Privacy Policy

Atlas Pedals Morocco Bike Tours (“Atlas Pedals”, “we”, “us”) runs guided bike tours in the High Atlas, based in Douar Imlil, Al Haouz, Marrakech-Safi, Morocco. Our website is atlaspedals.com.

We are the data controller for the personal data described in this policy. To contact us about it, including to exercise any of the rights set out below, email info@atlaspedals.com, call +212 653 93 6003, or write to us at the address above.

We work alongside a sister operator, Marrakech Eco Tours (marrakechecotours.com), run by the same team. This policy covers atlaspedals.com; the sister site publishes its own.

We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel). Because most of our riders live in the European Union or the United Kingdom, we also apply GDPR-aligned standards.

We collect the information you choose to give us when you:

• Send an enquiry through our forms: your name, email address and anything else you add, such as phone number, tour, dates, group size and your message
• Contact us by WhatsApp, email or phone
• Book a tour and pay a deposit (a PayPal payment is processed by PayPal, so we never receive or see your card details; a bank transfer is covered below)
• Pay by bank transfer, or send us a screenshot of a payment (we see the payer’s name and the transaction details it shows)
• Tell us about your riding experience, health or diet so we can plan your tour safely
• Appear in photographs taken on tour, where we have asked for and received your permission to publish them

If you choose “Accept all” on our banner, we also learn how the site is used, as described under Cookies & Similar Technologies and in our Cookie Policy.

We use the information you provide only to:

• Reply to your enquiry, and send you an automatic email confirming that we received it
• Plan and run your tour, and send you confirmations, itineraries and pre-departure information
• Contact you about changes to your booking or tour
• Share what is needed with the accommodation, transport and bike-hire providers that run your tour
• Comply with legal and accounting obligations under Moroccan law

We do not add you to a mailing list, and we never use your information for marketing without your explicit consent. We do not sell, rent, share or trade your personal data with anyone for marketing.

We do not use social media pixels or advertising trackers. On your first visit a banner lets you choose Accept all or Necessary only:

• Consent record (ap-consent): remembers your choice and the version of these policies you answered under. Strictly necessary; stored in your browser.
• Microsoft Clarity (_clck, _clsk): shows us where visitors click and scroll, so we can fix pages that confuse people. Set only if you choose “Accept all”; with “Necessary only” Clarity never loads.

Our lawful basis for analytics is your consent. You can change your answer at any time with “Cookie settings” at the bottom of every page; withdrawing deletes these cookies. The full list is in our Cookie Policy.

To run this website and our tours we use the following services. Each handles data under its own privacy terms:

• Vercel: hosts this website. Like any web host it logs standard request data (IP address, time, page requested) for security. See Vercel’s Privacy Policy.
• Microsoft (Clarity): only if you choose “Accept all”, Clarity records how pages are used (clicks, scrolling, and replays of visits) so we can fix what confuses people. It never records what you type into a form: Microsoft masks input boxes in every recording. We tell Clarity not to share data with Microsoft Advertising: its ad storage setting is off. See the Microsoft Privacy Statement, which also covers any cookies Microsoft sets on its own domains, such as clarity.ms and bing.com.
• Resend: delivers the emails our forms send, to our inbox and the confirmation to you. See Resend’s Privacy Policy.
• Google (Gmail & Google Sheets): email to our address is forwarded to our team inbox on Gmail, and each enquiry (name, email, tour, dates, group size and message) is recorded in a private Google Sheet that only our team can open. See Google’s Privacy Policy.
• PayPal: processes deposits paid by PayPal. PayPal handles all card and bank data directly; we never receive your payment credentials.
• Banks: if you pay by bank transfer, your bank and ours process the payment, including your name and account details.
• WhatsApp / Meta: if you contact us on WhatsApp, your messages are subject to Meta’s own privacy policy and terms.

We keep your personal data for as long as we need it to run your booking, and for up to 5 years afterwards for accounting and legal compliance under Moroccan law. Enquiries that do not lead to a booking are deleted within 12 months of our last contact with you.

Under Moroccan Law 09-08 (and the GDPR where it applies), you have the right to:

• Ask for a copy of the personal data we hold about you (right of access)
• Ask us to correct inaccurate or incomplete data (right of rectification)
• Ask us to delete your data, where we are not legally required to keep it
• Object to or restrict our processing of your data in certain circumstances
• Withdraw your consent to analytics at any time, with “Cookie settings” at the bottom of every page

To exercise any of these rights, email us at info@atlaspedals.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNDP, or with the data protection authority where you live, if you believe your data has been mishandled.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure. This website is served only over HTTPS with a strict Content Security Policy. Deposits are paid by PayPal or bank transfer and balances in cash or by bank transfer: we never receive, transmit or store card data. Form submissions travel over encrypted connections.

We are based in Morocco. Our hosting (Vercel), email (Resend, Gmail), enquiry sheet (Google) and, if you accept analytics, Microsoft Clarity may process data in the United States or the European Union. Where personal data is transferred outside Morocco, we take steps to ensure protections consistent with Moroccan Law 09-08 and CNDP guidance.

Our website is not directed at children under 16, and we do not knowingly collect their personal data. Minors riding with us must be accompanied by a responsible adult who agrees to our terms and this policy on their behalf. If you believe a child has sent us personal data, contact us and we will delete it promptly.

Our website links to other sites, including our sister operator, race organisers and sources in our articles. Once you leave our site this policy no longer applies, and we are not responsible for the privacy practices of other websites.

We may update this policy to reflect changes in our services or the law. The date at the top of this page shows the most recent revision. When what we collect changes, the banner asks you again before any analytics run.

For any privacy question, or to exercise your rights, contact us at info@atlaspedals.com.