Privacy Policy

Who We Are

The data controller responsible for the processing of your personal information collected via this website and our reservation concierge is:

Categories of Personal Data

To fulfill your private transfers, day trips, and chauffeur reservations, we collect only the data necessary to guarantee a smooth, safe, and punctual travel experience:

• Identity & Contact: Full passenger name, email address, telephone/WhatsApp number.
• Journey Parameters: Pickup and drop-off addresses, date, time, passenger and luggage counts, vehicle category preference.
• Flight Arrival Information: Flight number (optional, used strictly for real-time delay tracking and meet-and-greet timing at Tangier Ibn Battouta Airport and other Moroccan airports).
• Customer Inquiries: Any messages, special requirements (e.g. child safety seats), or itinerary details submitted via our contact or booking forms.
• Technical Telemetry: Anonymized server logs, IP addresses (used exclusively for sliding-window rate limiting to prevent automated abuse).

Lawful Grounds for Processing

In accordance with Moroccan Law No. 09-08 promulgated by Dahir No. 1-09-15 relating to the protection of individuals with regard to the processing of personal data (supervised by the CNDP):

We process your personal information exclusively for:

• Performance of Contract: Executing your private transportation service and providing confirmed chauffeur dispatch.
• Operational Punctuality: Contacting you via WhatsApp/SMS to coordinate pickup, confirm arrival terminals, and handle flight delays.
• Legal & Regulatory Transport Obligations: Complying with Moroccan road transportation documentation regulations and mandatory passenger vehicle manifests.

ALLO LUX TAXI does not sell, rent, monetize, or disclose your personal information to third-party advertising or marketing brokers.

Technical & Operational Safeguards

We implement industry-standard cryptographic and architectural measures to safeguard passenger data:

• Transport Encryption: All data transmitted between your browser and our servers is protected using TLS 1.3 encryption.
• Database Isolation: Production databases are secured with strict network access controls, parameterization against SQL injection, and automated encrypted backups.
• Administrative Access: Administrative dispatch systems require cryptographically signed session tokens and versioned PBKDF2-SHA512 password protection with automated account lockouts.
• Sliding-Window Rate Limiting: Public reservation and tracking endpoints are shielded against automated scanning and brute-force harvesting.

Access, Rectification & Deletion

Under Moroccan Law 09-08 and international privacy principles, you hold full rights to:

• Request a copy of the personal data held about your reservations.
• Request immediate rectification of erroneous or outdated contact information.
• Request the deletion or anonymization of your contact details following the completion of your journey, subject to mandatory Moroccan accounting retention periods.

To exercise any of these rights, contact our Data Protection Coordinator at: privacy@alloluxtaxi.ma