Privacy policy
KingKech respects your privacy. This policy describes the data we collect, its purpose, retention duration and your rights, in compliance with the GDPR (EU 2016/679) and Moroccan law 09-08.
Data controller
KingKech — 12 Rue Khalid Ben El Oualid, 40000 Marrakesh, Morocco.
Contact: WhatsApp +212 7 28 79 24 58 — contact@kingkech.com.
Data collected
When you contact us via the form or WhatsApp, we collect: your name, phone number, email (optional) and message content. No ID document is requested at this stage.
No payment is processed on the website in V1: no banking data is therefore stored by KingKech.
During your visit, anonymous technical data may be collected by our host Vercel (partial IP address, browser type, page viewed) for security and performance purposes.
Processing purposes
— Respond to your quote and booking requests.
— Coordinate service delivery with our partners.
— Keep you informed about your booking.
— Improve the website and our services (anonymous analytics, forthcoming).
Your data is never sold to third parties and never used for prospecting without your explicit consent.
Subprocessors and hosting
The website is hosted by Vercel Inc. (USA) with European servers (CDG1 - Paris region) to minimise latency and non-EU transfers.
Transactional emails (booking request confirmations, reservation notifications, customer follow-up) are sent via Resend, Inc. (USA). Purpose: email delivery to the recipient. Safeguards: Standard Contractual Clauses (SCCs) of the European Commission.
Photo storage (catalogue, listing visuals) uses Cloudflare R2, with the bucket configured under 'Jurisdiction: European Union' (data residency pinned to the EU) when this option is enabled in the infrastructure. Covered by EU SCCs.
The database is hosted by Supabase (Frankfurt, Germany — European Union).
WhatsApp conversations transit via WhatsApp Business servers operated by Meta Platforms Ireland Limited (European Union). Intra-Meta transfers to the USA are covered by the EU-US Data Privacy Framework and SCCs.
Analytics (Google Analytics 4) and ad pixels (Meta Pixel, Snap Pixel) fire only after your explicit consent via the cookie banner. Data is pseudonymised, IP anonymised for GA4.
Retention duration
Contact form data: 12 months maximum, unless an ongoing commercial relationship exists.
WhatsApp conversations: 30 days, then encrypted archive for 3 years as commercial proof, then deleted.
Anonymous analytics data: 14 months (GA4 standard setting).
Marketing cookies (Meta, Snap): 13 months maximum.
Cookies and trackers
The website uses only strictly necessary cookies by default.
Audience measurement and marketing cookies (Google Analytics, Meta Pixel, Snap Pixel) fire only after your explicit consent via the cookie banner. You can change your preferences at any time via the 'Cookie preferences' link in the footer.
For more information, see our Cookie Policy.
Your rights
Under the GDPR and law 09-08, you have the following rights:
— Access: know what data we hold about you.
— Rectification: have inaccurate data corrected.
— Erasure: request the deletion of your data.
— Objection: refuse processing for marketing purposes.
— Portability: receive your data in a structured format.
To exercise these rights, contact us via WhatsApp +212 7 28 79 24 58 or email contact@kingkech.com. Response within 30 days.
You may also file a complaint with the CNDP (Moroccan data protection authority) or the CNIL in France.
Non-EU transfers
Some of our subprocessors are located outside the European Union, primarily in the United States:
— Vercel Inc. (hosting): EU-US Data Privacy Framework (since July 2023) + European Commission Standard Contractual Clauses (SCCs).
— Resend, Inc. (transactional emails): European Commission Standard Contractual Clauses (SCCs).
— Meta Platforms (WhatsApp Business, ad pixels): EU-US Data Privacy Framework + SCCs for intra-Meta transfers from the European entity.
— Cloudflare R2 (photos): bucket configured under 'Jurisdiction: European Union' (data residency guaranteed in the EU) when this option is enabled in the infrastructure; otherwise global edge network with SCCs.
No data is transferred to a country without an adequacy decision or appropriate safeguards within the meaning of Articles 44 to 49 of the GDPR.
Changes
KingKech reserves the right to amend this policy. Any substantial change will be flagged on the website and, where appropriate, via WhatsApp or email.
Last updated: 28 May 2026.
