← Back to ZAMBRA

Privacy policy

Last updated: 17 August 2026.

1. Data controller

• Controller: Luis Rodríguez Manzaneque (sole trader)
• NIF: 51082032K
• Address: Calle Luis Moya Blanco, 36, 28055 Madrid, Spain
• Email: info@zambra.bike
• Phone: +34 650 445 540

2. The data we process and why

• Enquiries and advice: name, contact details, source channel and conversation content to respond via the website, email, phone, Instagram or WhatsApp, maintain context and allow team intervention.
• Saved builds: contact details, build code and options to send and restore your configuration and answer questions.
• CRM and follow-up: sales stage, owner, next action, declared needs and operational summary to organise support without repeatedly requesting the same information.
• Orders: identification, contact, billing, delivery, configuration, assigned payment method and transaction details to manage the purchase, payment, build, delivery and after-sales support.
• Quality Passport: order code, build and workshop measurements to document the build, facilitate servicing and provide after-sales support. Access through a link or QR code shows the customer's name, build and final price. It does not show phone, email, address, internal notes or internal cost breakdowns.
• Warranty and after-sales service: order details, incidents, photographs and communications needed to handle enquiries, warranties or Crash Replacement.
• Marketing communications: email or phone details to send news and offers only where consent or a qualifying prior relationship exists. You may unsubscribe at any time.
• Browsing: technical and usage data obtained through cookies, only as explained in the Cookie Policy.

3. Legal basis

We process data to take requested pre-contractual steps and perform the purchase contract; meet tax, accounting and consumer-law obligations; answer enquiries on the basis of consent or a legitimate interest in handling them; and send marketing communications where a valid legal basis exists. Acceptance of non-essential cookies is based on consent.

4. Retention periods

The full content of conversations is retained for 12 months from the last interaction. After this period, it is deleted together with summaries that could reproduce it, unless an open matter, order, incident or claim requires retention until it is closed. Orders, payment records, invoices and information needed to meet legal obligations are retained for the applicable periods. The final specification, warranty and Quality Passport may be retained throughout the product's life to identify the build and provide after-sales service, without retaining the entire conversation for that reason. Data used solely on the basis of consent is retained until consent is withdrawn, without prejudice to the minimum information needed to document its management.

5. Recipients and providers

Providers essential to delivering the service may access data, including hosting, email, messaging, artificial intelligence, payments, transport, support and consented analytics providers. Stripe processes data needed for payments and fraud prevention when ZAMBRA assigns that payment method; carriers receive details necessary for delivery; Meta processes information when you contact us through WhatsApp or Instagram; and the AI provider may process text needed to prepare MILO's response. ZAMBRA limits the data sent to each provider and puts the required safeguards in place, including those concerning international transfers where applicable.

6. Required data and automated decisions

Fields marked as required are necessary to handle the request or complete the purchase. Website calculators and recommendation tools provide indicative results based on the information entered, but do not make decisions with legal or equivalent effects on users.

7. Your rights

You may request access, rectification, erasure, objection, restriction or portability of your data, and withdraw consent, by emailing info@zambra.bike and stating which right you wish to exercise. We may request reasonable information to verify your identity. If you believe processing does not comply with the law, you can complain to the Spanish Data Protection Agency.

8. Security and minors

ZAMBRA uses technical and organisational measures appropriate to the risk to protect data. The store is not directed at minors and does not knowingly seek to collect their data.

9. Changes to this policy

This policy may be updated when processing, providers or legal requirements change. The current version and its date will always be available on this page.