This Privacy Notice describes how Zakaryae Alaoui ("we", "us", or "our") collects, uses, stores, and protects personal data when you use the Zoguest website and services (the "Service"). Zoguest is a white-label digital guest guidebook platform for short-term rental hosts and property managers.
1. Data controller
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:
Zakaryae Alaoui
Contact email: contact@zoguest.com
2. Personal data we collect
- Account data: name, email address, password hash, and authentication provider details when you create an account.
- Property and guidebook data: property descriptions, addresses, Wi-Fi credentials, photos, host contact details, recommendations, and any other content you upload to build your guidebooks.
- Usage data: IP address, browser type, device information, pages visited, and interactions with the Service.
- Communication data: messages you send through contact forms or support channels.
- Billing data: subscription status, plan type, and transaction identifiers. Payment card details are processed by our Merchant of Record, Paddle (see below).
3. How we use your data
We use personal data to:
- Create and manage your account and provide the Service.
- Host, process, and display your guidebooks and property information.
- Communicate with you about your account, support requests, and service updates.
- Improve the Service and monitor performance and security.
- Prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal basis for processing
We process personal data on the basis of: (a) performance of a contract with you; (b) our legitimate interests in operating and securing the Service; (c) your consent, where required; and (d) compliance with legal obligations.
5. Data sharing
We may share personal data with:
- Service providers: cloud hosting, authentication, analytics, error reporting, and customer support tools.
- Paddle.com: our Merchant of Record for payments, subscription management, tax compliance, and invoicing.
- Professional advisers: legal, accounting, and compliance advisers where necessary.
- Authorities: where required by law or to protect our rights and users.
6. International transfers
We may transfer personal data outside the European Economic Area (EEA) or the UK. When we do, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.
7. Data retention
We keep personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymise it.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing activities. GDPR-covered users also have the right to lodge a complaint with a supervisory authority.
To exercise your rights, contact us at contact@zoguest.com. We will respond within one month, or longer if permitted by law.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews.
10. Cookies and tracking
We use essential cookies to operate the Service (e.g., authentication, language preference). We may use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.
11. Changes to this notice
We may update this Privacy Notice from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes means you accept the revised notice.
12. Contact
For any questions about this Privacy Notice or your personal data, please contact us at contact@zoguest.com.