E-BIZ Privacy Policy

Last updated: December 2025

At E-BIZ, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, and how we use and protect it when you use our services.

1. Who We Are

E-BIZ is operated by ZhangBuhl Management ApS, CVR-number 41065869, Marielundvej 30, Stuen, 2730 Herlev, Denmark.
We act as the data controller for personal data collected through our website and mobile application.

2. Scope of This Policy

E-BIZ operates:

  • a customer-facing mobile app, and

  • a web-based platform.

The mobile app is intended for consumers only.

Vendor accounts, vendor dashboards, and vendor management features are available exclusively on the website.

This Privacy Policy applies to both the mobile app and the website, with differences clearly described where relevant.

3. What Data We Collect
3.1 Consumer Data

When you create an account or place an order, we may collect:

  • Name or username

  • Email address

  • Password

  • Order details (items, prices, pickup time, vendor)

3.2 Vendor Data (Website Only)

When you register a shop on our website, we may collect:

  • First and last name

  • Email address

  • Password

  • Shop name and shop URL

  • Phone number

  • Basic business information (e.g. address, description, opening hours)

3.3 Payment Data

We may store limited payment-related information (such as transaction IDs) for bookkeeping and reconciliation purposes. We do not store card numbers or full payment credentials.

4. Camera Access and QR Code Scanning

The E-BIZ mobile app may request access to your device’s camera solely to enable QR code scanning for in-store ordering.

  • No images or video are captured, stored, transmitted, or shared.

  • Camera access is activated only when you choose to scan a QR code within the app.

5. How We Use Your Data

We use your personal data to:

  • Create and manage user or vendor accounts

  • Process and deliver customer orders

  • Send notifications related to order status and system updates

  • Provide customer support

  • Improve our services and platform functionality

  • Comply with legal and regulatory obligations (e.g. accounting requirements)

6. Notifications

We may send push notifications related to order status and service updates (for example, when an order is ready for pickup).

You can manage or disable notifications at any time through your device settings.

7. Legal Basis for Processing

We process personal data based on:

  • Contract performance – to provide the services you sign up for

  • Legal obligation – for invoicing, accounting, and tax compliance

  • Legitimate interest – to improve our services and prevent misuse

  • Consent – for marketing communications, where you have chosen to receive them

8. Data Sharing

We share personal data only when necessary to operate our services:

  • With vendors: when a consumer places an order, the vendor receives the customer’s name and order details

  • With payment providers: to process secure payments

  • With IT and hosting partners: who support platform operation and security

All partners process data in accordance with GDPR and only on our instructions.

9. Data Retention

We retain personal data only for as long as necessary:

  • Account information: retained while your account is active

  • Transaction data: retained for up to 5 years to comply with Danish accounting laws

You may request deletion of your data at any time (see Section 12).

10. Cookies and Similar Technologies

Our website uses cookies for login functionality, security, and basic analytics.
The mobile app does not use cookies but may use similar technologies for authentication and performance monitoring.

You can manage or disable cookies through your browser settings.

11. Data Security

We use secure connections (SSL) and modern authentication methods (such as OAuth 2.0) to protect personal data.
Access to personal data is restricted to authorized personnel only.

12. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent (for marketing communications)

To exercise your rights, contact contact@e-biz.dk. We will respond within a reasonable time and no later than 30 days.

13. Children’s Privacy

E-BIZ is intended for a general audience and does not knowingly collect personal data from children under the age of 13 without parental consent.

14. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.