- What information do we collect about you?
- Consumer returns
- Use of Your Information
- Participating in events
- Access to your information and correction
- Cookies
- Other websites
- Changes to our privacy policy
- How to contact us

In running and maintaining our website, software and services we may collect and process information provided voluntarily by individuals and businesses. For example, when you submit an enquiry or register to use our services or software. We collect information about you when you create an account with us, when you sign a contract, when you become a customer, when you make an enquiry on the website and/or when you register for an event or meet us at an event, conference or trade show. This includes basic contact details (including but not limited to name, company, email address, telephone) as well as potentially some questions about the nature of your business. This information can be accessed by our team in the UK. Appropriate security measures are in place to ensure your data is secure.

ZigZag Global provide software and logistics to help retailers manage returns globally. We partner with couriers, marketplaces, warehouses and retailers to help them offer a better returns experience to their customers, which may include managing logistics and returns with leading carrier partners and postal partners. In order for us to process an order it is necessary for us to store data about the transaction which may include your name, address, phone number, email address and details of what you purchased so that we can facilitate the order or return. This may include passing details to 3rd parties such as couriers and our payment gateway required to complete the order.

- entering the required information on the returns portal; and
- entering their credit or debit card details for payment of applicable charges

- sending you an order confirmation together with an order tracking number;
- providing confirmation on the Returns Portal

- print the return label which can be downloaded from the returned order confirmation screen or the returned order confirmation email, or safely store the QR code required at the appropriate drop off point. Please note that some services require a printer
- ensure that the returned order is sufficiently packaged in appropriate protective packaging to avoid damage in transit;
- attach the return label securely to the returned order;drop the returned order at the appropriate drop off point or have it collected depending on the service selected at checkout;
- obtain a receipt for the returned order at the appropriate drop off point

ZigZag is unable to supply you with the services unless you have complied with the requirements above.

We reserve the right to reject a shipment that contains any illegal, dangerous, flammable or hazardous goods or products. If you wish to use our services to return restricted items you must obtain our prior written consent.

- You must drop the returned order off at the appropriate drop off point within 14 days of receipt of the order confirmation as the return label may expire after that date

- You may choose to cancel the return within 14 days of receipt of the returned order confirmation provided that you have not already sent the item. In the event of cancellation you shall be entitled to request a refund
- You will receive a refund if we need to cancel the order for events outside of our control

- Complete the returns process or send back your return within 14 days
- Pack your return securely and safely in appropriate packaging
- Send your item back using the valid returns label that we supplied
- Did not obtain any proof of posting using a tracked method

ZigZag Global will supply the Services to you using reasonable care and skill. We shall endeavour to meet the timeframes stipulated for the appropriate service selected for the returned order but any such timeframes shall be estimates only and time shall not be of the essence in performance of the services. ZigZag shall not be held responsible for failure of carriers to deliver on time or for Force Majeure events outside our control.

We may perform the services ourselves or we may sub-contract part or all of the services to partners such as carriers or 3PL providers. You acknowledge that we provide a service for the transport of goods with a specified timeframe for delivery, therefore you do not have a right to cancel the Order under the Consumer Contracts (Information, Cancellation and Additional Payments) Regulations 2013 (Regulation 28(1)(h)). This does not affect your statutory rights.

By using the services, you accept our terms and conditions.

ZigZag Global accepts responsibility for the returns postage label, but by using our services you acknowledge that we are not the retailer of the returned goods. We are a service partner of the retailer providing a returns software solution (returns portal) and return postage or carrier labels on behalf of the retailer.

The cost of using the service is displayed on the portal and are inclusive of taxes applicable.Payment for the Services is required upon completion of your returned order by credit or debit card via our payment gateway, via PayPal or Apple pay or Android Pay. If you paid for a return, please note that on your debit / credit or bank statement you will see the charges are payable to ZIGZAG GLOBAL as we are the company providing you with the services not the retailer of the returned products.

Some of the retailers we work with may choose to deduct the cost of postage from your refund rather than charging you for a postage label in the checkout. If this option is offered you will need to agree to this deduction before the return label can be provided. Please check the retailers returns policy if you are unsure.

ZigZag Global Ltd

4th Floor Winchester House
19 Bedford Row
London
WC1R 4EB
UK

Please use this address for correspondence and a copy by email to support@zigzag.global

ZigZag Global Ltd

c/o Simmons Gainsford
14th Floor
33 Cavendish Square
London
W1G 9DQ

NB this address is our accountant and should not be used for correspondence

217382805

09404819

If you have any questions or if you have any comments, suggestions or complaints, please contact us. You can contact ZigZag by e-mailing ZigZag at support@zigzag.global. If you wish to contact us in writing you can send this to us by e-mail, by hand, or by pre-paid post to:

ZigZag Global Ltd

4th Floor Winchester House
19 Bedford Row
London
WC1R 4EB
UK

If your correspondence requires a response we will confirm receipt of this by contacting you in writing or by return of email. If we have to contact you or give you notice in writing, we will do so by e-mail, by hand, or by pre-paid post to the address you provide to us in the returned order.

If you contact us via our website or subscribe to our emails you will be added to the ZigZag database so that we can contact you. Joining our database includes being kept informed (including via email) of ZigZag business news, updates on the returns policies or best practices, information about government legislation, events and webinars, including some sponsored content. You may unsubscribe from this at any time by following the instructions in the email. If you have voluntarily shared your information with us by giving us a business card at a conference, event or tradeshow, we may email you to stay in contact but you will always have the option to unsubscribe. We use the information that we collect from you to provide our services to you. In addition to this we may use the information for one or more of the following purposes:

1. To provide information to you that you request from us relating to our products or services
2. To provide information to you relating to other products that may be of interest to you
3. To inform you of any changes to our website, policies, services or goods and products

For delegates:

During event registration, delegates are asked to actively give consent for relevant contact details needed to inform the delegate about the details for that event (reminders, agendas, changes etc.). Further consent will be sought for any issues beyond the scope of that event.For any events co-organised by ZigZag Global and a 3rd party, during registration delegates will be informed as to which details will be shared with the 3rd party organisation and asked to actively give consent for their details to be shared in this way. ZigZag attends many conferences, events and trade shows around the world in a delegate or exhibitor capacity and is often not the organiser of the conference, event or trade show. At some events there may be photography and/or filming. This is will be included in the consent terms when registering for the event. This material may be used in event reports, articles and related marketing collateral.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org

You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However in a few cases some of our website features may not function as a result. Our full Cookie Policy is explained here.

Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.

We keep our privacy policy under regular review and we will place any updates on this web page.

Please contact us if you have any questions about our privacy policy or information we hold about you. Email support@zigzag.global

The new EU General Data Protection Regulation (GDPR) has now come into force and impacts every organisation which processes personal data of EU citizens. It introduced new responsibilities, empowers businesses to be accountable for their processing of personal data as well as enabling EU citizens to protect their privacy and control the way their data is processed. Even though the UK has left Europe, the GDPR still applies and replaces the UK’s Data Protection Act 1998.

Personal data is any information that relates to a living individual. It also includes any data that can be used with other sets of data to identify an individual. Typical examples of personal data are name, identification number, location data, online identifier and email address.

Processing relates to any operation carried out on personal data including collection, recording, organising, structuring, storing and using. Processing also doesn’t have to be by automated means which means that processing includes paper-based, non-digital systems.

A Data Subject is the individual whose personal data is being processed

A Data Controller is the organisation which determines how personal data is processed

A Data Processor is an organisation which processes data on behalf of a Controller. This typically means a third party who is used by the Controller to process their data (e.g. a marketing company used to send out marketing materials)

For detailed information about the GDPR and data protection, visit the Information Commissioner’s Office website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

When you use our services to store or process your personal data (including customer’s or user’s data), you are the Data Controller and we are a Data Processor. This will be true for any personal data you place on our servers either directly, via a hosted website or by use of any of our other services.

The GDPR requires you, as a Data Controller, to ensure that any Data Processor services you use to process personal data are GDPR compliant. This means that when you use any of our services to process your personal data you need to carry out due diligence on our services and ensure certain contractual terms are in place.

This GDPR statement is our way of helping you meet these GDPR regulatory requirements and to offer you an assurance that we take GDPR and the security of your personal data as part of the everyday running of our services.

As UK Company, ZigZag Global is committed to ensuring our business, services and internal processes are GDPR compliant. This GDPR Statement provides our assurances to GDPR compliance.

- Employee data protection training to ensure all staff understand their role in data protection compliance
- Updated internal policies relating to data protection and responsibilities within our businesses for ongoing GDPR compliance
- Check all our systems, processes and services to ensure they meet the requirements of GDPR, particularly around security of data and our use of any external third-party services
- Procedures to ensure ongoing complianceUpdated terms and conditions of services that meet the contractual requirements of GDPR in the Data Controller – Data Processor relationship

- We have fully assessed our GDPR compliance both regarding the services we offer to our customers and regarding our internal policies and procedures
- We have appropriate technical and personnel protocols in place to ensure the security of your data
- We carry out due diligence against any sub-processors or other third party processors we use to ensure their GDPR compliance (such as data centres)
- We only allow specific members of staff access to our servers and what access that is available is limited to specific circumstances
- Our staff are trained in GDPR compliance and understand their responsibilities for managing the systems that process your data

You are the owner of the data you submit to our servers.

When your data is placed on our servers, you are the Data Controller and ZigZag Global, the Data Processor. We do not access the data you store on our services and any processing (as a Data Processor) is only stored to help facilitate the transactions we manage on behalf of our clients and suppliers. Our clients and suppliers are typically Retailers, Marketplaces, Couriers or 3rd Party Fulfilment partners.

We do not use personal data for any processing of our own.

ZigZag Global needs to process your personal information in order to facilitate collection of returns.

Whilst we do need to share your data with suppliers such as a courier (in order to collect goods from your house for example) we do not share or provide access to any of your data with other third parties unless required to do so by law. Where law enforcement or other authorised parties request access to our servers, we follow strict internal policies for dealing with such requests in line with existing law. Furthermore, the third parties are required to demonstrate they have a lawful reason to access the data and under what authority.

ZigZag operate servers in two data centres in the UK. Both data centres are hosted by Microsoft Azure, in Cardiff and in London. Staff at our Head Office in London also have restricted access to some data.

- 24/7/365 Manned Facilities
- CCTV Security Cameras Covering Inside, Outside and All Entrances of Data Centers
- Site Entrances Controlled By Electronic Perimeter Access Card System
- Sites Remotely Monitored By 3rd Party Security Company
- Entrances Secured by Mantraps with Interlocking Doors
- SSAE-16 & HIPAA Compliant, Safe Harbor Certified

All our employees keep up to date with all technical aspects of security and ensure the ongoing security of our servers and systems. This means that any security patches are applied to our systems as a matter of priority and any changes or updates to our own systems are done so, always, with data protection and privacy in mind and where appropriate, in discussion with our customers. Where we have an agreement in place with our customers to do so, we also maintain the security of our customer’s own servers or hosted applications.

Remote admin access to our servers is strictly restricted to key personnel within our Technical Support team. Our team will access a server only to resolve an issue reported by the client. Or to ensure that the Managed Hosting Service Level opted for by a client is met.

Microsoft’s Data centre staff have physical access to the servers, but we have strict protocols in place to ensure they only do so, if requested by a member of our technical support team and such a request will only be in cases when they need to carry out a visual check of a server or carry out physical maintenance on the server itself.

All ZigZag Global employees are trained and made aware of their responsibilities under GDPR including their duties with regards to access, security and processing of any personal data stored on our servers. Security and data governance are covered in our employee handbooks and actively discussed as part of quarterly meetings to ensure all staff are up to date.

Should our approach to any aspect covered by this statement change we will make sure, where your data is impacted, that we notify you within a reasonable timeframe and in line with any contractual terms in place between us.

In the unlikely event of a breach occurring (as defined in the GDPR) we will notify you within 48 hours of the breach coming to our attention. This will be enough time for you to consider your requirements, under GDPR, for reporting the breach to the ICO and Data Subjects.

We are registered with the ICO.

Our approach to our own compliance also helps you comply with your own GDPR compliance requirements. This statement should go some way to explain our approach to GDPR compliance. By using our services, you can be assured that your use is GDPR compliant.

If required we will assist you or the Information Commissioner’s Office with any query relating to the GDPR compliance of our services.

Any questions, queries or requests for further information regarding our GDPR compliance should be sent to:

ZigZag Global
2nd Floor Winchester House
19 Bedford Row
London
WC1R 4EB
Email support@zigzag.global.