Privacy Policy

Last updated: October 2026

Zenzi Group AB cares about the personal privacy of all our customers and always strives for a high level of data protection. It is important to us that you feel confident about how we handle your personal data. Below you can read Zenzi Group AB's privacy policy.

Who is responsible for the personal data we collect?

Zenzi Group AB, company registration number 559517-2783, Hägernäsvägen 25, 183 60 Täby, Sweden. Websites: zenzimatcha.com and zenzimatcha.se. Contact: hello@zenzimatcha.com

Zenzi Group AB is the data controller for the processing of your personal data.

What is personal data?

Personal data is any information that can be directly or indirectly linked to a living person. Examples include name, address, email address, phone number, IP address and purchase history.

The EU General Data Protection Regulation (GDPR) sets requirements for how companies may process personal data and ensures transparency about how such data is used.

What personal data do we collect and why?

We collect personal data that you provide to us when you:

• Place an order through our websites
• Contact our customer service
• Subscribe to our newsletter or to text messages (SMS)
• Take part in events or competitions

Below is more detailed information about what data we process, why, and for how long.

Orders and returns

Processing activities: delivery, including notifications and communication about delivery; payment processing and follow-up; handling of complaints and warranty claims.

Categories of personal data: name, contact and delivery details (including phone number for delivery notifications), payment information and payment history, purchase information such as products ordered, and any credit information from credit reference agencies.

Legal basis: performance of the purchase contract. The processing is necessary for us to fulfil our contractual obligations to you. If the data is not provided, we cannot complete the purchase. Phone numbers you provide for delivery are not used for SMS marketing unless you have separately consented to it.

Retention period: until the purchase has been completed and thereafter up to 36 months to handle complaints and warranty claims. Data required under accounting legislation is retained in accordance with applicable law.

Customer service

Processing activities: communication via email, phone or social media; handling and investigation of complaints and support requests.

Categories of personal data: name, contact details, correspondence, information about the purchase and any faults or complaints.

Legal basis: legitimate interest. The processing is necessary to meet both our and your interest in handling customer service matters.

Retention period: until the matter is resolved and thereafter for as long as required to meet legal obligations or defend legal claims.

Newsletter, SMS and events

Processing activities: sending newsletters by email and, if you have consented to it, marketing by SMS with information, offers and inspiration; reminders about shopping carts that were not completed; communication about events and competitions. Every message includes information on how to unsubscribe. You can unsubscribe from SMS via the link in each message.

Categories of personal data: name, email address, phone number, information about your consent (when and where it was given), information about products you have added to your cart, and any age or other information provided when taking part.

Legal basis: consent for SMS marketing. For email newsletters: consent or legitimate interest, depending on the situation. You can withdraw your consent at any time by unsubscribing.

Retention period: until you unsubscribe, or after 24 months of inactivity. A record that you have unsubscribed is kept so that we do not contact you again.

Where do we collect your personal data from?

We collect personal data that you provide to us directly, or that is generated in connection with purchases and use of our services. We never store personal data for longer than necessary for each purpose.

Who may we share your data with?

To provide our services, we share personal data with selected suppliers acting as data processors on our behalf, bound by data processing agreements. These may be companies providing:

• Transport and logistics services
• Payment solutions
• IT services and operations
• Web platform and e-commerce solutions
• Email and SMS delivery

We never sell or transfer your personal data to third parties for marketing purposes. Phone numbers and consents collected for SMS marketing are never shared with third parties for their marketing purposes.

Your rights

Under the GDPR, you have the right to:

• Access: request a copy of the personal data we process about you
• Rectification: have inaccurate or incomplete data corrected
• Erasure: request that your personal data be deleted if it is no longer necessary or lacks a legal basis
• Restriction of processing: request that the processing of your data be restricted
• Object to direct marketing: object at any time to your data being used for marketing, by email or SMS
• Lodge a complaint: with the Swedish Authority for Privacy Protection (IMY) if you believe we are processing your data incorrectly

Cookies

Our websites, zenzimatcha.com and zenzimatcha.se, use a cookie banner to manage your consent. We, and our partners including Shopify, use cookies to personalise your experience, carry out analytics and show relevant marketing, and we do not use cookies for these purposes unless you have given your consent.

When you visit our website for the first time, a cookie banner is shown where you can manage your consent for:

• Preferences: cookies that remember settings such as country or language, to personalise your visit
• Statistics: cookies that help us understand how customers interact with the website
• Marketing: cookies used to show relevant ads and marketing communication based on your interests

If you have accepted marketing cookies, we use them to see which products you add to your cart and whether a purchase is not completed. If you have also consented to marketing by email or SMS, we may then send you a reminder about your cart.

Necessary cookies, which are required for the website and checkout to work, are always active and are not covered by the consent choices above.

You can change or withdraw your consent at any time by reopening the cookie banner on our website. Visitors from the United Kingdom and the EEA are shown the cookie banner automatically before any non-necessary cookies are activated.

Contact details

If you have questions about how we process your personal data, you are welcome to contact us.

Zenzi Group AB, company registration number 559517-2783, Hägernäsvägen 25, 183 60 Täby, Sweden. Email: hello@zenzimatcha.com