Privacy Policy

Last updated: September 2026

At CopperZinc, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how MIDOBU, trading as CopperZinc, collects, uses, stores and protects personal information when you visit our website, create an account, place an order, contact us, submit a review or otherwise interact with CopperZinc.

CopperZinc operates internationally and this Privacy Policy is intended to provide information about our processing of personal data under the EU General Data Protection Regulation (GDPR) and other applicable privacy and data protection laws.

1. Who We Are

CopperZinc is a trading name of MIDOBU.

MIDOBU
Chamber of Commerce (KvK): 97106763
VAT identification number: NL005249129B16
Email: contact@copperzinc.com

For the purposes of applicable data protection legislation, MIDOBU is generally the controller of the personal data collected and processed through the CopperZinc website.

If you have questions about this Privacy Policy or how your personal data is handled, please contact:

contact@copperzinc.com

2. Personal Information We Collect

Depending on how you interact with CopperZinc, we may collect the following categories of personal information.

Information you provide directly

This may include:

• first and last name;

• billing address;

• delivery address;

• email address;

• telephone number;

• account login information;

• order and purchase information;

• payment-related information;

• information you provide when contacting customer service;

• information provided when requesting a return or refund;

• information submitted through our contact form;

• product reviews and associated information; and

• information you voluntarily provide through other interactions with CopperZinc.

We do not normally receive or store your full payment card details ourselves. Payment information is processed through the payment providers available at checkout.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, including:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from technical information;

• pages visited;

• products viewed;

• referring website;

• interaction with the website;

• date and time of visits; and

• information relating to cookies and similar technologies.

The information collected depends on your device, browser, privacy settings and the services enabled on our website.

3. How We Collect Personal Information

We collect personal information when you:

• visit or browse the CopperZinc website;

• create a customer account;

• place an order;

• make a payment;

• contact us;

• submit a contact form;

• request a return or refund;

• submit a product review;

• subscribe to marketing communications;

• interact with our website or advertisements; or

• otherwise voluntarily provide information to us.

We may also receive information from service providers that help us operate the CopperZinc store, process orders, provide payment services, deliver products, manage reviews, provide marketing services or maintain website functionality.

4. Why We Use Your Personal Information

We use personal information for the following purposes.

Processing and fulfilling orders

We use your information to:

• process and confirm orders;

• arrange production and fulfilment;

• process payments;

• arrange delivery;

• provide tracking information;

• communicate with you about your order;

• process returns, refunds and exchanges; and

• provide customer support.

The legal basis for this processing is generally that it is necessary to perform the contract with you.

Customer accounts

If you create an account, we use your information to:

• create and maintain your account;

• allow you to view order history;

• save relevant account information;

• provide account-related functionality; and

• secure your account.

The legal basis is generally the performance of the contract or, where applicable, our legitimate interests in providing and securing customer accounts.

Customer service

We use your information to respond to questions, complaints, requests and other communications.

The legal basis may be the performance of a contract, compliance with a legal obligation or our legitimate interests in providing customer service, depending on the circumstances.

Marketing

If you subscribe to CopperZinc marketing communications, we may use your email address and relevant information to send:

• product news;

• new collection announcements;

• offers;

• promotions;

• inspiration;

• information about CopperZinc; and

• other marketing communications.

Our email marketing is managed using Klaviyo.

Where consent is required, we will only send marketing communications after receiving your consent.

You can unsubscribe from marketing communications at any time using the unsubscribe link included in our emails or by contacting us at contact@copperzinc.com.

The legal basis for consent-based marketing is your consent.

Where applicable law permits certain direct marketing based on our legitimate interests, we may rely on that legal basis while respecting your right to object.

Reviews

We use Judge.me to collect and display customer reviews.

When you submit a review, we may process information associated with the review, such as your name or display name, email address, review content, product purchased and other information necessary to manage and display the review.

Judge.me may process this information on our behalf as a service provider.

The legal basis depends on the circumstances and may include consent, performance of a contract or our legitimate interests in providing and improving our review functionality.

Website operation and security

We process technical information to operate, maintain, secure and improve the CopperZinc website.

This may include detecting fraudulent activity, preventing abuse, troubleshooting technical issues and maintaining website security.

The legal basis is generally our legitimate interest in operating a secure and reliable online store and, where applicable, compliance with legal obligations.

Legal and regulatory obligations

We may process personal information where necessary to:

• comply with legal obligations;

• maintain accounting and tax records;

• respond to lawful requests from authorities;

• establish or defend legal claims;

• prevent fraud;

• enforce our terms and policies; or

• protect the rights, property and safety of CopperZinc, our customers and others.

The legal basis is compliance with a legal obligation or our legitimate interests, depending on the circumstances.

5. Legal Bases for Processing

Where the GDPR applies, we process personal data using one or more of the following legal bases:

Performance of a contract
Where processing is necessary to fulfil an order or provide a service you have requested.

Legal obligation
Where we are required by law to retain or process information, such as accounting and tax information.

Consent
Where you have actively consented to a particular processing activity, such as certain marketing communications or non-essential cookies.

Legitimate interests
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

Where we rely on legitimate interests, we consider the nature of the processing and its potential impact on individuals.

6. Payment Information

Payments are processed through the payment methods available at checkout.

Depending on your location and the payment method selected, this may include services such as:

• Shopify Payments;

• credit and debit card networks;

• iDEAL;

• Apple Pay;

• Google Pay;

• PayPal;

• Klarna; and

• other payment providers made available through Shopify.

Payment providers may process personal and payment information independently in accordance with their own privacy policies.

CopperZinc generally does not receive or store your complete payment card number or security code.

7. Shopify

Our online store is operated using Shopify.

Shopify provides the ecommerce infrastructure through which we operate our store, including functions relating to products, checkout, customer accounts, orders, payments, security and other store functionality.

Shopify may process personal information on our behalf and may also process certain information as an independent controller or service provider depending on the service involved.

Shopify may process or store personal information in countries outside the European Economic Area.

Shopify states that its data processing arrangements include contractual safeguards intended to support compliance with applicable data protection laws.

You can manage certain privacy choices through our cookie banner and Shopify's customer privacy functionality.

8. Klaviyo

We use Klaviyo to manage email marketing and related customer communications.

Klaviyo may process information such as:

• name;

• email address;

• purchase information;

• browsing and interaction information;

• marketing preferences; and

• information relating to email engagement.

Klaviyo processes customer data on behalf of CopperZinc where it acts as our processor.

Klaviyo provides contractual and technical mechanisms intended to support GDPR-compliant processing and international data transfers.

You can unsubscribe from marketing emails at any time.

9. Judge.me

We use Judge.me to collect, manage and display product reviews.

Judge.me may receive information required to associate a review with a customer or purchase, depending on the review functionality we use.

Judge.me may act as a data processor when processing customer information on behalf of CopperZinc.

Judge.me provides GDPR-related mechanisms, including support for data subject rights and contractual safeguards for international transfers.

10. Suppliers and Fulfilment Partners

CopperZinc products are made or arranged for production after an order has been placed.

Depending on the product and destination, we may provide relevant order information to suppliers or fulfilment partners so that your order can be produced and delivered.

This may include:

• name;

• delivery address;

• telephone number;

• email address;

• product information;

• order number; and

• other information necessary to fulfil the order.

Our suppliers and fulfilment partners may process this information only as necessary to manufacture, prepare, package and/or deliver your order or provide related services.

Because CopperZinc ships internationally, some suppliers or fulfilment partners may be located outside the European Economic Area.

Where personal data is transferred outside the EEA, we take reasonable steps to ensure that appropriate legal safeguards are in place where required by applicable law.

11. Delivery Providers

We may share relevant delivery information with the carrier responsible for delivering your order.

Depending on the destination and delivery service, the carrier may receive information such as:

• name;

• delivery address;

• telephone number;

• email address;

• tracking information; and

• order or shipment reference.

The carrier uses this information to provide delivery services and related communications.

12. Social Media and Advertising

CopperZinc may use Meta services, including Facebook and Instagram, and Google advertising services to promote our products and understand the effectiveness of advertising.

Depending on the tools enabled on our website, these services may use cookies, pixels or similar technologies to collect information about website visits, interactions and advertising activity.

This may include information such as:

• IP address;

• browser and device information;

• pages or products viewed;

• interactions with advertisements;

• approximate location; and

• information about how you interact with our website.

Where required by applicable law, non-essential advertising and tracking technologies will only be activated after the necessary consent has been obtained.

You can manage your cookie preferences through our cookie banner and available privacy controls.

13. Analytics

CopperZinc may use analytics and website measurement technologies to understand how visitors use our website, identify technical problems, improve the shopping experience and measure the effectiveness of our marketing.

The specific analytics technologies enabled on the website may change over time.

Where a technology uses non-essential cookies or similar technologies that require consent, those technologies will be subject to your applicable cookie preferences.

14. Cookies and Similar Technologies

CopperZinc uses cookies and similar technologies to operate and improve the website.

Cookies may be used for:

• essential website functionality;

• shopping cart and checkout functionality;

• customer account functionality;

• security;

• remembering preferences;

• analytics;

• advertising; and

• measuring marketing performance.

Some cookies are essential and cannot be disabled where they are necessary for the website to function.

Non-essential cookies, such as certain analytics and advertising cookies, may require your consent depending on applicable law.

You can manage your cookie preferences through the cookie banner and privacy settings available on the CopperZinc website.

Shopify provides tools for managing customer privacy settings and cookie consent. We regularly review these settings to ensure they reflect the services used by CopperZinc.

15. Instagram

CopperZinc may operate social media profiles, including Instagram.

If you interact with us through Instagram, the information you provide through that platform may be processed by both CopperZinc and Meta, depending on the nature of the interaction.

Instagram and Meta may independently process personal information according to their own privacy policies and terms.

We do not control how third-party social media platforms process information outside our own services.

16. Customer Reviews and User Content

If you voluntarily submit a review, photograph or other content to CopperZinc, we may process and publish the information you provide in connection with that submission.

Where a review is published, information such as your name or display name and review content may be visible to other website visitors.

You should avoid including sensitive personal information in publicly visible reviews.

You may contact us if you wish to request correction or removal of a review or associated personal information, subject to applicable law.

17. Sharing Personal Information

We may share personal information with third parties where necessary to operate CopperZinc and provide our services.

These parties may include:

• Shopify;

• payment providers;

• Klaviyo;

• Judge.me;

• suppliers and manufacturers;

• fulfilment partners;

• shipping and delivery providers;

• technology and hosting providers;

• analytics and advertising providers;

• fraud prevention and security providers;

• professional advisers;

• accountants;

• legal advisers; and

• government authorities where legally required.

We do not sell your personal information as a standalone commercial product.

18. International Transfers

CopperZinc serves customers worldwide and uses service providers and suppliers that may operate in countries outside the European Economic Area.

Where personal data is transferred outside the EEA, we take reasonable steps to ensure that the transfer is lawful and that appropriate safeguards are used where required.

These safeguards may include:

• an adequacy decision issued by the European Commission;

• Standard Contractual Clauses;

• other legally recognised transfer mechanisms; or

• another lawful basis for international data transfer.

Because our suppliers and service providers may change over time, the countries to which personal information may be transferred can also change.

19. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods depend on the type of information and the reason for processing.

For example:

• order and financial records may be retained for the period required by tax and accounting laws;

• customer account information may be retained while your account remains active;

• customer service communications may be retained for as long as necessary to resolve the relevant matter and maintain appropriate records;

• marketing information may be retained until you withdraw your consent or otherwise opt out, subject to applicable law; and

• review information may remain published until removed or deleted in accordance with applicable law and our review practices.

When personal information is no longer required, we will take reasonable steps to delete or anonymise it.

20. Data Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• disclosure; and

• other unlawful or unauthorised processing.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

21. Your Privacy Rights

Depending on the applicable law and circumstances, you may have rights including:

Right of access

You may request confirmation of whether we process your personal information and request a copy of the information we hold about you.

Right to rectification

You may request correction of inaccurate or incomplete personal information.

Right to erasure

You may request deletion of your personal information where the legal requirements for deletion are met.

Right to restriction

You may request that we restrict processing in certain circumstances.

Right to object

You may object to certain processing based on our legitimate interests.

You have an absolute right to object to direct marketing.

Right to data portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where we process your personal information based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

22. How to Exercise Your Rights

To exercise a privacy right, contact:

contact@copperzinc.com

Please provide sufficient information for us to identify your request and verify your identity where reasonably necessary.

We will normally respond within the period required by applicable law.

We may ask for additional information where reasonably necessary to verify your identity and protect personal information from unauthorised disclosure.

23. Marketing Preferences

You can unsubscribe from CopperZinc marketing emails at any time by clicking the unsubscribe link included in the email.

You may also contact:

contact@copperzinc.com

Unsubscribing from marketing communications does not stop essential service communications, such as order confirmations, delivery information, account security messages or information necessary to fulfil a transaction.

24. Children

CopperZinc does not knowingly target children with its products or services.

Our website is intended for people who are legally able to enter into contracts for online purchases under applicable law.

If you believe that a child has provided personal information to us, please contact us at:

contact@copperzinc.com

25. Third-Party Websites

The CopperZinc website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

26. Fraud Prevention and Legal Requests

We may process and disclose personal information where reasonably necessary to:

• detect and prevent fraud;

• protect our website and systems;

• investigate suspicious activity;

• enforce our Terms & Conditions;

• protect our rights and property;

• respond to legal proceedings;

• comply with court orders or lawful requests; or

• comply with applicable laws and regulations.

27. Business Transfers

If MIDOBU or CopperZinc is involved in a merger, acquisition, restructuring, sale of assets or similar transaction, personal information may be transferred as part of that transaction.

Where required by law, we will provide appropriate notice and take reasonable measures to protect the information involved.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our business;

• the products and services we offer;

• technology;

• third-party service providers;

• legal requirements; or

• our privacy practices.

The latest version will always be published on the CopperZinc website.

The date at the top of this policy indicates when it was last updated.

29. Complaints

If you have concerns about how we process your personal information, please contact us first:

contact@copperzinc.com

We will make reasonable efforts to investigate and resolve your concern.

If you are located in the European Union and believe that your data protection rights have been infringed, you also have the right to lodge a complaint with the data protection authority in the country where you live, work or where the alleged infringement occurred.

For customers in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

30. Contact

If you have questions about this Privacy Policy or the way CopperZinc processes personal information, please contact:

MIDOBU / CopperZinc

KvK: 97106763
VAT: NL005249129B16
Email: contact@copperzinc.com

We will handle privacy-related enquiries as promptly as reasonably possible.

---

© 2026 MIDOBU. All rights reserved.