Privacy policy
Last updated: 31 July 2026
This policy explains what personal data Zen Brew CRM ("we", "us") collects, why we collect it, and how we look after it. It is maintained by the Zen Brew workspace owner and applies to the Zen Brew CRM application at zenbrew.co.uk.
Who we are
Zen Brew CRM is a private customer relationship tool operated by the workspace owner. If you have any questions about this policy, contact your workspace admin or email privacy@zenbrew.co.uk.
What we collect
- Account data: name, email address and role of authorised users.
- Contact data: names, emails, phone numbers and notes about leads and customers that the workspace owner adds.
- Communication data: emails sent from the CRM and their delivery status.
- Usage data: sign in times, activity logs and audit events for security purposes.
How we use it
- To operate the CRM and provide features requested by the workspace owner.
- To send emails from authorised senders and log their status.
- To keep the service secure through two factor login, audit trails and monitoring.
Legal basis
We rely on legitimate interests to run the CRM and to communicate with business contacts, and on consent where required, for example marketing emails. Consent can be withdrawn at any time via the unsubscribe link in every message or by contacting privacy@zenbrew.co.uk.
Sharing
Personal data is only shared with the processors we need to run the service, including our hosting provider, email delivery provider and, where enabled, Meta for lead ad integration. We do not sell personal data.
Retention
Contact records are kept for as long as the workspace owner requires them for the business relationship. Audit logs are kept for security purposes and removed on request when no longer required.
Your rights
You can request access, correction, deletion, restriction or portability of your personal data, and object to processing. To exercise these rights, email privacy@zenbrew.co.uk. You also have the right to complain to your local data protection authority.