Privacy Policy
1. Introduction & Data Controller
This Privacy Policy explains how Malak Prestige Car SARLAU ("we", "our", "us"), a car rental company registered in Casablanca, Morocco, collects, uses, discloses, and safeguards your personal information when you use our services, visit our website at malakprestigecar.com, or make a reservation through third-party platforms such as Booking.com or RentalCars.com.
We are committed to protecting your privacy in accordance with:
- The Moroccan Law No. 09-08 on the protection of personal data (CNDP).
- The principles of the General Data Protection Regulation (GDPR) of the European Union.
- The data handling standards required by Booking.com and RentalCars.com for partner suppliers.
Data Controller Information:
- Business Name: Malak Prestige Car SARLAU
- Registration Number (RC): 646629
- Tax ID (IF): 66096149
- National Social Security (CNSS): 5721583
- National ID (ICE): 003594447000080
- Address: JAMILA 04 RUE 93 No 64 CD, Casablanca, Morocco
- Email: contact@malakprestigecar.com
- Phone: +212 667 787 000
2. Personal Data We Collect
We collect the following categories of personal data:
- Identity Data: Full name, date of birth, nationality, gender.
- Identity Documents: Passport number, National Identity Card (CIN) number, Driver's License number and expiry date.
- Contact Data: Email address, phone number, home address.
- Financial Data: Payment card type and last 4 digits (full card details are processed securely by our payment provider and never stored by us). Security deposit pre-authorization reference.
- Booking Data: Rental dates, vehicle selected, pickup/drop-off locations, booking reference number, booking source (direct, Booking.com, RentalCars.com, etc.).
- Technical Data: IP address, browser type, device information, and cookies when you visit our website.
- Usage Data: Information about how you use our website and services.
3. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Performance of a Contract: Processing your booking, verifying your identity and driving license, managing your rental agreement, processing payments and deposits.
- Legal Obligation: Compliance with Moroccan transportation law, tax regulations, and reporting obligations to authorities (e.g., in case of traffic violations).
- Legitimate Interests: Fraud prevention, vehicle security monitoring (GPS tracking in case of theft or border violation), and improving our services.
- Consent: Sending marketing communications (where you have opted in). You may withdraw consent at any time.
4. How We Use Your Data
Your personal data is used exclusively for the following purposes:
- Processing and confirming your rental reservation.
- Verifying your identity, age, and driving eligibility before vehicle handover.
- Managing payments and security deposit pre-authorizations.
- Preparing and managing your rental contract.
- Communicating with you regarding your booking (confirmation, reminders, updates).
- Handling damage claims, insurance reporting, and traffic violation management.
- Complying with legal and regulatory obligations under Moroccan law.
- Anonymized GPS vehicle tracking for fleet security (in theft or cross-border violation scenarios only).
- Sending service-related communications and, with your consent, promotional offers.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data to any third party.
Your data may be shared with the following categories of recipients, strictly for the purposes described in this policy:
- Booking Platforms (Booking.com, RentalCars.com): We exchange booking-related data with the platform through which your reservation was made, in accordance with their data processing agreements.
- Insurance Companies: In the event of an accident or damage claim, relevant data is shared with our insurance provider.
- Moroccan Authorities: We are legally required to share renter information with the police, courts, or tax authorities upon lawful request, in particular in cases of traffic violations or investigations.
- Payment Processors: Secure payment data is processed by our certified payment gateway provider. We do not store full card details.
- IT & Hosting Providers: Our website and booking system may be hosted by third-party providers who process data on our behalf under strict confidentiality agreements.
6. Data Retention
We retain your personal data for the following periods:
- Rental contract data: 5 years from the end of the rental, as required by Moroccan tax and commercial law.
- Booking and payment records: 5 years for accounting and legal compliance purposes.
- Identity document copies: Deleted or destroyed within 30 days of the rental end date, unless required longer by law.
- Marketing data (with consent): Until you unsubscribe or withdraw consent.
- Technical/website data (cookies, logs): Up to 13 months.
7. Your Rights
Under Moroccan Law 09-08 and GDPR principles, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right of Rectification: You can ask us to correct inaccurate or incomplete data.
- Right of Erasure ("Right to be Forgotten"): You can request deletion of your data, subject to legal retention obligations.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw it at any time without affecting prior processing.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Moroccan Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) if you believe your data rights have been violated.
To exercise any of these rights, please contact us at: contact@malakprestigecar.com or +212 667 787 000. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- All data transmitted between your browser and our website is encrypted using TLS/SSL.
- Access to personal data is restricted to authorized staff on a need-to-know basis.
- Payment information is processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers.
- Physical copies of identity documents are stored securely and destroyed after the retention period.
In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities in accordance with applicable law.
10. Bookings via Booking.com & RentalCars.com
When you book our services through Booking.com or RentalCars.com, your personal data is initially collected by those platforms and shared with us to fulfill your rental agreement. Their respective privacy policies also apply to that data collection:
We process data received from these platforms solely to fulfil the rental contract and in accordance with our data processing agreements with those platforms.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform partner requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
12. Contact Us
For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection contact:
- Company: Malak Prestige Car SARLAU
- Address: JAMILA 04 RUE 93 No 64 CD, Casablanca, Morocco
- Email: contact@malakprestigecar.com
- Phone: +212 667 787 000
- WhatsApp: +212 667 787 000
- Website: www.malakprestigecar.com
Malak Prestige Car © 2026
Official Corporate Legal Document