Privacy Policy
Last updated: 20 July 2026.
Who we are
Zambrew Limited ("Zambrew", "we") is a UK supplier of Ugandan green coffee and the controller of the personal data described in this policy. Registered office: 71-75 Shelton Street, Covent Garden, London. Contact: info@zambrew.com.
The personal data we collect
We collect the details you submit through our enquiry and sample-request forms (name, email address, phone number, company and delivery address), together with order, account, credit and delivery information when you buy from us. Payments are handled by our payment providers, and we do not store full card details ourselves.
When you browse our website we also collect usage data, such as the pages you visit, how you reached the site, and technical details like your IP address, browser and device type. This is collected through cookies and the analytics tools described below.
Analytics
We use analytics services, currently Google Analytics and Plausible Analytics, to understand how visitors use our website and to improve it. These tools give us aggregated statistics about visits and page performance. Where the law requires consent for analytics cookies, we ask for it through the cookie notice on this site, and you can decline without affecting your use of the site.
Where your data is held
Customer, order and enquiry records are held in the business management (ERP) platform and related software we use to run Zambrew, covering quotes, orders, invoicing, stock, delivery and customer communication. Access is limited to people who need it to do their jobs.
Service providers, including AI tools
Like most modern businesses, we rely on third-party providers to operate. These include website and software hosting, our ERP platform, analytics services, payment providers, delivery carriers, email and communication tools, and professional advisers. We also use artificial intelligence tools from third-party providers to help us work efficiently, for example to draft documents, analyse business information and support customer communication.
Our tools change as the business grows, so we may adopt other providers of these kinds from time to time. Whoever we use, the same rules apply: providers process personal data on our instructions and under contractual safeguards, we share only what is needed for the task, and we do not sell personal data to anyone.
Why we process personal data, and our legal grounds
We process personal data to respond to enquiries and send samples, to fulfil orders and arrange delivery or collection, to manage accounts and credit terms, to meet legal and accounting obligations, and to run and improve our website and business. Under UK data protection law we rely on the performance of a contract (for orders and accounts), our legitimate interests as a business supplying trade buyers (for enquiries, business administration and site improvement), consent where the law requires it (for example analytics cookies and any marketing you sign up to), and compliance with legal obligations (for example tax and accounting records).
International transfers
Some of our providers process data outside the UK. Where that happens, we rely on recognised safeguards such as UK adequacy decisions or approved data transfer agreements.
How we protect your data
We take the protection of customer data seriously and apply appropriate technical and organisational measures to keep it secure, including access controls, reputable hosted platforms and care in what we share with each provider. No system is perfectly secure, but limiting what we collect and who can see it is central to how we work.
How long we keep it
We keep personal data only as long as we need it for the purposes above and to meet legal obligations, such as tax and accounting rules that require business records to be kept for a number of years. Data that is no longer needed is deleted or anonymised.
Your rights
Under UK data protection law you can request access to, correction of, or deletion of your personal data, object to or restrict certain processing, ask for your data in a portable format, and withdraw consent where processing is based on consent. To exercise any right, contact info@zambrew.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
We update this policy when our tools or practices change, and the date at the top shows the latest version. Significant changes will be flagged on this page.
Questions
Any questions about this policy or your data can be sent to our contact page or info@zambrew.com.