Legal
Privacy Policy – Luxury Car Rental in Marrakech
This privacy policy explains which personal data Luxury Car Marrakesh collects to organise a luxury car rental in Marrakech, why it processes that data, how long it keeps it, and how the customer exercises rights under Law 09-08 and the GDPR.

The Luxury Car Marrakesh privacy policy describes the personal data collected for luxury car rental in Marrakech, its purposes, its retention periods and the customer's rights under Moroccan Law 09-08, supervised by the CNDP, and the GDPR for European Union customers.
Personal data processing register at Luxury Car Marrakesh
9 rows detailing the data category, purpose, legal basis and retention period for a luxury car rental in Marrakech.
- Identity and driving licence
- Full name, date of birth, licence number, category and date of issue, collected to form the rental contract (legal basis: performance of the contract), retained 5 yearsbase
- Customer contact details
- Telephone number and email address, collected to confirm the booking and communicate during the rental (legal basis: performance of the contract), retained 5 yearsbase
- Identity document
- Passport or national identity card number, collected to verify the driver's identity (legal basis: performance of the contract and legal obligation), retained 5 yearsbase
- Applicable legal framework
- Processing governed by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, supervised by the CNDPlocal
- European Union customers
- Additional protection under the GDPR when Luxury Car Marrakesh targets the European tourist market through its French and English sitelocal
- Flight and delivery address
- Flight number, arrival time and delivery address (hotel, riad or villa), collected to organise vehicle delivery (legal basis: performance of the contract), deleted 90 days after the rentalLCM
- Deposit card details
- Card number for the deposit pre-authorisation, processed by the payment processor (legal basis: performance of the contract), not stored by the agency, released within 7 daysLCM
- Inspection report and photographs
- Joint vehicle inspection report and photographs, collected to establish evidence in case of a damage dispute (legal basis: legitimate interest), retained 24 monthsLCM
- WhatsApp message history
- Messages exchanged on WhatsApp about the booking, kept with the contract file to follow up the customer (legal basis: legitimate interest), retained 5 yearsLCM
Is car rental in Marrakech governed by a data protection law?
Yes. Moroccan Law 09-08 governs the processing of personal data at Luxury Car Marrakesh, supervised by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). The GDPR applies in addition for customers resident in the European Union.
Law 09-08 has governed the processing of personal data in Morocco since it entered into force. It requires Luxury Car Marrakesh to declare its processing activities to the CNDP, to collect data for determined purposes, and to protect it against unauthorised access.
The General Data Protection Regulation (GDPR) applies in addition when the agency targets customers resident in the European Union, notably through a site accessible in French and English. Both frameworks grant the customer the same rights of access, rectification and erasure.
- Luxury Car Marrakesh, luxury car rental agency in Marrakechthe agency responsible for processing the data
What personal data does Luxury Car Marrakesh collect when a customer books?
Luxury Car Marrakesh collects 7 categories of personal data when a customer books a rental: identity, driving licence, contact details, identity document, flight and delivery address, deposit card data, and the vehicle inspection report with photographs.
Card data never passes through the Luxury Car Marrakesh servers. The payment processor handles the pre-authorisation directly and sends the agency only a confirmation, without the full card number.
- Full identity: first name, last name, date of birth.
- Driving licence: number, category and date of issue.
- Contact details: telephone number and email address.
- Identity document: passport or national card number.
- Flight and delivery: flight number, arrival time, address of the hotel, riad or villa.
- Deposit card data: card number for the deposit pre-authorisation, processed by the payment processor.
- Inspection report: joint report and photographs of the vehicle at handover and return.
- WhatsApp history: messages exchanged about the booking.
- car rental conditions in Marrakech: licence, age, depositthe documents requested at the time of booking
How long does Luxury Car Marrakesh keep personal data?
Luxury Car Marrakesh keeps identity and licence data for 5 years for its commercial records, flight and delivery data for 90 days after the rental, inspection photographs for 24 months, and releases card data within 7 days.
The 5-year retention of identity and licence data corresponds to the Moroccan obligation to keep commercial records relating to rental contracts. Past that period, this data is deleted from the agency's systems.
Flight data and the delivery address serve only to organise vehicle delivery. Luxury Car Marrakesh deletes them 90 days after the end of the rental, once the file is closed.
Inspection photographs remain useful in case of a dispute over damage noted after the return. The agency keeps them for 24 months, then erases them.
- general terms for luxury car rental in Marrakechthe contract that sets these retention periods
Is customers' personal data shared with third parties?
Yes. Luxury Car Marrakesh shares personal data with 3 recipients: the vehicle's insurer, the payment processor for the pre-authorisation, and the Moroccan authorities where the law requires it. The agency does not sell any personal data to commercial third parties.
The vehicle's insurer receives the driver's identity and licence data to establish the comprehensive cover for the rental. The payment processor receives the card data to process the deposit pre-authorisation.
The Moroccan authorities, notably the police and the gendarmerie, receive only the data strictly necessary in case of a road check, an accident or a judicial request. No other company receives customer data for commercial purposes.
What rights does the customer have over their personal data?
The customer has 4 rights over their personal data: access, rectification, erasure and objection. The customer exercises these by writing to contact@luxurycarmarrakesh.com with proof of identity; Luxury Car Marrakesh responds within 30 days of receiving the request.
Luxury Car Marrakesh verifies the identity of the requester before handling any request, to prevent disclosure of data to an unauthorised person. A copy of the identity document used for the booking is sufficient.
In the absence of a satisfactory response, the customer may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), the Moroccan authority competent for personal data protection.
- Right of access to the data held by the agency.
- Right of rectification of inaccurate or incomplete data.
- Right of erasure of data once the purpose is fulfilled.
- Right of objection to processing for a legitimate reason.
- contact and booking for luxury car rental in Marrakechthe address for exercising your data rights
Frequently asked questions about personal data protection at Luxury Car Marrakesh
5 questions come up most often about data protection at Luxury Car Marrakesh: the right of access, sale of data, complaints to the CNDP, European Union customers, and retention of deposit card data.
How does a customer exercise their right of access to their data?
The customer writes to contact@luxurycarmarrakesh.com attaching a copy of their identity document. Luxury Car Marrakesh verifies the request and responds within 30 days with the list of data held, its purpose and its retention period.
Does Luxury Car Marrakesh sell its customers' personal data?
No. The agency does not sell or rent any personal data to commercial third parties. Data is shared only with the vehicle's insurer, the payment processor and, where the law requires it, the Moroccan authorities.
Can a customer lodge a complaint about the processing of their data?
Yes. The customer may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) after contacting Luxury Car Marrakesh. The CNDP is the Moroccan authority competent for personal data protection.
Do customers resident in the European Union benefit from additional protection?
Yes. The GDPR applies in addition to Law 09-08 when Luxury Car Marrakesh targets customers resident in the European Union through its French and English site. The same rights of access, rectification and erasure are exercised with the agency.
Is the deposit's card data kept by the agency?
No. Card data serves only for the deposit pre-authorisation, between 5,000 and 30,000 MAD depending on the vehicle. It is held by the payment processor, never stored by Luxury Car Marrakesh, and released within 7 days.
Pages related to data protection
Contractual framework
- General terms for luxury car rental in Marrakech
The contract that governs the processing of the customer's data.
- Rental conditions: licence, age, deposit
The personal documents requested before vehicle handover.
Go further
- Contact and booking for luxury car rental in Marrakech
To exercise a right of access, rectification or erasure.
- About Luxury Car Marrakesh
The agency responsible for processing data, based in Guéliz.
- FAQ luxury car rental in Marrakech
The most common practical questions before booking.
- Guide and tips for renting a car in Marrakech
All the practical information before booking.
Luxury Car Marrakesh applies this privacy policy to luxury car rental in Marrakech, Morocco, under Law 09-08 and the supervision of the CNDP. This privacy policy is a template pending validation by Moroccan data-protection counsel and a declaration to the CNDP before its final publication.