Privacy Policy

Last Updated: October 2024

1. Introduction

ZenBlend ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

2.1 Information You Voluntarily Provide

We collect information you voluntarily provide through our order forms, including:

• Full name
• Email address
• Phone number
• Shipping address
• Order preferences and special requests

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on each page
• Referring website
• Device identifiers
• Cookie data (via Google Analytics and similar tools)

2.3 Local Storage

Our website uses browser local storage to remember your quiz preferences and blend selections to improve your user experience. This data is stored only on your device and is not transmitted to our servers.

3. Use of Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Sending you order confirmations and invoices
• Responding to your inquiries and customer service requests
• Personalizing your experience and providing product recommendations
• Analytics and website improvement through Plausible Analytics
• Compliance with legal obligations
• Detecting and preventing fraud or unauthorized access

4. Third-Party Services

4.1 Formspree

We use Formspree to process your order form submissions. Your information is transmitted securely to Formspree and then forwarded to our email system. Formspree's privacy practices can be reviewed at https://formspree.io/privacy

4.2 Plausible Analytics

We use Plausible Analytics (a privacy-first analytics platform) to understand website usage patterns. Plausible does not use cookies and does not collect personally identifiable information. Learn more at https://plausible.io/privacy

4.3 Email Service

Order confirmations and invoices are sent via email. We do not share your email address with third parties without your consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: You have the right to know what personal data we hold about you
• Right to Correction: You can request correction of inaccurate information
• Right to Deletion: You can request deletion of your personal data
• Right to Data Portability: You can request your data in a portable format
• Right to Opt-Out: You can opt out of marketing communications

To exercise any of these rights, please contact us at the email address provided below.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Order information is retained for accounting, invoicing, and customer service purposes. You can request deletion of your data at any time.

8. Cookies and Tracking

Our website does not use traditional cookies. Instead, we rely on:

• Plausible Analytics for privacy-respecting site analytics
• Browser local storage for user preference storage (quiz results, blend selections)

9. Children's Privacy

Our website and products are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal information, we will delete such information and terminate the child's account.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page with an updated "Last Updated" date. Your continued use of our website following the posting of revised Privacy Policy means you accept and agree to the changes.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Contact: Use our contact form on the homepage
• Website: https://zenblend.github.io
• Address: ZenBlend Headquarters, Copenhagen, Denmark

12. International Data Transfer

If you are accessing our website from outside Denmark, please be aware that your information may be transferred to, stored in, and processed in Denmark and other countries where our service providers operate. By using our website, you consent to such transfer.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information is collected, used, shared, or sold. You also have the right to delete your personal information and opt-out of the sale of your personal information. For more information or to exercise these rights, please contact us.

14. European Privacy Rights (GDPR)

If you are a resident of the European Union or European Economic Area (EEA), your personal data is protected under the General Data Protection Regulation (GDPR). We are committed to GDPR compliance and respecting your data protection rights.

14.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit an order form or contact form, you provide explicit consent for us to process your personal data
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations when you place an order
• Legitimate Interests: We process data for analytics, fraud prevention, and service improvement where our legitimate interests are not overridden by your rights
• Legal Obligation: We may process data to comply with legal and regulatory requirements (e.g., tax, accounting)

14.2 Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to request a copy of all personal data we hold about you
• Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete personal data
• Right to Erasure / "Right to be Forgotten" (Art. 17): You can request deletion of your personal data under certain conditions
• Right to Restriction of Processing (Art. 18): You can request that we restrict processing of your data in certain circumstances
• Right to Data Portability (Art. 20): You can request your data in a structured, commonly used, machine-readable format
• Right to Object (Art. 21): You can object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent (Art. 7): You can withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint (Art. 77): You can file a complaint with your local data protection authority

14.3 How to Exercise Your Rights

To exercise any of your GDPR rights, please:

• Use our contact form on the homepage with subject line "GDPR Data Rights Request"
• Clearly state which right(s) you wish to exercise
• Provide sufficient information for us to verify your identity (name, email address used for orders)

We will respond to your request within 30 days as required by GDPR. In complex cases, we may extend this period by an additional 60 days and will notify you accordingly.

14.4 Data Protection Officer (DPO)

For GDPR-related inquiries or to exercise your rights, you may contact our Data Protection Officer:

• Contact Method: Use our contact form with subject "GDPR / Data Protection Officer"
• Response Time: Within 30 days

14.5 International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries deemed to provide adequate data protection
• Your explicit consent where applicable

14.6 Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on you. Our product recommendation quiz is purely informational and does not result in automated decisions.

14.7 Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

14.8 Supervisory Authority

If you are located in Denmark, you may contact the Danish Data Protection Authority (Datatilsynet):

• Website: https://www.datatilsynet.dk
• Email: dt@datatilsynet.dk
• Phone: +45 33 19 32 00

For residents of other EU/EEA countries, please contact your local data protection authority.

← Back to Home