Skip to Content
Legal

Legal & Privacy

Important information about using the Amsakul platform, and how we handle your data.

On this page
Loi 09-08 compliant

By using the Amsakul platform, you agree to these terms.

  • Users must be at least 18 years old to book a tour or experience. Bookings for minors must be made by a parent or legal guardian.
  • Guides and providers must hold any licences, permits, and insurance required to operate their activities legally in Morocco.
  • Amsakul acts as an intermediary platform connecting travellers with independent local guides and providers, and is not a party to the service contract between the provider and the traveller.
  • Platform commission rates are disclosed to providers upon registration.
  • All prices displayed include applicable taxes unless stated otherwise.

In accordance with Moroccan Law 09-08 on the Protection of Individuals with regard to the Processing of Personal Data and its implementing Decree No. 2-09-165.

1. Data Controller

Amsakul, operated by AinnovateX, is the data controller responsible for processing your personal data. We are registered with the CNDP (Commission Nationale de Controle de la Protection des Donnees a Caractere Personnel) as required by Loi 09-08.

2. Data We Collect

We collect the following categories of personal data:

  • Identity data: full name, date of birth, nationality
  • Contact data: email address, phone number, postal address
  • Identity documents: national ID card (CIN) or passport, for verification purposes
  • Payment data: processed securely through CMI (Centre Monetique Interbancaire) — we do not store card numbers
  • Usage data: booking history, tour dates and participants, reviews
  • Provider data (guides & providers): licences, permits, insurance certificates, and photos of the experiences offered
  • Location data: tour meeting points and destinations
3. Purpose of Processing

Your data is processed for the following purposes (Article 3, Loi 09-08):

  • Managing your account and bookings
  • Processing payments and generating invoices
  • Verifying the identity of travellers and providers
  • Communicating booking confirmations, reminders, and alerts
  • Enabling reviews and ratings between users
  • Complying with legal obligations (tax, insurance, dispute resolution)
  • Improving our services through anonymized analytics
4. Legal Basis

We process your data based on: (a) your consent when creating an account, (b) the performance of the booking and service contract, (c) our legitimate business interests, and (d) compliance with legal obligations under Moroccan law.

5. Data Sharing

Your personal data may be shared with:

  • Guides & experience providers: your name and contact details, to coordinate your booking
  • Payment processors: CMI for secure payment processing
  • Authorities: when required by law, court order, or regulatory request

We do not sell your personal data to third parties for marketing purposes.

6. Data Retention

Personal data is retained for the duration of your account plus 3 years after account closure, in accordance with commercial record-keeping requirements. Payment transaction records are retained for 10 years as required by Moroccan tax law. You may request earlier deletion subject to legal retention obligations.

7. Your Rights (Articles 7-8, Loi 09-08)

You have the following rights regarding your personal data:

  • Right of access: obtain a copy of your personal data
  • Right of rectification: correct inaccurate or incomplete data
  • Right of deletion: request deletion of your data (subject to legal retention)
  • Right of opposition: object to processing for legitimate reasons

To exercise these rights, contact us at amsakuul@gmail.com or via our contact page. We will respond within 10 business days as required by law.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including: SSL/TLS encryption for all data in transit, secure password hashing, role-based access controls, and regular security audits. Payment processing is handled by CMI, which is PCI-DSS compliant.

9. Cookies

We use essential cookies for site functionality (session management, security tokens). Analytics cookies are used only with your consent. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this privacy policy periodically. Material changes will be communicated via email or platform notification. Continued use of the platform after changes constitutes acceptance.