Legal
Privacy policy
What we collect when you book through tripass, why we hold it, and how to get it removed.
Last updated 1 October 2026
What we collect
We ask for the minimum a booking needs: your name, your phone number, an email address if you give one, and the details of what you booked. Card details go straight to our payment processor and are kept there as a token, so tripass never holds a full card number.
- Account details: name, phone number, email, language and photo
- Booking details: dates, travellers, pickup addresses and flight numbers you enter
- Wallet and points activity: top-ups, payments, refunds and points earned or spent
- Technical data: IP address, device type and pages viewed, kept for 12 months
Why we hold it
Three reasons only: to run the booking you asked for, to meet Moroccan accounting and tourism-licensing rules, and to answer you if something goes wrong afterwards. We do not build advertising profiles and we do not sell data to anyone.
How long we keep it
Booking and payment records are kept for the period Moroccan accounting rules set for commercial receipts. Support conversations are deleted after two years. Marketing consent is kept until you withdraw it, and technical logs roll off after twelve months.
Your rights
You can see, correct, export or delete what we hold. Most of it is editable directly in your account; anything else takes one email.
- Ask for a copy of your data in a machine-readable file
- Correct anything wrong in your profile
- Delete your account from Settings, together with everything not required for accounting
- Switch off offers and newsletters at any time in Settings
Contact
tripass, Marrakech, Morocco. Questions about your data go to support@tripass.ma.
Questions about your data
Write to support@tripass.ma and we will answer within five working days. You can also ask for a copy or deletion of everything we hold.