1. Introduction

Ederest (formerly UP2CAREER), a Moroccan SARL registered under RC 638733, ICE 003546325000059, is committed to protecting the privacy and personal data of users of the Marravel application and website marravel.com (hereinafter "the Service").

This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal data, in accordance with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

2. Data Controller

The data controller is:
Ederest
Rue Ahmed El Majjati, Residence Les Alpes, 1st floor N°8
Quartier Maarif, Casablanca, Morocco
Email: contact@ederest.com
Phone: +212 (0) 612 498 432

3. Data We Collect

3.1 Data you provide

Account information: name, email address, phone number, preferred language
Payment information: processed securely through Payzone — we do not store card details
Communication data: messages you send to our support team

3.2 Data collected automatically

Location data: GPS coordinates during active tours (only when you grant permission)
Usage data: tours completed, challenges solved, points earned, app interactions
Device data: device type, operating system, app version, unique device identifier
Log data: IP address, access times, pages viewed

3.3 Cookies and similar technologies

Our website uses cookies. For more details, please refer to our Cookie Policy.

4. How We Use Your Data

We use your personal data to:

Provide and improve the Service (tour navigation, challenges, bookings)
Process payments and manage your account
Send you booking confirmations and tour reminders
Personalize your experience and recommend tours
Ensure security and prevent fraud
Comply with legal obligations
Send promotional communications (only with your consent)

5. Legal Basis for Processing

We process your data based on:

Contract performance: to provide the Service you requested
Consent: for location data, marketing communications, and cookies
Legitimate interest: to improve our Service and ensure security
Legal obligation: to comply with applicable laws

6. Data Sharing

We may share your data with:

Payment provider: Payzone, for processing payments
Hosting provider: Microsoft Azure, for data storage and infrastructure
Analytics providers: to understand usage patterns and improve the Service
Legal authorities: when required by law or to protect our rights

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 3 years to comply with legal obligations. Payment records are retained for 10 years as required by Moroccan commercial law.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security audits.

9. Your Rights

Under Moroccan Law 09-08, you have the right to:

Access: request a copy of your personal data
Rectification: correct inaccurate or incomplete data
Deletion: request deletion of your data
Opposition: object to the processing of your data
Withdraw consent: withdraw previously given consent at any time

To exercise your rights, contact us at contact@ederest.com. We will respond within 30 days.

10. International Transfers

Your data may be processed on servers located in the European Union (Microsoft Azure, France Central region). These transfers are governed by appropriate safeguards to ensure an adequate level of data protection.

11. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

13. Contact & Complaints

For any questions or complaints regarding this Privacy Policy:
Email: contact@ederest.com
Phone: +212 (0) 612 498 432
You may also file a complaint with the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel) at www.cndp.ma.