Privacy Policy

MarHire Car Essaouira — Privacy Policy

Update date: 08 November 2026

MarHire Car Essaouira ("MarHire Car Essaouira", "MarHire", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use our car rental services, how and why we use it, who we share it with, how long we keep it, and the rights and choices available to you.

It should be read together with our Cookie Policy, which describes how we use cookies and similar technologies.

This policy applies worldwide. The legal bases we rely on and your privacy rights depend on where you live. Region-specific information is provided in Sections 5 and 12.

1) Who We Are (Data Controller)

MarHire Car Essaouira is a local car rental service operating under the MarHire brand in Essaouira, Morocco. We help customers book rental vehicles for airport pickups, hotel deliveries, city rentals, and travel throughout Morocco.

Our car rental services include vehicles supplied through MarHire and its contracted rental partners, subject to availability and the rental conditions confirmed during booking.

The service is operated by MarHire LLC, a limited liability company registered in Wyoming, USA, under registration number 2025-001769503, with operations based in Morocco.

For the purposes of applicable data-protection laws, including the EU and UK GDPR, Swiss FADP, Morocco's Law No. 09-08, and applicable US state privacy laws, MarHire LLC is the data controller for personal data collected through our website and official communication channels.

When an independent car rental partner receives personal data to provide your rental, that partner may act as an independent data controller for its own legal, insurance, and operational responsibilities.

• Website: carhireessaouira.com

• Email: info@marhire.com

• Phone/WhatsApp: +212 660 745 055

• Privacy contact: info@marhire.com

• Website languages: EN, FR, ES, DE, IT, PL, NL, PT, RU, AR

2) Scope

This Privacy Policy applies to personal data collected through MarHire Car Essaouira and its official communication channels.

It applies when you:

• Browse our car rental website.

• Request a quote or make a car rental booking.

• Create or use a MarHire account, where available.

• Arrange vehicle pickup or delivery at Essaouira-Mogador Airport, a hotel, riad, or another agreed location in Essaouira.

• Pick up, drive, or return a rental vehicle.

• Request insurance options, additional drivers, child seats, or other rental extras.

• Communicate with us through WhatsApp, email, phone, or social media.

• Receive marketing communications from us.

• Otherwise interact with MarHire Car Essaouira.

This policy also covers personal data processed through MarHire's shared booking and account systems where they are used to manage your car rental.

3) Personal Data We Collect

Data You Provide Directly

• Identification and contact: first name, last name, email address, phone/WhatsApp number, country of residence, and billing details where required.

• Car rental booking details: rental dates, pickup and return times, pickup and drop-off locations, selected vehicle category, rental duration, and booking reference.

• Airport and accommodation delivery: flight number, arrival information, hotel or riad name, accommodation address, and other details needed to arrange vehicle delivery or collection.

• Driver verification: date of birth, driving licence details, issuing country, licence validity, and driving experience when required by the rental conditions, insurer, or applicable law.

• Identity documents: passport, national identity card, or other documents where required to verify a driver's identity or complete the Rental Agreement.

• Additional drivers: identification and driving licence information for authorised additional drivers.

• Insurance and protection: selected protection plan, insurance excess, security deposit, and optional coverage details.

• Rental records: signed Rental Agreement, vehicle condition reports, mileage, fuel level, and photographs or videos taken during vehicle pickup and return.

• Accidents and incidents: damage reports, accident statements, police reports, insurance claim information, relevant third-party details, and photographs.

• Payment information: payment amounts, payment status, transaction references, refunds, deposit records, and payment method information necessary for accounting and booking management.

• Customer support: messages, enquiries, complaints, and attachments you voluntarily provide.

• Preferences: language, saved vehicles, claimed coupon codes, and marketing preferences.

• Company invoice information: company name, address, and tax or registration number when requested.

Payment security: We do not store full payment card numbers. Online payments are processed through Stripe's secure checkout using MarHire payment links. We may retain payment status, transaction references, amounts, and, where supplied by Stripe, the card brand and last four digits. Cash payments made at pickup may also be recorded against your booking.

Data Collected Automatically

When you visit our website, we may automatically collect:

• Device and usage information: IP address, device type, browser, operating system, visited pages, referring URLs, timestamps, and error logs.

• Cookies and similar technologies: identifiers used for security, language preferences, booking continuity, analytics, and advertising.

• Approximate location: location estimated from your IP address for language selection, website performance, and fraud prevention.

• Website interactions: information about clicks, scrolling, navigation, and technical problems, subject to applicable consent requirements.

For more information, see our Cookie Policy.

Data Received From Third Parties

We may receive personal data from:

• Rental partners: booking confirmation, vehicle availability, delivery information, rental changes, and post-rental incident reports.

• Payment providers: payment confirmations, refund information, and fraud-prevention signals.

• Insurance providers: claim updates, incident assessments, and damage-related information.

• Public authorities: traffic fines, parking notices, and other lawful notices connected to a rental vehicle.

• Analytics and advertising services: website performance information and campaign measurement identifiers.

• Google or Apple sign-in services: limited account information where you choose these methods through a supported MarHire account.

4) Your MarHire Account and Sign-In

You can request or book a car rental without creating an account.

If you create a MarHire account through a supported website or app, it may allow you to manage bookings, saved vehicles, and claimed coupon codes across participating MarHire services.

Email Sign-In

Where email-code authentication is available, we send a one-time verification code to your email address. Codes expire after a short period and can only be used once.

Google Sign-In

If you choose "Continue with Google," Google may provide:

• Your Google account identifier.

• Your email address and verification status.

• Your name and profile picture, where provided.

We use this information to create or access your MarHire account and connect eligible bookings to it.

We do not store your Google profile picture, use Google sign-in data for advertising, or request access to Gmail, Google Drive, contacts, or calendars.

Apple Sign-In

Where available, Apple may provide your Apple account identifier, an email address (including a private relay address), and your name when first signing in.

This information is used for account creation and authentication.

Account Security and Deletion

Where persistent sign-in is supported, authentication tokens may keep you signed in for up to 30 days.

You can request account deletion through:

• MarHire Account Deletion

• Email: info@marhire.com

Deleting your account removes eligible profile information, saved listings, sign-in links, and claimed coupon codes.

Important: Rental Agreements, invoices, payment records, and insurance documents may be retained where required by law or needed to resolve claims or disputes.

5) How and Why We Use Your Data (Purposes and Legal Bases)

Purpose	What It Covers	Legal Basis
Car rental bookings	Enquiries, reservations, confirmations, changes, cancellations, and rental coordination	Performance of a contract
Vehicle pickup and return	Airport delivery, hotel or riad delivery, vehicle handover, and collection	Performance of a contract
Driver eligibility	Age, driving licence, and identity checks	Contract / legal obligation / legitimate interests
Insurance and protection	Selected coverage, excess, deposits, claims, and damage records	Contract / legal obligation / legitimate interests
Rental management	Rental Agreements, mileage, fuel levels, and vehicle condition records	Contract / legitimate interests
Traffic fines and incidents	Processing fines, accidents, damage claims, and disputes	Legal obligation / contract / legitimate interests
Payments and refunds	Secure payments, deposit management, refunds, invoicing, and fraud prevention	Contract / legal obligation / legitimate interests
Accounts and authentication	Account creation, secure sign-in, saved vehicles, and booking history	Contract / legitimate interests
Customer support	WhatsApp, phone, email enquiries, and post-rental assistance	Contract / legitimate interests
Website improvement	Performance monitoring, troubleshooting, analytics, and user experience	Legitimate interests / consent where required
Marketing	Promotional messages, rental offers, and retargeting where permitted	Consent / legitimate interests
Legal compliance	Accounting, taxation, lawful requests, disputes, and enforcement of rental terms	Legal obligation / legitimate interests

Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

Where we rely on legitimate interests, you may have the right to object to processing, as explained in Section 12.

6) Cookies, Analytics and Advertising

MarHire Car Essaouira uses cookies and similar technologies to maintain website functionality, improve performance, remember preferences, and measure advertising campaigns.

These may include:

• Strictly necessary cookies: website security, session management, booking continuity, and consent preferences.

• Functional technologies: language preferences, saved listings, and claimed coupon codes.

• Google Analytics 4: website traffic and visitor behaviour measurement.

• Microsoft Clarity: website usability analysis, including clicks, scrolling, and mouse movements.

• Google Ads: advertising measurement and remarketing.

• Meta and TikTok: campaign measurement and retargeting where applicable.

• Trustindex: displaying customer reviews.

Microsoft Clarity is configured to mask information entered into forms and runs only after analytics consent where legally required.

You can manage your preferences through our cookie banner, the "Manage cookies" option where available, and your browser settings.

Where required by law, non-essential analytics and advertising technologies load only after your consent.

We also honour Global Privacy Control (GPC) signals where applicable.

For details about the specific cookies, providers, and retention periods, see our Cookie Policy.

7) Vehicle Rental Records and Driver Verification

Car rental services require additional personal information to meet contractual, legal, and insurance requirements.

Driver Verification

Before releasing a rental vehicle, we or the supplying rental partner may verify:

• Driver identity.

• Minimum driver age.

• Driving licence validity.

• Driving experience where required.

• Authorisation for additional drivers.

The minimum driver age depends on the selected vehicle and rental conditions.

Vehicle Pickup and Return

We may record:

• Vehicle model and registration details.

• Pickup and return dates.

• Mileage and fuel levels.

• Vehicle condition photographs and videos.

• Existing damage and new damage identified during the rental.

• Signed handover and return documents.

These records help confirm vehicle condition, manage deposits, and resolve disputes.

Accidents, Damage and Insurance Claims

If an incident occurs, we may collect accident details, photographs, police reports, insurance information, and relevant third-party contact details.

We share this information only with parties involved in managing the incident, including insurers, rental partners, authorities, and professional advisers where necessary.

Traffic Fines and Other Charges

Where applicable, we may process notices relating to traffic violations, parking fines, tolls, or other charges incurred during the rental period.

These records may be retained until the matter is resolved and any applicable legal retention period has expired.

8) How We Share Your Data

We share personal data only when necessary to provide our services, meet legal requirements, or operate our systems.

Recipients may include:

• Car rental partners and vehicle suppliers: identification, driver eligibility, booking details, rental periods, and pickup or return arrangements.

• Insurers and claims handlers: accident information, damage assessments, insurance documentation, and claim records.

• Payment processors and banks: including Stripe, for secure payment processing, refunds, and related payment administration.

• Hosting, security, and CDN providers: including Cloudflare and relevant hosting providers.

• Communication providers: email, SMS, and WhatsApp services used for booking confirmations and customer support.

• Analytics and advertising providers: Google, Microsoft, Meta, and TikTok, subject to consent requirements and applicable privacy laws.

• Government authorities: when necessary to comply with lawful requests, fines, or legal obligations.

• Professional advisers: accountants, auditors, legal advisers, and other professionals where necessary.

We do not sell your personal information.

However, certain advertising activities may qualify as "selling" or "sharing" personal information under some US state privacy laws. Where applicable, you may opt out of these activities.

Information received through Google or Apple sign-in is not used for advertising.

9) International Data Transfers

MarHire operates from Morocco and the United States.

Our technology providers, payment processors, and other service providers may process personal data in countries including:

• Morocco.

• United States.

• European Economic Area (EEA).

• United Kingdom.

• Other locations where authorised providers operate.

Where personal data is transferred internationally, we use appropriate safeguards required by applicable law.

These may include:

• Adequacy decisions.

• EU Standard Contractual Clauses (SCCs).

• The UK Addendum where applicable.

• The EU-US or UK-US Data Privacy Framework where the recipient is appropriately certified.

• Additional technical and contractual protections where required.

You may request more information about international transfers by emailing info@marhire.com.

10) Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy.

Data Category	Retention Period
Rental bookings, agreements, and invoices	Typically 6 years for accounting, tax, and claims purposes
Account profiles and saved information	Until account deletion or after 3 years of inactivity
Email authentication codes	Until used or expired, generally within minutes
Driving licence and identification records	As long as necessary for the rental, legal obligations, or insurance requirements
Vehicle condition photos and videos	Until rental closure and resolution of related claims or disputes, subject to applicable retention requirements
Accident and insurance records	Until claims and applicable limitation periods are resolved
Traffic fines and related records	Until settlement and resolution of any associated dispute, subject to applicable legal requirements
Customer support communications	Up to 3 years after closure
Fraud-prevention records	Up to 3 years after the last incident unless longer retention is necessary
Marketing information	Until you unsubscribe or withdraw consent, with minimal suppression records retained where necessary
Web logs and analytics	Typically 12–24 months before aggregation or anonymisation

Some records may be retained longer where required by law, insurance obligations, or ongoing legal disputes.

When information is no longer needed, it is deleted or anonymised using appropriate procedures.

11) Data Security

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

These measures include:

• HTTPS encryption for data transmitted through our website.

• Access controls and staff permissions.

• Firewalls and website security protections.

• Security logging and monitoring.

• Regular software updates and security maintenance.

• Restricted access to sensitive booking and driver information.

• Secure payment processing through third-party payment providers.

No online service can guarantee complete security.

If you suspect unauthorised access to your personal data or MarHire account, contact us immediately at info@marhire.com.

12) Your Privacy Rights Worldwide

Depending on where you live, you may have the right to:

• Access a copy of your personal data.

• Correct inaccurate or incomplete information.

• Request deletion of your personal information.

• Restrict or object to certain processing activities.

• Request data portability where applicable.

• Withdraw consent at any time.

• Opt out of certain targeted advertising, data sales, or sharing.

• Object to direct marketing and related profiling.

• Exercise your rights without unlawful discrimination.

Region-Specific Privacy Rights

European Economic Area, United Kingdom and Switzerland

Under the EU GDPR, UK GDPR, and Swiss FADP, eligible individuals have rights including access, rectification, erasure, restriction, objection, and other rights provided by applicable law.

You may also complain to the relevant supervisory authority.

Morocco

Under Morocco's Law No. 09-08, individuals have rights of access, rectification, and opposition, subject to applicable conditions.

You may contact the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

United States — California

Under the CCPA/CPRA, eligible California residents may request access, correction, deletion, and information about data practices. They may also opt out of applicable sales or sharing of personal information.

United States — Other States

Residents of states with applicable privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, may have additional rights depending on their location and the law's scope.

Brazil

Under the LGPD, individuals have rights including access, correction, deletion in applicable circumstances, portability, and information about data sharing.

You may contact the Brazilian data-protection authority (ANPD).

Canada

Under PIPEDA and relevant provincial laws, individuals have rights including access and correction, with additional protections available under Quebec's Law 25.

Australia, South Africa and Other Regions

Additional rights may apply under local privacy laws, including Australia's Privacy Act and South Africa's POPIA.

Other Countries

We aim to provide reasonable access, correction, and deletion options to all customers, subject to identity verification and applicable legal obligations.

How to Exercise Your Rights

Send an email to info@marhire.com with the subject:

Privacy Request — MarHire Car Essaouira

Please describe the request clearly.

We may ask for information necessary to verify your identity before processing the request.

You may also use an authorised representative where permitted by law.

Certain records, including Rental Agreements, invoices, insurance claims, and accident documentation, may need to be retained for legal, contractual, or insurance reasons.

Right to Complain to a Regulator

• EEA: European Data Protection Board — Members

• United Kingdom: Information Commissioner's Office

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC).

• Morocco: Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

• Brazil: Autoridade Nacional de Proteção de Dados (ANPD).

• Other jurisdictions: your relevant privacy commissioner, data-protection authority, or state attorney general.

13) Children's Privacy

MarHire Car Essaouira's rental services are intended for adults who meet the minimum driver age and licence requirements for the selected vehicle.

We do not knowingly collect personal data directly from children under 16, except limited information provided by a parent or guardian where necessary for a rental-related service, such as requesting a child seat.

If you believe a child has provided personal data without appropriate authorisation, please contact info@marhire.com.

We will review the request and take appropriate action.

14) WhatsApp and Other Messaging Apps

MarHire Car Essaouira uses WhatsApp and other communication channels to help customers arrange and manage rentals.

These communications may include:

• Rental availability enquiries.

• Booking confirmations.

• Airport, hotel, and riad delivery arrangements.

• Vehicle pickup and return coordination.

• Insurance and protection questions.

• Rental extensions and changes.

• Emergency and incident support.

• Customer service requests.

When you contact us through WhatsApp or another messaging platform, that service also processes your phone number and message content under its own privacy terms.

You may request communication by email instead.

Email: info@marhire.com

15) Fraud Prevention, Automated Decisions and Profiling

We take reasonable steps to protect customers, vehicles, rental partners, and MarHire from fraud, misuse, and unlawful activity.

Where necessary, we may review information associated with:

• Suspected fraudulent bookings.

• Invalid or misleading driver information.

• Payment disputes or suspected payment fraud.

• Repeated no-shows.

• Serious misuse of rental vehicles.

• Abusive behaviour or unresolved incidents.

Relevant information may be flagged for review by authorised staff.

We do not make decisions producing legal or similarly significant effects based solely on automated processing.

We may also use limited profiling for website personalisation and relevant rental offers, subject to applicable privacy laws and consent requirements.

You can object to direct marketing profiling at any time.

16) Third-Party Links

Our website may contain links to:

• Other MarHire websites.

• Secure payment providers.

• Social media platforms.

• External service providers.

• Other third-party websites.

We are not responsible for the privacy practices of independent third-party websites.

We recommend reviewing their privacy policies before submitting personal information.

17) Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Car rental operations.

• Website functionality.

• Payment or booking systems.

• Data-processing practices.

• Applicable privacy laws and regulations.

The latest version will be published on our website with an updated date.

Where appropriate, we may also notify customers of significant changes through our website or by email.

18) How to Contact Us

If you have questions about this Privacy Policy, how we process personal data, or how to exercise your privacy rights, please contact us.

MarHire Car Essaouira — operated by MarHire LLC

• Website: carhireessaouira.com

• Email: info@marhire.com

• Phone/WhatsApp: +212 660 745 055

• Privacy requests: info@marhire.com

• Operating location: Essaouira, Morocco

For privacy requests, use the email subject "Privacy Request — MarHire Car Essaouira".

We will review your request and respond in accordance with applicable data-protection laws.