Last updated: 7 October 2026
KaMabia respects the privacy of people who visit our website, enquire about a private journey or communicate with us. This policy explains what personal information we collect, why we use it, who we share it with, how long we keep it and the choices and rights available to you.
The controller of your personal information is Mohammed Al Bouhli trading as KaMabia, a sole trader established in the United Kingdom.
Business and correspondence address: 66 Paul Street, London, EC2A 4NA, United Kingdom.
Email: contact@kamabia.com
In this policy, “KaMabia”, “we”, “us” and “our” refer to that sole-trader business. KaMabia plans and organises private journeys in Morocco, supported by members of its operating team and selected local suppliers.
This policy applies when you visit kamabia.com, submit a Journey Enquiry or Private Office enquiry, contact us, ask us to shape a Morocco itinerary, or proceed with a private journey. It also applies to relevant information supplied by an authorised representative, such as a personal assistant, family office, travel adviser or security representative.
This policy does not replace privacy information given for a later specific process, such as the collection of passport, payment, accessibility, dietary or health information. If additional information is needed, KaMabia will explain why it is required before collecting it.
Information you provide may include:
Special category and highly sensitive information
Please do not send passport details, payment card details, detailed security information or unnecessary health information through the website enquiry forms. If accessibility, dietary, health, religious or other sensitive information becomes necessary, KaMabia will collect only what is needed and use it only where an appropriate legal condition applies.
Information collected from the website may include:
KaMabia may also receive information from a person authorised to act for you, from suppliers involved in a proposed journey, or from analytics and advertising providers where you have made the relevant consent choice.
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Respond to an enquiry and discuss a proposed journey | Identity, contact, enquiry and journey preferences | Steps at your request before entering a contract; legitimate interests where appropriate |
| Shape, quote and confirm a private journey | Traveller requirements, itinerary, supplier and pricing information | Steps before a contract; performance of a contract |
| Deliver and support a confirmed journey | Contact, itinerary, traveller and necessary operational information | Performance of a contract; legal obligations; vital interests in an emergency where applicable |
| Operate, protect and troubleshoot the website | Technical, security, error and access information | Legitimate interests in maintaining a secure and reliable service; legal obligation where applicable |
| Understand website use and improve the experience | Analytics and interaction information | Consent where required for storage or access technologies and related personal data |
| Measure advertising and attribute enquiries | Campaign parameters, click identifiers, landing path, sanitised referrer and lead event data | Consent where required for analytics or advertising storage and related personal data |
| Maintain records and meet legal duties | Contracts, communications, payments and required records | Legal obligation; performance of a contract; legitimate interests in establishing and defending legal claims |
Where KaMabia relies on legitimate interests, it considers the specific interest, whether the processing is necessary, and the rights and reasonable expectations of the individual. Legitimate interests are not used to bypass a consent requirement under PECR.
KaMabia does not sell personal information. Information may be shared only where reasonably necessary with:
KaMabia does not send the free-text contents of enquiry messages to advertising providers through its lead-measurement event.
Some people and providers involved in operating the website, handling enquiries or planning and delivering journeys may be located outside the United Kingdom, including in Morocco and the United States. Where personal information is transferred internationally, KaMabia will take steps intended to protect that information in line with applicable data-protection law. This may include using appropriate contractual safeguards or relying on another lawful transfer mechanism where required.
KaMabia keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, planning proposed journeys, administering confirmed journeys, meeting legal, accounting and record-keeping obligations, handling disputes, and establishing or defending legal claims. Retention periods may vary depending on the nature of the information and the relationship with KaMabia. When information is no longer needed, KaMabia will delete, anonymise or securely archive it where appropriate.
KaMabia should use proportionate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. Access should be limited to people who need the information for their role. Sensitive operational details should not be sent through the initial website forms.
Depending on the circumstances and subject to legal exceptions, you may have the right to ask KaMabia for access to your personal information, correction, erasure, restriction, data portability, or to object to certain processing. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
To make a request, email contact@kamabia.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
The website and enquiry forms are intended for adults arranging travel. KaMabia does not intend to collect information directly from children through the website. Information about a child needed for a family journey should be supplied by and handled with the responsible adult.
KaMabia does not currently operate a newsletter or routine direct-marketing programme. If this changes, KaMabia will provide appropriate information and choices before using personal information for that purpose. Any optional marketing consent will be separate from the enquiry process, specific, unticked by default and easy to withdraw.
KaMabia may update this policy when its services, providers or legal obligations change. The date above shows when this policy was last updated. Where appropriate, KaMabia will bring material new uses of personal information to the attention of affected individuals before the new processing begins.
Questions, rights requests and privacy complaints should be sent to:
Mohammed Al Bouhli trading as KaMabia
Business and correspondence address: 66 Paul Street, London, EC2A 4NA, United Kingdom.
Email: contact@kamabia.com