Privacy policy

Who is responsible for your data

Loxa Drive, 10, Boulevard des FAR, 2ème étage, Casablanca, is the data controller for the personal data described here. For any privacy question or request, write to support@loxa-drive.com.

What we collect, and why

• Booking details, your name, email address, phone number, chosen vehicle, dates, pick-up and drop-off locations, and any flight number you give us. We need these to provide the rental you asked for.
• Payment information: handled by Stripe. We receive confirmation that a payment succeeded and a reference; we never receive or store your card number.
• Driver documents, at handover we check your driving licence, International Driving Permit and identity document, as required to rent a vehicle lawfully.
• Vehicle condition records , photographs of the vehicle taken at handover and at return. These exist to protect you as much as us.
• Messages, correspondence with us by email, WhatsApp or the contact form on this site (your name, email address, any phone number you give us and what you write), kept so we can answer follow-up questions and resolve disputes.

Our legal basis

Booking and driver data are processed to perform the rental contract with you. Document checks and record keeping are processed to comply with legal obligations that apply to vehicle rental in Morocco. Condition photographs and dispute correspondence are processed on the basis of our legitimate interest in evidencing the condition of our vehicles and resolving claims fairly.

Who else processes it

We use a small number of service providers, each of which acts on our instructions:

• Stripe, payment processing.
• WhatsApp (Meta), if you choose to contact us that way. Messages sent over WhatsApp are also subject to Meta's own privacy terms.

Bookings and enquiries are stored on our own server rather than with a third-party database provider.

We do not sell personal data, and we do not share it for advertising purposes.

International transfers

We are established in Morocco, so if you book from the European Economic Area or the United Kingdom your data is transferred outside that area to us. Where that is the case we rely on appropriate safeguards for the transfer, and you may request details of them from the address above.

How long we keep it

Booking and payment records are kept for as long as required by Moroccan accounting and tax law. Vehicle condition photographs are kept for the period in which a claim could still be raised, and then deleted. Enquiries that do not become bookings are deleted once the conversation is closed.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, or object to processing based on legitimate interests. Write to support@loxa-drive.com and we will respond within one month.

If you are in the EEA or the UK and are unhappy with our response, you may complain to your national data protection authority. In Morocco, the supervisory authority is the CNDP.

Cookies and analytics

This site stores your currency preference (euros or dollars) and your answer to the cookie banner in your browser's local storage. That information stays on your device.

We measure how the site is used so we can see which pages help travellers book. Each visit is recorded on our own server: the pages you open, the buttons and links you tap (for example the WhatsApp button), the site that sent you, your country (worked out from your IP address, which we do not keep) and your type of device and browser. We never record what you type into a form.

If you accept the banner, we set one first-party cookie, loxa_vid, holding a random identifier, so we can recognise your later visits. It lasts 13 months and is not shared with anyone. What was recorded since you last opened or reloaded the site in that tab is linked to it too, so we know how you found us; nothing recorded before that is. If you decline, or do not answer, we set no cookie and record your visit under an anonymous code that changes every day and cannot be traced back to you after that day. You can change your answer at any time with "Cookie settings" at the bottom of every page.

Our server also logs requests from search engines and other automated crawlers, including their IP addresses, to check which crawlers are genuine and to block abuse. Visit records are deleted after 13 months and request logs after 90 days.

Stripe sets cookies necessary to process payments securely and to prevent fraud. We do not use advertising cookies.

Language of this policy

This policy is published in English, and the English text is the governing version. Other pages of this site are available in French, Spanish and German; where a translation differs from this English text, this English text prevails.

Security

The site is served over HTTPS, payments are handled entirely by Stripe, and access to the booking database is restricted to the staff who need it to arrange your rental.