Privacy Policy & Discretion Charter
Last revised: October 2026 • Compliant with EU General Data Protection Regulation (GDPR 2016/679) and Moroccan Law 09-08 promulgated by Dahir n° 1-09-15 (CNDP).
Our Sovereign Promise of Discretion
At ZinEvent Marrakech, curating bespoke destination weddings, high-society celebrations, and imperial galas demands uncompromising discretion. We understand the privacy expectations of our international clientele, discerning families, and distinguished guests. Your personal information, design ideas, and guest lists remain strictly confidential and are safeguarded with enterprise-grade cryptographic standards.
01. Data Controller Identity
The data controller responsible for the processing of your personal information is:
Founder & Creative Director: Hayat Zin
Headquarters: Marrakech, Kingdom of Morocco
Executive Email: [email protected]
Inquiries & Sales Management: [email protected]
Superadministration & Privacy Officer: [email protected]
02. Personal Data We Collect
We only collect data that is strictly indispensable to curate your event and secure your digital access:
- Identification & Coordinates: Full name, primary email address, telephone / WhatsApp contact.
- Event Specifications: Projected event dates, estimated guest counts, preferred aesthetics (palaces, desert camps, historic riads), budget estimations, and special event notes.
- Curated Moodboard Selections: Photographs favorited in our gallery, customized theme decks, and uploaded client inspiration imagery.
- Security & Technical Telemetry: Passwords (irreversibly salted & hashed with bcrypt), ephemeral two-factor authentication (2FA) one-time passcodes, IP address, and anonymized access logs for anomaly detection.
03. Legal Bases for Processing
Under GDPR Article 6 and Moroccan Law 09-08, processing is legitimately grounded on:
Contract Execution
Generating personalized event estimates, organizing venue visits, coordinating approved suppliers, and managing your bespoke production deck.
Legitimate Security Interest
Guarding private client spaces via 2FA OTP codes, preventing identity spoofing, and monitoring against malicious network intrusions.
Explicit Consent
Voluntary submission of inquiries, moodboard saves, and granular cookie preferences.
04. Zero Commercial Monetization
We never sell, lease, or broker your personal information. Your details are never handed to third-party ad networks or data brokers. Information is shared only with vetted Moroccan luxury venue managers and certified master artisans (caterers, florists, production engineers) on a strict need-to-know basis once you have expressly validated your celebration brief.
05. Data Retention & Delayed Deletion Safety
We retain active event files throughout the preparation and completion of your celebration. Accounting documents are preserved in accordance with Moroccan commercial statutes (10 years).
To prevent accidental or malicious destruction of client assets, our Superadministration maintains a 10-Minute Safety Grace Window on account suppressions. During this period, an immediate warning email is dispatched to the account owner, and the deletion can be halted before permanent cryptographic erasure.
06. Your Sovereign Privacy Rights
Under GDPR and CNDP legislation, you hold full sovereignty over your data:
To exercise any of these rights, contact directly our Privacy Administrator at [email protected] or via mail to ZinEvent Marrakech.
07. Hosting & Subprocessors
Our digital infrastructure is hosted in top-tier European datacenters operated by Hostinger Cloud (France / European Union) with full GDPR alignment. Edge delivery, DDoS mitigation, and SSL/TLS certificates are provided by Cloudflare. Transactional emails and 2FA one-time passcodes are transmitted through encrypted Hostinger SMTP servers authenticated with SPF, 2048-bit DKIM, and DMARC alignment.