Privacy notice — Tafukt Surf

This notice explains what Tafukt Surf does with your personal data when you enquire about a stay or come and surf with us.

What we collect

When you use the enquiry form we collect only what you type: your name, email, surf level, group size, preferred arrival date and your message.

We also record the date, your browser type and a one-way hashed version of your IP address. The hash exists purely to stop spam — your IP address is never stored in readable form and cannot be recovered from it.

If you have allowed the matching cookie categories, your enquiry also records how you found us: with Analytics consent, the campaign details of your visit (UTM parameters, the first page you saw and the site that sent you); with Marketing consent, an ad-click identifier (fbclid or gclid) if you arrived from an ad. This tells us which campaign led to an enquiry. Without that consent, none of it is kept or sent.

Visitor statistics

We count page views ourselves so we can see which guides people find useful. This sets no cookies, stores no advertising identifier, and never tracks you across other websites.

For each page view we record the page, the language, the website that sent you here (its domain only), a rough device type (mobile, tablet or desktop) and a pseudonymous daily identifier: a one-way hash of your IP address and browser details combined with the current date. Your IP address itself is not stored. Because the date is part of the hash, the identifier changes every day, so it is not used to recognise you across different days. Records are deleted after 13 months.

If you choose “Reject all”, or switch Analytics off in , these page counts are not sent either.

How we use it

We use your details for one thing: to reply to your enquiry and arrange your stay, by email or WhatsApp.

Your enquiry is saved in our own database on this website, and we receive an email notification so nothing gets missed. Only we can see it. We keep enquiries for up to 24 months and then delete them.

If you prefer not to leave anything with us, message us on WhatsApp instead — that goes straight to our phone and is never stored here.

Sharing & advertising

We never sell your personal data. We share it only with the people who help run your stay (for example, transfers) and, if you allow Marketing, with Meta as described below.

Only if you allow it (the Analytics category), we use Google Analytics 4 to understand how the site is used; Google then sets cookies and processes limited data under its own policy — see our cookie policy. You can change your choice at any time: .

Only if you allow it (the Marketing category), we use the Meta Pixel to measure and improve our ads on Facebook and Instagram. It tells Meta when you view a page, contact us via WhatsApp, email or phone, or send an enquiry, together with technical data such as your IP address, browser details and the cookies _fbp and _fbc. Meta may link this to your Facebook or Instagram account. We do not pass your name, email address or message to Meta. For collecting and transmitting this data, we and Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) may be joint controllers; Meta is responsible for what it does with the data afterwards, as described in its privacy policy (facebook.com/privacy/policy). Meta may transfer data to Meta Platforms, Inc. in the United States; according to Meta, such transfers rely on safeguards such as the EU–U.S. Data Privacy Framework and standard contractual clauses. The legal basis is your consent, which you can withdraw at any time: . Without Marketing consent, the Meta Pixel is not loaded and nothing is sent to Meta.

Your rights

Ask what we hold about you, and request a copy.
Ask us to correct or erase it.
Withdraw your cookie consent at any time via , also at the bottom of every page.

To exercise any of these, email medmotaki4@gmail.com.

Contact

Tafukt Surf · Imsouane Bay, Imsouane, Morocco.