Privacy Policy & Data Protection | Politique de Confidentialité | سياسة الخصوصية

English · Official Privacy Policy

1. Privacy Policy & Data Protection Statement (Tawaf.ma)

Tawaf.ma ("Tawaf", "Agence Tawaf للحج والعمرة", "we", "us", or "our"), headquartered in Casablanca, Kingdom of Morocco with authorized partner agencies across Moroccan cities, is committed to protecting the privacy, confidentiality, and security of your personal information in accordance with Moroccan Law No. 09-08 (overseen by the Commission Nationale de contrôle de la protection des Données à caractère Personnel — CNDP), the EU General Data Protection Regulation (GDPR), and Meta Platforms, Inc. Developer & Business Tools Policies.

Legal Entity & Brand Tawaf.ma — Agence Tawaf Omra & Hajj (وكالة طواف للحج والعمرة)

Headquarters Casablanca, Kingdom of Morocco (with partner agencies nationwide)

Privacy & Data Protection Email [email protected]

Telephone & Official WhatsApp +212 620-200212

1.1 Personal Data We Collect

We only collect personal data that is strictly necessary to provide our Omra and Hajj pilgrimage travel services, respond to your consultation requests, or process recruitment applications:

Consultation & Booking Lead Data: Full name, telephone/WhatsApp number, city of residence, preferred travel program (Omra Ramadan, Year-Round Omra, or Hajj), number of travelers, and optional notes submitted through our website forms (https://tawaf.ma/, https://tawaf.ma/omra-ramadan/), Meta Lead Ads forms, or direct WhatsApp/phone inquiries.
Recruitment Application Data (jobs.tawaf.ma): Candidate name, contact information, city, professional experience, and responses submitted via our recruitment portal.
Technical, Analytics & Advertising Data: IP address, browser type, operating system, referring URLs, pages viewed, timestamp, and advertising identifiers (such as Meta _fbp and _fbc parameters, Google Tag Manager / GA4 cookies, and campaign UTM parameters).

1.2 Meta (Facebook & Instagram) Pixel, Conversions API (CAPI) & Marketing API Disclosure

To measure the effectiveness of our advertising campaigns and deliver relevant travel offers on Facebook and Instagram, Tawaf.ma integrates Meta Business Tools, including the Meta Pixel, the Meta Conversions API (Server-Side API), and the Meta Marketing / Lead Ads API:

Event Measurement & Attribution: When you interact with our website, complete a consultation quiz, click a call/WhatsApp button, or submit a lead form, standard events (such as PageView, Lead, Contact, and CompleteRegistration) may be transmitted to Meta Platforms, Inc. via browser pixel or server-side Conversions API.
Cryptographic Hashing (SHA-256): Any contact identifiers (such as phone number) used for advanced matching via the Meta Conversions API are cryptographically hashed using SHA-256 prior to transmission in strict compliance with Meta Business Tools Terms.
Third-Party Cookie & API Notice: Third parties, including Meta Platforms, Inc. and Google LLC, may use cookies, web beacons, and similar technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads.
Opt-Out Controls: You can opt out of the collection and use of information for ad targeting at any time via your Facebook Ad Preferences, Google Ad Settings, or aboutads.info.

1.3 How We Use Your Information

To contact you via phone or WhatsApp regarding the Omra or Hajj program you requested.
To prepare travel reservations, hotel bookings in Makkah and Madinah, flights, and official Saudi visa formalities once you decide to book.
To evaluate job applications submitted on our recruitment platform (jobs.tawaf.ma).
To maintain website security, prevent fraud, and measure advertising campaign performance.

1.4 Data Sharing, Retention & Security

We never sell, rent, or trade your personal data to third parties. Your data is accessed solely by authorized Tawaf.ma travel consultants and, when a booking is confirmed, shared strictly with official pilgrimage partners (airlines, hotels in Makkah/Madinah, and visa authorities). All data transmissions are encrypted via HTTPS/TLS, and lead records are retained for no longer than 24 months unless an earlier deletion request is submitted.

Meta Platform Requirement · User Data Deletion Instructions

2. User Data Deletion Instructions (How to Delete Your Data)

In full compliance with Meta Platform Terms, GDPR Article 17 (Right to Erasure), and Moroccan Law 09-08, any user who has interacted with our Facebook/Instagram Ads, Meta App, website forms, or WhatsApp channel has the unconditional right to request immediate and permanent deletion of their personal data from our database.

Step-by-Step Deletion Procedure:

Option A — Instant Online Deletion Request (Below): Enter your phone number or email in the automated Data Deletion Request box below and click "Submit Data Deletion Request".
Option B — By Email: Send an email to [email protected] with the subject line "Data Deletion Request" (or "Suppression des données") and include the phone number or name you provided.
Option C — Via WhatsApp: Send the message "DELETE MY DATA / حذف بياناتي" to our official WhatsApp line at +212 620-200212.
Option D — Revoking Meta App Permissions on Facebook: Go to your Facebook Account Settings & Privacy → Settings → Apps and Websites, select our application if listed, and click Remove.

Processing Timeframe: All data deletion requests are processed within 24 to 48 hours. Once completed, all associated records in our WordPress/MySQL lead tables are permanently purged and you will receive confirmation.

Français · Politique de Confidentialité & Protection des Données

3. Politique de Confidentialité (Conforme Loi Marocaine 09-08, CNDP & RGPD)

L'agence Tawaf.ma — Agence Tawaf Omra & Hajj, dont le siège principal est situé à Casablanca (Maroc) avec un réseau d'agents et d'agences partenaires dans les principales villes du Royaume, s'engage à protéger la vie privée des utilisateurs de son site web (https://tawaf.ma et https://jobs.tawaf.ma) conformément à la Loi n° 09-08 relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel (CNDP), au RGPD et aux règles de confidentialité de Meta Platforms, Inc. (Facebook / Instagram).

3.1 Données Collectées & Finalités

Demandes de renseignement et réservation Omra / Hajj : Nom complet, numéro de téléphone / WhatsApp, ville de départ, programme souhaité et nombre de voyageurs afin qu'un conseiller Tawaf puisse vous accompagner par téléphone ou WhatsApp.
Publicité Meta (Facebook Pixel & Conversions API — CAPI) : Nous utilisons le Pixel Meta et l'API Conversions (CAPI) pour mesurer la performance de nos campagnes publicitaires et optimiser la diffusion de nos offres. Les paramètres d'identification éventuels sont hachés de manière sécurisée (SHA-256) avant tout envoi.
Partage des données : Vos données personnelles sont strictement confidentielles et ne sont jamais vendues ni cédées à des tiers.

3.2 Vos Droits d'Accès, de Rectification et de Suppression

Conformément à la loi n° 09-08 et aux exigences de Meta, vous disposez d'un droit d'accès, de rectification, d'opposition et de suppression totale de vos données. Pour exercer ce droit à tout moment, envoyez un e-mail à [email protected] ou contactez-nous sur WhatsApp au +212 620-200212. Toute demande de suppression est exécutée sous 48 heures maximum.

العربية · سياسة الخصوصية وحماية المعطيات الشخصية

4. سياسة الخصوصية وحماية البيانات الشخصية — وكالة طواف (Tawaf.ma)

تلتزم وكالة طواف للحج والعمرة (Tawaf.ma)، الكائن مقرها الرئيسي بمدينة الدار البيضاء — المملكة المغربية (مع شبكة وكلاء ووكالات شريكة بمختلف مدن المملكة)، بحماية خصوصية وأمان المعطيات الشخصية لجميع زوار موقعنا الإلكتروني ومعتمرينا وحجاجنا، وذلك طبقاً لمقتضيات القانون المغربي رقم 09-08 المتعلق بحماية الأشخاص الذاتيين تجاه معالجة المعطيات ذات الطابع الشخصي (اللجنة الوطنية لمراقبة حماية المعطيات ذات الطابع الشخصي CNDP)، والنظام العام لحماية البيانات (GDPR)، وسياسات منصة Meta (فيسبوك وإنستغرام).

4.1 المعطيات التي نجمعها وكيفية استخدامها

بيانات الاستشارة والحجز: الاسم الكامل، رقم الهاتف/الواتساب، المدينة، البرنامج المطلوب (عمرة رمضان، عمرة طوال السنة، أو الحج)، وعدد المسافرين. تُستخدم هذه البيانات حصرياً للتواصل معكم من طرف مستشاري وكالة طواف وتقديم الاستشارة المجانية وإتمام إجراءات السفر والتأشيرة.
أدوات القياس والإعلانات (Meta Pixel & Conversions API): نستخدم تقنيات القياس الخاصة بشركة Meta (فيسبوك وإنستغرام) وGoogle لتحسين جودة إعلاناتنا وقياس فعاليتها مع تشفير المعطيات وفق معيار SHA-256.
السرية التامة وعدم مشاركة البيانات: لا نقوم ببيع أو تأجير معطياتكم الشخصية لأي طرف ثالث تحت أي ظرف.

4.2 كيفية طلب تعديل أو حذف بياناتكم الشخصية (Data Deletion)

يحق لأي مستخدم في أي وقت طلب الاطلاع على بياناته الشخصية أو تعديلها أو حذفها نهائياً من قاعدة بياناتنا عبر مراسلتنا على البريد الإلكتروني الرسمي [email protected] أو عبر الواتساب على الرقم +212 620-200212، أو عبر نموذج الحذف المباشر أعلاه، حيث يتم حذف البيانات نهائياً خلال أجل لا يتعدى 48 ساعة.

Terms of Service · Conditions Générales d’Utilisation

5. Terms of Service (Tawaf.ma)

By accessing and using https://tawaf.ma/ and its subpages, you agree to the following Terms of Service:

Informational & Consultation Purpose: Submitting a form or quiz on Tawaf.ma constitutes a free, non-binding consultation request. Final pilgrimage bookings are confirmed upon signing a travel contract and completing visa/travel documentation with our authorized advisers.
3D Hotel Map Accuracy: Our interactive 3D map of Makkah and Madinah hotels provides approximate walking distances and visual orientation to assist pilgrims in comparing accommodation options.
Intellectual Property: All branding, texts, 3D visualizations, and media on Tawaf.ma are the property of Agence Tawaf and may not be reproduced without written permission.
Governing Law: These Terms and our Privacy Policy are governed by the laws of the Kingdom of Morocco, under the jurisdiction of the courts of Casablanca.