Legal
Privacy Policy
Last updated: September 2026
This policy explains what personal data Journey and Memory collects through this website, why we collect it, who we share it with, and the choices you have. We will update it as our practices or the law change.
1Who we are
This website is operated by Journey & Memory SARL, a travel agency registered in Marrakech, Morocco, and the controller of the personal data described below. For any question about this policy or your data, contact us at contact@journeyandmemory.com or by post at Résidence Bab Marrakech, Immeuble I, Appartement 13, El Azzouzia, Marrakech-Médina, Morocco.
2What we collect
When you send an enquiry through the form on this site, we collect what you enter: enquiry type, name, country, email address, telephone or WhatsApp number, approximate travel dates, number of travelers, interests or objectives, approximate budget, and any additional notes.
For security and record-keeping we also store automatically: the language version of the site you used, the page the enquiry was sent from, your browser’s user-agent string, a one-way cryptographic hash of your IP address (never the address itself), and the wording, date and time of the consent you gave when submitting the form.
We collect no other data about your visit. This site uses no analytics, advertising, or social-media tracking.
3Why we use it
- To respond to your enquiry and answer your questions.
- To prepare a proposal, quotation or itinerary at your request.
- To stay in contact with you about that enquiry and any journey that results from it.
We do not use your data for marketing without asking you separately, and we never sell it.
4Our legal basis
We process your enquiry data on the basis of your consent, given when you submit the form, and because doing so is necessary to take steps at your request before entering into a contract. You can withdraw your consent at any time by contacting us; this does not affect processing already carried out.
5Who we share it with
We share your data only with the parties needed to answer your enquiry or deliver your journey, and only the details they need:
- Travel suppliers — hotels, riads, guides, drivers, and activity operators — involved in your proposed itinerary.
- Supabase, our managed database provider, where enquiry records are stored.
- Our email delivery provider, which sends us the enquiry and delivers our reply.
We do not share your data with anyone else, and we do not transfer it for any purpose unrelated to your enquiry unless the law requires us to.
6International transfers
Our database and email providers may process enquiry data on servers outside Morocco. Where your data is transferred outside your country, we rely on the providers’ contractual data-protection commitments to keep it protected to a comparable standard.
7How long we keep it
We keep your enquiry for as long as we need it to handle your enquiry and any journey or ongoing relationship that follows from it. You can ask us to delete it at any time (see “Your rights” below), and we will do so unless we are required to keep a limited record for legal or accounting reasons.
8How we protect it
The site is served only over an encrypted (HTTPS) connection. IP addresses are stored only as a one-way hash. The enquiry database blocks anonymous access and can be reached only by the server using a private credential. The panel our team uses to read enquiries is password-protected, with session limits and lockout after repeated failed logins.
9Cookies and tracking
This website sets no cookies of its own, loads no analytics or advertising scripts, and does not track you across sites. Because of this, no cookie banner is shown.
10Your rights
You can ask us to give you a copy of the personal data we hold about you, to correct it if it is wrong, or to delete it. Write to contact@journeyandmemory.com and we will respond within a reasonable time, normally within one month. If you are in Morocco and believe we have not handled your data properly, you may also contact the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
11Changes to this policy
If we change how we handle personal data, we will update this page and change the “last updated” date above. Significant changes will be noted here.