Privacy Policy
This policy explains how SKY EXPERIENCE collects and uses personal data when you visit our website, make a booking or contact us.
Who we are
SKY EXPERIENCE is a hot-air-balloon experience company based in Marrakech, Morocco, and is the data controller for the personal data described in this policy. You can contact us using the details on our Contact page.
Data we collect
Booking and inquiry details you provide: name, email address, phone number, country of residence, pickup location, number of passengers, special occasion and any requests or health/mobility information you choose to share so we can operate your flight safely.
Payment information is processed directly by our payment provider (Stripe) when online payment is enabled. We never receive or store your full card number.
Technical and usage data: anonymous events such as booking starts or WhatsApp clicks, used to improve our service. If analytics cookies are enabled, they are described in our cookie notice.
How we use your data
To process and manage your booking or request, arrange your pickup, communicate with you before and after your flight, handle payments and refunds, comply with legal obligations, and — only if you opted in — send you occasional news and offers.
Legal bases
We process your data to perform our contract with you, to comply with legal obligations, on the basis of our legitimate interests in running and improving our business, and on your consent where required (for example marketing emails).
Sharing
We share data only with service providers who help us operate (hosting, email delivery, payment processing, messaging) and only as needed. We do not sell your personal data.
Retention
Booking records are kept for as long as necessary for the purposes above and for the periods required by accounting and tax law. Inquiries that do not lead to a booking are deleted after a reasonable period.
Your rights
In accordance with Moroccan Law No. 09-08 on the protection of personal data and, where applicable, the EU General Data Protection Regulation, you may request access to, correction or deletion of your data, object to its processing or withdraw consent at any time by contacting us.
Security
Customer data is stored in a protected database. Access to our administration system is restricted to authorised staff with individual accounts and role-based permissions.