GDPR

Introduction

This GDPR Policy outlines how AD ASTRA LIMITED, trading as ZanziBarista, collects, uses, and protects any personal data that you provide when using the ZanziBarista.com website. We are committed to ensuring that your privacy is protected in compliance with the General Data Protection Regulation (GDPR).

Data Controller

AD ASTRA LIMITED is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your personal data, please contact us at:

AD ASTRA LIMITED  

Email: contact@zanzibarista.com  

Address: Paje, Zanzibar (Tanzania)

What Data We Collect

We may collect the following types of personal data:

- Identity Data: Name, surname, username, or similar identifier.

- Contact Data: Email address, telephone numbers, postal address.

- Financial Data: Payment card details (processed by third-party payment processors).

- Transaction Data: Details about payments to and from you and other details of services you have purchased from us.

- Technical Data: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

- Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

- Usage Data: Information about how you use our website, products, and services.

- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

How We Use Your Data

We use your personal data for the following purposes:

- Service Delivery: To process and deliver your orders, manage payments, fees, and charges, and collect and recover money owed to us.

- Customer Management: To manage our relationship with you, including notifying you about changes to our terms or privacy policy, and asking you to leave a review or take a survey.

- Marketing: To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.

- Improvement: To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.

- Security: To ensure that content from our site is presented in the most effective manner for you and your computer.

Legal Basis for Processing

We will only process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

- Performance of Contract: Where we need to perform the contract we are about to enter into or have entered into with you.

- Legitimate Interest: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

- Legal or Regulatory Obligation: Where we need to comply with a legal or regulatory obligation.

Data Security

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

- Access: You have the right to request a copy of the information that we hold about you.

- Rectification: You have the right to correct data that we hold about you that is inaccurate or incomplete.

- Erasure: In certain circumstances, you can ask for the data we hold about you to be erased from our records.

- Restriction of Processing: Where certain conditions apply, you have a right to restrict the processing.

- Data Portability: You have the right to have the data we hold about you transferred to another organization.

- Object: You have the right to object to certain types of processing, such as direct marketing.

- Right to Withdraw Consent: If you have given us consent to process your data, you have the right to withdraw that consent at any time.

Changes to This Policy

We may update this policy from time to time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes.

Contact Us

If you have any questions about this policy or our treatment of your personal data, please contact us at:

AD ASTRA LIMITED  

Email: contact@zanzibarista.com  

Address: Paje, Zanzibar (Tanzania)

This GDPR policy ensures that AD ASTRA LIMITED, trading as ZanziBarista, complies with the requirements of the GDPR while being transparent about the ways in which personal data is collected, used, and protected.