. The audience statistics provided by Vercel are aggregated: they contain nothing that could identify you.

Recipients and transfers

Your data is accessible to our booking team and to our technical processors: Vercel (site hosting and aggregated analytics, a company based in the United States), Supabase (database of requests, servers in the European Union) and Resend (sending the emails: the alert that flags your request to our team and, if we have your address, the acknowledgement addressed to you). We never sell or rent any data.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability, in accordance with the EU General Data Protection Regulation and Moroccan Law 09-08. To exercise these rights, write to contact@buggy-agafay.com quoting your request reference. You may also lodge a complaint with the supervisory authority in your country (the CNIL in France, the CNDP in Morocco).