Legal
Privacy & GDPR Notice
ZAZ Cafe, Romford is the data controller for ZAZ Rewards. This notice explains what we store, why, and the rights you have under the UK GDPR.
What we collect
- Your name, email address and — if you choose — mobile number and date of birth.
- Your loyalty balances: points, £5 vouchers, coffee stamps and free coffees.
- Your visit history: date, bill total, reward credit used, coffees registered and which team member registered the visit.
- Basic technical data needed to keep you signed in securely.
Why we use it
To run the loyalty programme (our contract with you), to keep accurate reward balances and prevent fraud (our legitimate interest), and to send you offers, news and birthday treats (your consent, given when you create your account).
Marketing emails
When you create an account we add your email to our ZAZ Cafe mailing list so you receive offers and reward reminders. Every email has an unsubscribe link, and you can turn marketing off at any time from My Account. Unsubscribing does not affect your points or vouchers.
Who we share it with
Only the service providers that run the app for us: our secure cloud database and hosting provider, and our email marketing platform. They process data on our instructions only. We never sell your data or share it with advertisers.
How long we keep it
For as long as your account is open. If you ask us to close it, we delete your personal details and keep only anonymous sales totals required for accounting.
Cookies
We use essential cookies and local storage to keep you signed in and to remember your cookie choice, plus anonymous usage statistics to see which pages are used. No advertising or tracking cookies are used.
Your rights
You can ask for a copy of your data, correct it, have it deleted, restrict or object to its use, and withdraw consent for marketing. Email contact@zazcafe.co.uk and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
Children
ZAZ Rewards is for people aged 16 and over. We do not knowingly hold data on children.
