Privacy policy
Last updated: 17 October 2026
XS Ride takes the protection of your personal data seriously. This page explains what information we collect on xsride.com, why, how long we keep it and what your rights are. It is drawn up in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for customers resident in the European Union, the General Data Protection Regulation (GDPR).
1. Data controller
The xsride.com website is published by XS Ride, a car rental company established in Morocco.
Company name: [to be completed] · Trade register (RC): [to be completed] · ICE: [to be completed]
Registered office: [address to be completed]
Contact: contact@xsride.com · +212 7 00 77 43 54 (phone and WhatsApp)
2. The data we collect
- Your booking request: the car chosen, city, pick-up point (airport, branch or delivery address), dates and times, first name, surname, phone number and, if you provide them, your email address and message.
- To draw up the rental agreement: a copy of your driving licence and identity card or passport, and the information needed for the deposit and payment. These documents are requested when the car is handed over, never on the website.
- Your exchanges with us: messages sent by WhatsApp, phone, email or Instagram.
- Browsing data: pages viewed, type of device and browser, approximate city and source of the visit, collected by audience measurement and advertising cookies (see section 6).
3. Why we use it
- To respond to your request, confirm availability and the price, and arrange delivery of the car (pre-contractual steps and performance of the contract).
- To draw up and perform the rental agreement and to handle the deposit, claims, fines and any disputes (performance of the contract and legal obligations).
- To keep our accounts and respond to requests from the authorities (legal obligations).
- To measure traffic to the website and the effectiveness of our advertising, in order to improve our services (your consent or our legitimate interest, as applicable).
We never sell your data.
4. Who has access to it
Only the XS Ride team handles your requests. Some data passes through technical service providers acting on our behalf: our hosting provider (Hostinger), WhatsApp (Meta) when you contact us that way, Google (Google Analytics and Google Ads) for audience measurement and advertising, and our insurer in the event of a claim. The authorities may access it where required by law.
Some of these providers are located outside Morocco (European Union, United States). These transfers are covered by the safeguards they offer (in particular standard contractual clauses).
5. How long we keep it
- Requests that do not lead to a rental: 12 months after our last exchange.
- Rental agreement and related documents: for the duration of the rental, then for the applicable legal limitation periods (up to 10 years for accounting records).
- Audience measurement data: 14 months at most.
6. Cookies
The website uses Google Analytics to count visits and understand how the site is used, and Google Ads to measure the effectiveness of our ads and show you relevant XS Ride advertising. These tools place cookies on your device. You can refuse or delete them at any time in your browser settings, and manage ad personalisation at adssettings.google.com. Refusing cookies does not prevent you from using the website or making a booking.
7. Your rights
You may at any time request access to your data, its rectification or erasure, or object to its use for marketing purposes. If you live in the European Union, you also have the rights to restriction of processing and to data portability. Write to us at contact@xsride.com; we reply within one month.
You may also contact Morocco's data protection authority, the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP, www.cndp.ma) or, in the European Union, the data protection authority of your country.
8. Security
The website is served over an encrypted connection (HTTPS). Identity documents and driving licences are stored in a restricted-access area reserved for the XS Ride team.
9. Changes
We may update this policy. The date at the top of the page shows the latest version.