Last updated: 27 July 2026

Your privacy matters to us.

We have tried to keep this Privacy Policy as clear and straightforward as possible. It explains what personal information we collect when you visit or shop on our Website, why we use it, who we may share it with and the rights available to you.

The Website and online shop are operated by Gentleman’s Coffee, Lda., trading as Senzu® Coffee Roasters.

1. Who is responsible for your information

The controller responsible for your personal information is:

Gentleman’s Coffee, Lda.
VAT No. 517153068
Rua do Rosário, No. 211
4050-524 Porto
Portugal

Email: hello@senzucoffee.com
Telephone: +351 912 288 838

In this Privacy Policy, “Senzu”, “we”, “us” and “our” refer to Gentleman’s Coffee, Lda.

2. Who this policy applies to

This policy applies to personal information we process when you:

a) visit or use our Website;

b) create or use a customer account;

c) place an order;

d) subscribe to our newsletter or other communications;

e) contact us;

f) interact with our advertising; or

g) use features or services connected to our online shop.

It does not apply to processing carried out by third parties on their own websites or platforms, even where you accessed them through a link on our Website.

3. Personal information we collect

The information we collect depends on how you interact with us.

3.1. Identification and contact details

We may collect:

a) your name;

b) email address;

c) telephone number;

d) billing address;

e) delivery address; and

f) tax identification number where required for invoicing.

3.2. Order information

We may collect:

a) products you view, add to your basket or purchase;

b) quantities, grind selections and other chosen options;

c) order history;

d) returns, exchanges, cancellations and refunds;

e) payment method and status;

f) transaction references; and

g) delivery information.

3.3. Payment information

Payments may be processed through Shopify Payments, Ifthenpay or another payment method displayed during checkout.

These providers may collect the information needed to process and confirm your payment directly from you.

Where card or payment details are entered directly into a payment provider’s interface, those details are processed by that provider under its own terms and privacy notice.

We may receive information such as:

a) the selected payment method;

b) payment status;

c) transaction reference;

d) amount paid; and

e) confirmation or refusal of payment.

3.4. Customer account information

If you create an account, we may process:

a) login information;

b) orders associated with the account;

c) preferences;

d) saved addresses; and

e) account settings.

You are responsible for keeping your login details confidential and not sharing them with other people.

3.5. Communications

When you contact us, we may process:

a) the content of your message;

b) your contact details;

c) the communication history; and

d) information or documents you choose to send us.

Please do not send us sensitive or confidential information that is not needed to deal with your request.

3.6. Device and usage information

When you use the Website, we may automatically collect information such as:

a) IP address;

b) device type;

c) operating system;

d) browser type and version;

e) language and time zone;

f) cookie identifiers and similar identifiers;

g) pages visited;

h) products viewed;

i) the source of your visit;

j) date and time of access;

k) interactions with the Website; and

l) approximate location derived from your IP address.

3.7. Marketing preferences

We may record:

a) whether you subscribed to our newsletter;

b) the subjects or communications you chose to receive;

c) your consent;

d) the withdrawal of your consent; and

e) your interaction with our communications.

4. How we collect information

We may collect personal information:

a) directly from you when you place an order, create an account, subscribe to communications or contact us;

b) automatically through the Website, cookies and similar technologies;

c) through Shopify and applications connected to the store;

d) through payment providers;

e) through carriers and logistics providers;

f) through the analytics and advertising platforms we use; and

g) through other providers acting on our behalf.

5. How and why we use your information

We only process personal information where we have an appropriate legal basis.

5.1. Processing orders

We use your information to:

a) confirm and prepare orders;

b) process payments;

c) issue invoices;

d) arrange delivery or collection;

e) manage exchanges, returns and refunds; and

f) communicate with you about an order.

This processing is necessary to enter into and perform the purchase contract with you.

5.2. Complying with legal obligations

We may process and retain information to:

a) issue and retain tax documents;

b) maintain required accounting records;

c) respond to public authorities;

d) comply with consumer rights and product guarantee obligations; and

e) meet other applicable legal requirements.

This processing is based on compliance with a legal obligation.

5.3. Customer support

We use your information to respond to questions, complaints, requests or problems concerning our products and orders.

This may be necessary to perform our contract with you or based on our legitimate interest in supporting and maintaining our relationship with customers.

5.4. Security and fraud prevention

We may use information to:

a) protect the Website and customer accounts;

b) verify payments and orders;

c) detect suspicious activity;

d) prevent fraud or misuse; and

e) protect our rights.

This processing is based on our legitimate interest in protecting our business, customers and systems, or on compliance with legal obligations where applicable.

5.5. Operating and improving the Website

We may use technical and usage information to:

a) operate the Website;

b) correct errors;

c) understand how it is used;

d) improve navigation and the shopping experience; and

e) assess the performance of pages and features.

Processing that is strictly necessary for the Website’s operation and security is based on providing the requested services and our legitimate interests.

Non-essential analytics cookies and technologies rely on your consent where consent is legally required.

5.6. Email marketing

With your consent, we may send you:

a) news about our coffees and products;

b) launches;

c) Senzu content;

d) promotions; and

e) invitations or information about events.

You may withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us.

Withdrawing consent does not affect processing that took place before the withdrawal.

Even after you unsubscribe from marketing, we may still send you messages needed for your orders, payments, security or important changes to our services.

5.7. Analytics and advertising

With your consent, we may use Google Analytics and the Meta Pixel to:

a) understand how visitors use the Website;

b) measure visits, interactions and purchases;

c) assess the performance of our campaigns;

d) create advertising audiences;

e) show more relevant advertising; and

f) limit or measure how often advertisements are shown.

These services may use cookies and identifiers to associate interactions on our Website with a device, browser or account held on the relevant platform.

You may accept, refuse or change these preferences through our cookie settings.

6. Cookies and similar technologies

We use cookies and similar technologies for different purposes.

Strictly necessary cookies

These cookies support functions such as:

a) maintaining your shopping basket;

b) processing checkout;

c) saving essential settings;

d) protecting the store against fraud; and

e) allowing the Website to operate securely.

These cookies generally cannot be disabled through our settings because they are necessary to provide the service you requested.

Analytics cookies

These help us understand how the Website is used and identify possible improvements.

Where accepted, these include cookies associated with Google Analytics.

Advertising cookies

These help us measure campaigns and show advertising related to our products.

Where accepted, these include technologies associated with the Meta Pixel.

Non-essential analytics and advertising cookies should only be activated after you provide consent where legally required.

You may change or withdraw your consent at any time using the cookie settings available on the Website.

Please read our Cookie Policy for more information about the cookies used, their providers, purposes and duration.

7. Shopify

Our online shop is hosted and supported by Shopify.

Shopify processes personal information needed to:

a) provide and maintain the shop;

b) process orders and transactions;

c) secure the platform;

d) prevent fraud;

e) provide technical support; and

f) improve its services.

Information submitted through the store may be shared with Shopify and its subprocessors.

For some enabled features, Shopify may process information for its own purposes and under its own privacy notice.

You can review Shopify’s privacy information and use the rights mechanisms made available by Shopify.

Using Shopify does not replace our own responsibilities as the controller of your personal information.

8. Payments

We use payment providers including:

a) Shopify Payments; and

b) Ifthenpay.

We share with these providers only the information needed to:

a) initiate and confirm payments;

b) prevent fraud;

c) process cancellations or refunds;

d) comply with legal requirements; and

e) deal with transaction-related issues.

Each provider may also process personal information as an independent controller under its own privacy notice and the laws applying to payment services.

9. Who we share information with

We may share personal information with providers that help us operate the store and fulfil orders, including:

a) Shopify and its subprocessors;

b) payment providers;

c) carriers and logistics providers;

d) email marketing platforms;

e) hosting, maintenance and IT security providers;

f) Google Analytics;

g) Meta and its advertising tools;

h) accounting, tax or legal advisers; and

i) public authorities, courts or regulators where required by law or a valid request.

These recipients receive only the information needed for the relevant purpose and must process it in accordance with applicable law and contractual requirements.

We do not receive money in exchange for your personal information.

Some United States laws define “sale”, “sharing” or “targeted advertising” more broadly and may include certain advertising technologies.

If those laws become applicable to our business, we will provide the notices and opt-out mechanisms required by law.

10. International transfers

Some of our providers, including Shopify, Google and Meta, operate internationally.

Your information may therefore be processed or stored outside Portugal or the European Economic Area.

Where information is transferred to a country that is not covered by a European Commission adequacy decision, we seek to ensure that the transfer relies on an appropriate legal mechanism, such as:

a) Standard Contractual Clauses approved by the European Commission;

b) binding rules applying to a corporate group;

c) another mechanism recognised by data protection law; or

d) a lawful derogation applying to a specific situation.

You may contact us for more information about the mechanisms applying to transfers of your personal information.

11. How long we keep information

We retain personal information only for as long as needed for the purpose for which it was collected, unless a longer period is required or permitted by law.

In particular:

a) information and documents needed for tax and accounting purposes may be kept for 10 years or another legally applicable period;

b) order information is kept for as long as needed to perform the contract, deal with complaints, exercise rights or comply with legal requirements;

c) account information may be kept while the account is active and for the necessary period after it is closed;

d) support communications may be kept while relevant to the request, customer relationship or protection of legal rights;

e) marketing information is processed until you withdraw your consent or it is no longer needed;

f) we may retain a minimal suppression record to ensure that we do not send communications you have refused;

g) analytics and advertising information is retained according to the settings configured on the relevant platforms; and

h) security and fraud information is kept for the period needed to investigate incidents and protect our rights.

When information is no longer needed, it is deleted, anonymised or restricted, as appropriate.

12. Security

We use appropriate technical and organisational measures to protect personal information against:

a) unauthorised access;

b) loss;

c) alteration;

d) improper disclosure; and

e) accidental or unlawful destruction.

These measures may include access controls, authentication, permission management, backups and the use of providers with appropriate security measures.

No system can provide absolute security.

If we identify a personal data breach, we will take the steps required by applicable law, including notifying authorities and affected individuals where necessary.

13. Your rights

Subject to applicable law, you may have the right to:

a) confirm whether we process your personal information;

b) access information we hold about you;

c) ask us to correct inaccurate or incomplete information;

d) request deletion where applicable;

e) request restriction of processing;

f) object to certain processing;

g) receive information you provided to us in a structured, commonly used and machine-readable format;

h) request that it be transferred to another controller where technically possible;

i) withdraw consent at any time; and

j) lodge a complaint with a supervisory authority.

The right to deletion is not absolute. We may need to keep some information to comply with legal obligations, perform contracts, resolve disputes or protect legal rights.

You may exercise your rights by emailing:

hello@senzucoffee.com

We may ask for additional information to verify your identity before dealing with your request.

Exercising your rights is generally free of charge. We aim to respond within one month, although this period may be extended where permitted by law due to the complexity or number of requests.

14. Marketing choices

You may stop receiving marketing emails at any time by:

a) using the unsubscribe link in each email; or

b) contacting us at hello@senzucoffee.com.

You may also manage your analytics and advertising preferences through the cookie settings available on the Website.

15. Complaints

Please contact us first if you have a concern about how we process your information so that we can review and try to resolve it.

You also have the right to lodge a complaint with the relevant supervisory authority.

In Portugal, the relevant authority is:

Comissão Nacional de Proteção de Dados — CNPD

Av. D. Carlos I, 134, 1.º
1200-651 Lisbon
Portugal

Telephone: +351 213 928 400
Email: geral@cnpd.pt

You can find the CNPD’s current contact and complaint channels on its official website.

16. Children’s information

The shop is not directed at children and we do not allow minors to place orders without the involvement and permission of their legal representative.

We do not knowingly collect children’s personal information for marketing purposes.

Please contact us if you believe that a child has provided personal information improperly so that we can review and, where appropriate, delete it.

17. Third-party links

Our Website may contain links to websites or services operated by third parties.

We do not control those websites and are not responsible for their privacy, security or content practices.

When visiting a third-party website, we recommend that you read its privacy notice.

18. Automated decisions

We may use automated indicators made available by our providers to identify potentially fraudulent payments or orders.

Where required by applicable law, we will not make decisions based solely on automated processing that produce legal or similarly significant effects without providing the protections required by law.

19. Future sales in other markets

The shop is currently directed mainly at customers in the European Union.

If we begin actively selling in other markets, including the United States, we may update this Privacy Policy to include:

a) additional rights applying in those markets;

b) mechanisms for opting out of targeted advertising;

c) specific notices about the sale or sharing of information where legally required; and

d) additional representatives or contact details.

We will publish these changes before or when the new processing becomes applicable.

20. Changes to this policy

We may update this Privacy Policy to reflect changes to:

a) our practices;

b) the tools we use;

c) the operation of the Website;

d) the markets in which we operate; or

e) our legal obligations.

The updated version will be published on the Website and will show its revision date.

Where a change is significant, we may also notify you through the Website, by email or through another appropriate method.

21. Contact us

For questions about this Privacy Policy, to exercise a right or to submit a complaint, contact us at:

Senzu Coffee Roasters  ® 
Gentleman’s Coffee, Lda.
VAT No. 517153068
Rua do Rosário, No. 211
4050-524 Porto
Portugal

Email: hello@senzucoffee.com
Telephone: +351 912 288 838