Privacy Policy

OneClickDrive.ma respects your privacy and is committed to protecting the personal data we collect from you. This Privacy Policy explains how OneClickDrive.ma collects, uses, shares and protects personal data in connection with the Morocco marketplace.

1. Who we are and who controls your data

For this Privacy Policy, “OneClickDrive”, “we”, “us” or “our” means the legal entity identified as the operator of OneClickDrive.ma in the website Legal Notice. Where a OneClickDrive group company or an independent payment service provider is expressly identified during checkout as a payment or collection entity, that entity may separately process the payment-related data necessary for its role.

OneClickDrive operates an online marketplace and booking-intermediation service connecting users with independent car-rental companies and other mobility suppliers in Morocco (“Suppliers”). A Supplier that receives your information in order to quote, confirm, prepare or perform a rental may process that information independently for the rental relationship and is responsible for complying with its own legal obligations as a data controller or processor, as applicable.

Our processing of personal data is governed, where applicable, by Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data and by the requirements and decisions of the Commission nationale de contrôle de la protection des données à caractère personnel (“CNDP”). Mandatory rules of another jurisdiction may additionally apply in a specific case.

2. Personal data we may collect

2.1 Identity, contact and account data

• Name, title, date of birth, nationality, residential country, language preference and account identifiers.
• Telephone number, WhatsApp number, email address, billing details and other contact information.
• Login, verification and authentication information used to secure an account or booking.

2.2 Rental and eligibility data

• Requested vehicle, rental dates, pickup and return location, flight or accommodation details where relevant to delivery, additional-driver information and special rental requests.
• Driver’s licence information, passport or national identification information, age/eligibility information and copies of documents where they are necessary for a Supplier to assess or perform a booking and where collection is lawful.
• Information relating to insurance, claims, incidents, damage or traffic matters when you ask OneClickDrive to assist with a booking-related dispute or support case.

We seek to avoid collecting more identification or sensitive information than is necessary. Where Moroccan law or CNDP formalities require prior authorization, notification, consent or another safeguard for a particular category of data, we will process that data only subject to the applicable requirement.

2.3 Booking, transaction and payment data

• Quotation requests, booking references, Supplier identity, quoted price, booking amount, balance due, cancellation/refund status and transaction history.
• Payment status, payment token or reference, card type and masked card details that a payment provider makes available to us. Full payment-card credentials are normally entered into and processed by the relevant payment service provider rather than stored by OneClickDrive.
• Fraud-prevention, chargeback and dispute information associated with a transaction.

2.4 Communications and support data

• Messages exchanged through the website, email, WhatsApp, SMS and other supported channels.
• Customer-support notes and, where lawful and appropriately disclosed, telephone or voice recordings used for quality, security, evidence, training or dispute-resolution purposes.
• Reviews, ratings, complaints, photographs, documents and other materials you choose to submit.

2.5 Technical, device and usage data

• IP address, browser and device type, operating system, language, approximate location derived from IP or device settings, session data, referral URL and diagnostic/security logs.
• Cookie identifiers, analytics events, advertising-attribution information and interactions with pages, forms, listings or campaigns, subject to your choices and applicable law.

2.6 Supplier and business-contact data

• For Supplier representatives: company name, representative details, business contact information, fleet/listing data, account and subscription information, commercial communications, quality metrics and booking-performance data.

3. How we obtain personal data

We may obtain personal data directly from you; from a person making a booking on your behalf; from a Supplier in connection with a quotation or rental; from payment, fraud-prevention, communications, hosting, analytics or advertising service providers; from your device and browser; and from OneClickDrive affiliates where the sharing is lawful and relevant to the service you requested.

If you provide personal data about another person, such as an additional driver, you must have a lawful basis and authority to provide it and must ensure that person is informed about the relevant processing.

4. Why we process personal data

Depending on the processing activity and the law that applies, we process personal data with your consent where consent is required; to take steps at your request or perform a contract; to comply with legal obligations; to protect legitimate business, security and fraud-prevention interests where those interests are permitted and do not override your rights; or on another basis recognized by applicable law.

• Respond to enquiries, obtain quotations, match you with suitable Suppliers and create, confirm, administer, modify or cancel bookings.
• Transmit the information reasonably required by a selected or prospective Supplier to verify eligibility and prepare or perform the requested rental.
• Process booking amounts, verify transactions, prevent fraud, handle refunds and manage payment disputes or chargebacks.
• Provide customer support, investigate complaints, mediate booking issues and maintain evidence of communications and instructions.
• Operate, secure, troubleshoot and improve the website, supplier tools, ranking systems, booking flows and customer experience.
• Measure advertising and marketing effectiveness, develop aggregated statistics and understand demand, subject to applicable consent or opt-out requirements.
• Send service messages, booking notifications and operational communications. We may send promotional communications only in accordance with applicable law and your communication preferences.
• Detect abuse, account compromise, fake enquiries, fraudulent transactions, prohibited conduct and threats to users, Suppliers or OneClickDrive.
• Comply with accounting, tax, court, regulatory, law-enforcement and other legal obligations, and establish, exercise or defend legal claims.

5. When we share personal data

5.1 Independent rental Suppliers

When you request a quotation or booking, we may share relevant information with one or more Suppliers that can respond to your request. Once you select or are matched with a Supplier, we may share the information necessary to confirm and administer the rental. The Supplier is responsible for the vehicle, rental agreement and its own processing of personal data for those purposes.

5.2 Service providers

We may use service providers for hosting, cloud storage, CRM, communications, customer support, cybersecurity, analytics, advertising, identity/fraud controls, payment processing, document handling and professional services. They receive only the access reasonably required for their function and are subject to contractual, security and confidentiality obligations where required by law.

5.3 Affiliates and corporate transactions

We may share data within the OneClickDrive group where necessary to provide or support the service, centralize technology or administration, prevent fraud, or manage legitimate group operations in accordance with applicable law. If all or part of the business is reorganized, financed, sold or transferred, personal data may be disclosed to professional advisers and a prospective or actual successor subject to appropriate confidentiality and legal safeguards.

5.4 Authorities, courts and protection of rights

We may disclose information when required by law, a binding order or competent authority, or when reasonably necessary and legally permitted to protect the rights, safety, property or security of users, Suppliers, OneClickDrive or the public, or to investigate fraud and defend legal claims.

We do not sell personal data as a standalone commodity. Commercial arrangements with Suppliers or advertising partners do not authorize them to use booking data for unrelated purposes unless they have their own lawful basis and, where required, your consent.

6. International transfers

Some OneClickDrive affiliates, cloud systems, communications providers, payment providers or other service providers may be located outside Morocco, and a booking may therefore involve access to or transfer of personal data outside Morocco. Such transfers will be made only where permitted under Law No. 09-08 and subject to applicable CNDP procedures, authorizations, adequacy conditions, contractual safeguards, consent requirements or other lawful transfer mechanisms.

Where a transfer is necessary for a contract requested by you or is based on another statutory exception, we will apply that basis only to the extent permitted by law. A contractual clause or user consent does not replace any mandatory CNDP filing or authorization that remains legally required.

7. Payment information

Online payments may be processed by an independent payment service provider or a OneClickDrive group entity identified during the transaction. OneClickDrive generally receives transaction status, reference numbers, fraud indicators and masked payment details rather than complete card credentials. Payment providers process payment data under their own security, compliance and retention requirements.

You should use only payment links, account details and instructions displayed through OneClickDrive’s official website or verified communication channels. If you receive a suspicious request to pay an unrelated third party, contact OneClickDrive before transferring funds.

8. Cookies, analytics and similar technologies

We use cookies and similar technologies for functions such as session management, security, remembering preferences, measuring site performance, analytics and advertising attribution. Where consent is legally required for a category of cookies, those cookies should not be activated until the required choice is obtained. You can use available cookie controls and browser settings to manage non-essential cookies, although disabling certain technologies may affect site functionality.

Third-party analytics and advertising services may receive device or usage information according to the permissions and choices applicable to that service. Their independent processing is governed by their own privacy terms.

9. Marketing and communications

Operational messages relating to an enquiry, booking, payment, account, safety or support case may be sent when necessary to provide the service. Promotional communications by email, SMS, WhatsApp or similar channels are sent only where permitted by applicable law. You may opt out of marketing at any time using the available unsubscribe mechanism or by contacting us. Opting out of marketing does not prevent service communications required for an active booking or account.

We may retain a minimal suppression record after an opt-out so that we can respect your preference and avoid re-adding the same address or number to a marketing list.

10. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy and to satisfy legal, tax, accounting, contractual, fraud-prevention, evidence and dispute-resolution requirements. Retention periods differ according to the type and sensitivity of the data, the existence of an active account or booking, legal limitation periods, and mandatory record-keeping rules.

Identification documents and other high-risk information are subject to more restrictive access and retention controls and should be deleted, anonymized or securely archived when they are no longer required, subject to any lawful retention obligation or legal claim.

11. Security

We use administrative, technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure or misuse. These measures may include access controls, encryption in transit or at rest where appropriate, logging, supplier controls, secure development practices, backups and incident-response procedures. No internet transmission or information system can be guaranteed to be completely secure, and users should protect their own passwords, devices and verification codes.

12. Your data-protection rights

Subject to Law No. 09-08 and any conditions or exceptions that apply, you may have the right to access personal data concerning you, request correction or updating of inaccurate or incomplete data, and object to processing in circumstances recognized by law. Where processing is unlawful or the statutory conditions are met, you may also be entitled to request blocking, erasure or another remedy provided by law.

We may need to verify your identity before acting on a request and may ask for information necessary to locate the relevant records. Requests should be sent using the privacy contact channel published on OneClickDrive.ma. We will respond within the period required by applicable law.

If you believe your rights under Law No. 09-08 have not been respected, you may also submit a complaint to the CNDP through its official channels.

13. Automated tools, fraud controls and ranking

We may use automated rules, scoring or analytical tools to prioritize enquiries, detect suspected fraud or abuse, recommend Suppliers, rank listings, route support cases or improve platform efficiency. These tools may consider factors such as location, requested dates, vehicle type, availability, response history, service quality, user preferences and security indicators. Where applicable law gives you a specific right in relation to a solely automated decision with legal or similarly significant effects, we will provide the process required by that law.

14. Children and age restrictions

OneClickDrive’s booking services are intended for adults. We do not knowingly invite children to create rental bookings. A person making a booking must be at least 18 years old and must also satisfy the Supplier’s driving-age, licence-tenure and eligibility requirements. If we learn that personal data was collected from a child without an appropriate lawful basis, we will take reasonable steps to delete or restrict it as required by law.

15. Third-party websites and Supplier privacy practices

The website may link to third-party sites, maps, payment pages, social networks or Supplier content. OneClickDrive does not control the independent privacy practices of those third parties. You should review the privacy information supplied by the relevant third party before providing data directly to it.

16. Changes to this Privacy Policy

We may update this Policy to reflect changes in law, CNDP requirements, technology, Suppliers, payment flows or our services. The latest version will be posted on OneClickDrive.ma with an updated effective date. Where a change materially affects an existing processing activity and applicable law requires additional notice or consent, we will take the required steps before applying that change.

17. Contact and legal identification

The legal name, registered office, company identifiers and official contact details of the operator of OneClickDrive.ma are set out in the website Legal Notice. Privacy requests and complaints should be submitted through the privacy or contact channel displayed on OneClickDrive.ma. Any CNDP declaration or authorization reference that must legally be made public will be displayed in the relevant Legal Notice or privacy information.

This Privacy Policy governs the OneClickDrive.ma Morocco platform only. A Supplier may provide a separate privacy notice for information it processes in connection with the underlying vehicle-rental agreement.