Privacy policy
Last updated: 23 October 2026
This policy explains what personal data we collect when you shop at zaka.pt or visit our website, what we use it for, who we share it with and what your rights are. We look after your data carefully and only use what we need.
Who is responsible for your data
Zen Harvest, Lda (Zaka), tax number (NIF) 518366588, Rua Afonso III 154, 8135-112 Almancil, Portugal.
For anything about your data, write to us at info@zaka.pt.
What data we collect
When you place an order:
- name
- phone number
- delivery address, if you choose home delivery
- tax number (NIF), if you give it for your invoice
- the items you bought and the order value
Payment is handled by Stripe. Your card details never reach Zaka.
If you accept analytics and advertising cookies, Google Analytics and the Meta pixel collect information about how you use the site. Without your consent, they are not used. If you accept these cookies and place an order, we also send Google and Meta your email address (and your phone number, if you gave one) in coded form, so they can tell whether the purchase came from an ad. The data stays coded, cannot be read and is used only to measure advertising results.
If you sign up for our newsletter, we keep your email to send it to you. We only do this with your consent.
What we use your data for
- Handling your order, its delivery or collection, and talking to you about it. Legal basis: performance of the contract.
- Handling returns, guarantee claims and complaints. Legal basis: performance of the contract and our legal obligations.
- Issuing invoices and meeting our tax obligations. Legal basis: legal obligation.
- Website statistics and measuring our ads. Legal basis: your consent.
- Sending the newsletter. Legal basis: your consent.
Who we share your data with
We only share what is needed, with companies that help us run the shop:
- Stripe: processes payments.
- Algarve Circle (LUZAURA, LDA, Portugal): provides the website and shop system and handles data on our behalf, as our processor. If you sign in with an Algarve Circle account, that account is yours with Algarve Circle, which handles the account data (name, email, addresses) under its own privacy policy, at algarvecircle.com.
- Vercel, Supabase and Cloudflare: website hosting and database.
- Brevo: sends the emails about your order.
- CTT: delivers orders, with the details needed for delivery.
- Google and Meta: only if you accept analytics and advertising cookies.
Transfers outside the European Union
Some of these providers are in the United States. In those cases, the transfer of data is protected by Standard Contractual Clauses approved by the European Commission.
How long we keep data
- Invoices: 10 years, as tax law requires.
- Orders and customer service messages: 3 years.
- Marketing data (shop news by email or WhatsApp): until you withdraw your consent.
Your rights
You can ask us at any time for:
- access to your data
- correction of wrong data
- erasure of your data
- restriction of processing
- portability of your data
- objection to processing
Where we rely on your consent, you can withdraw it whenever you like. For cookies, use the "Cookie settings" link in the website footer.
To use any of your rights, write to info@zaka.pt.
If you feel we have not handled your data properly, you can complain to the Portuguese data protection authority (CNPD): www.cnpd.pt.
