Privacy notice // last updated 17 October 2026
Your data, kept to the minimum.
This notice explains what DZUA EVENTS (“DZUA”, “we”) does with personal data on dzuaevents.com. Short version: we only receive what you type into the guest-list form, we use it only to review your request and contact you, and we collect nothing else.
1. Who is responsible
DZUA EVENTS, Kenya, is the data controller. Contact for any privacy matter: booking@dzuaevents.com.
2. What we collect
Only the details you enter and send yourself through the guest-list form:
- first name and last name;
- email address;
- WhatsApp number;
- party size and, if you write one, a short note;
- your confirmation that you are 18 or older, and the date and time of the request.
We do not use cookies, analytics, advertising pixels, fingerprinting, social-media plugins or any third-party tracking. Fonts and all site files are served from our own domain, so your browser does not contact Google or other third parties when you visit.
3. Why, and on what legal basis
We use your details to review your guest-list request and, if approved, to send your invitation and private event details by WhatsApp or email. The legal basis is your consent, given when you choose to submit the form (Kenya Data Protection Act 2019, section 30; GDPR article 6(1)(a)). You can withdraw consent at any time by writing to booking@dzuaevents.com; this does not affect processing done before you withdrew it. We never sell, rent or share your data for marketing.
4. Who processes it for us
To run the site and deliver your request we rely on: Cloudflare (website hosting and protection against attacks) and Resend (delivery of the request email to our inbox). They act only on our instructions. Some of these providers may process data outside Kenya, under appropriate safeguards such as standard contractual clauses.
5. Security traffic
To block spam and attacks, the form endpoint briefly checks how many requests arrive from the same network address. This check happens in memory, the address is never stored, never sent to us and never linked to your request. Our hosting provider may keep short-lived technical security logs under its own privacy policy.
6. How long we keep it
Guest-list requests are kept for up to 12 months after the event they relate to, then deleted. Requests that are declined, or that come from anyone under 18, are deleted sooner.
7. Your rights
You can ask to access, correct or delete your data, object to or restrict its use, receive a copy, or withdraw consent. Write to booking@dzuaevents.com; we answer within 30 days. You can also complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke) or, if you are in the EU/UK, to your local data protection authority.
8. Your browser
The site remembers two non-personal preferences on your own device: whether you have already seen the intro animation (for this session) and whether you chose the light or dark look. They never leave your browser and you can clear them at any time.
9. Age
DZUA events and this form are strictly for adults aged 18 and over. We do not knowingly collect data from minors.
10. Changes
If this notice changes, the new version is published on this page with a new date.