Legal
Last updated: September 2026
The controller of your data is MAMI TRAVEL, SARL with a share capital of 160,000 Tunisian dinars, Avenue Moncef Bey, 8050 Hammamet, Tunisia (RNE 1520220M). For any question about your data: contact@mami-travel.com.
When you make a booking or a request, we collect: • your identity and contact details: last name, first name, title, email address, phone number; • travel information: service, dates, places, number and age categories of participants, notes; • where the service requires it, the type and number of your identity document; • for an online payment: the transaction reference, its result and the masked card number provided by the bank. We never receive or store your full card number or its security code; • technical data: IP address and browser type, recorded in the server logs.
Your data is used to: • carry out your booking (organising the service, confirmations, vouchers, after-sales service); • collect and, where applicable, refund payments; • comply with our legal obligations, in particular accounting and tax; • keep the website secure and prevent fraud; • answer your requests and complaints. We never sell your data and do not use it for advertising without your consent.
Your data is only accessible to the people who need it: • the Mami Travel team, through individual accounts; • the providers who carry out your service (drivers, guides, accommodation), for the information they need only; • the ClicToPay payment platform (Société Monétique Tunisie) and the banks, for online payments; • our technical providers: the website host (OVHcloud) and the email service that sends our emails (Google); • the authorities, when required by law.
The website and its data are hosted on an OVHcloud virtual private server. Our emails are sent through Google's email service. These providers may process data outside Tunisia; they are required to protect it and to use it only on our behalf.
• Bookings, invoices and payment records: 10 years, for accounting obligations; • data of a contact without a booking (request, marketing with your consent): 3 years after the last exchange; • technical server logs: 1 year at most. At the end of these periods, the data is deleted or anonymised.
The whole website is served over HTTPS (SSL encryption). Access to data is restricted to authorised staff, through individual accounts, and every change is logged. Payments are made on the secure ClicToPay page with the 3-D Secure protocol.
Under Organic Law No. 2004-63, you have the right to access, rectify and object, as well as the right to ask for your data to be deleted when keeping it is no longer necessary. If you live in the European Union, you also have the rights provided by the General Data Protection Regulation (restriction, portability) and can lodge a complaint with the data protection authority of your country. To exercise your rights, write to contact@mami-travel.com; we reply within one month at most. You can also contact the Tunisian data protection authority, the Instance nationale de protection des données personnelles (INPDP).
The website only uses cookies and local storage that are strictly necessary for it to work (language, currency). Details are given in our cookie policy.
We may update this policy; the date of the last update is shown at the top of the page.
