Privacy Policy
1. Data controller
VITI CAR, based in Rabat-Salé, Morocco, is the data controller responsible for the processing of personal data as described in this policy. This processing is carried out in accordance with Law No. 09-08 on the protection of natural persons with regard to the processing of personal data, under the supervision of the National Commission for the Supervision of Personal Data Protection (CNDP).
2. Data we collect
When you book a vehicle, fill in a form or contact us via WhatsApp, we collect: your full name, your telephone number and/or WhatsApp number, your email address, your booking details (vehicle chosen, dates, collection and return locations), the content of your WhatsApp exchanges with our team, as well as a copy of your ID and driving licence, which are required for the verification process necessary for any vehicle hire.
3. How we use your data
Your data is used solely to process your booking request, manage your rental, provide customer support, contact you regarding your booking via WhatsApp or email, and improve our services. We never sell your personal data or share it with third parties for commercial purposes.
4. Sharing with third parties
When you contact us via WhatsApp, your message is processed by Meta’s infrastructure (WhatsApp Business), in accordance with their own privacy policy. Our website also uses Google Tag Manager to measure traffic and browsing behaviour, which may involve the placement of audience measurement cookies (e.g. Google Analytics) and, depending on the active configuration, advertising tools (Google Ads, Meta Pixel, TikTok Pixel). These tools collect only technical and anonymised browsing data — never your personal details or the content of your WhatsApp messages.
5. Cookies and similar technologies
Our website uses essential cookies (for example, to remember your preferred language) as well as audience measurement cookies linked to Google Tag Manager, when this is active. Certain features (welcome pop-up, promotional banner) use your browser’s local storage rather than cookies as such, and are automatically deleted when you log out. You can disable non-essential cookies at any time in your browser settings.
6. Data retention period
Copies of your identity documents are deleted at the end of your rental period, unless there is a legal obligation to retain them for a longer period. Information relating to your booking (name, contact details, rental details) is retained for as long as is necessary for the commercial relationship and to comply with the accounting obligations applicable in Morocco. Messages exchanged via the contact form are retained for as long as is necessary to process your enquiry.
7. Data security
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Access to this data is strictly limited to members of our team who need it to process your booking.
8. Your rights
In accordance with Law 09-08, you have the right to access, rectify, object to and delete your personal data. To exercise these rights, please contact us at contact@viticar.ma. You also have the right to lodge a complaint with the CNDP if you feel that your rights have not been respected.
9. Changes to this policy
This privacy policy may be updated to reflect changes in the law or changes to our practices. The date of the last update is shown below. We encourage you to review it regularly.
10. Marketing communications
If you subscribe to our newsletter or opt in to promotional messages, we use your email address or WhatsApp number to send offers and updates. You can unsubscribe at any time via the link in our emails or by telling your concierge on WhatsApp — we will stop marketing messages while still contacting you about any active booking.
11. Children's privacy
Our services are intended for adults only — renting a vehicle requires being at least 21 years old with a valid driving licence. We do not knowingly collect personal data from anyone under 18.
12. International data transfers
Some of the third-party tools described in section 4 (Google Tag Manager, Meta/WhatsApp Business, and similar analytics or advertising tools) may process data outside Morocco, including in the United States. Where this occurs, it is governed by that provider's own safeguards and privacy policy.
Last updated: August 2026