ZAM'S PRIVACY POLICY
ZAM'S PRIVACY POLICY
LAST MODIFIED: JUNE 2026
This Privacy Policy details how ZAM'S collects and discloses personal information, and how a ZAM'S customer can access their own personal information. This Privacy Policy applies to the collection of information by Zam's Licensing LLC (a wholly-owned subsidiary of Zambrero Operations NE LLC, and whose ultimate parent company is Zambrero Australia Holdings Pty Ltd, a company registered in Australia) and any agent that collects information on our behalf (collectively referred to as ZAM'S, we or us). This Privacy Policy applies to our website, mobile application, in-restaurant interactions (including kiosks and in-store Wi-Fi), and any other services that link to this Policy (collectively, our Services).
ZAM'S is committed to protecting your privacy and respects and upholds your rights to privacy protection under applicable privacy laws. These laws regulate how we collect, hold, use and disclose personal information (as defined in those laws) about you and other individuals. In the United States, ZAM'S complies with applicable federal and state privacy laws, including the Children's Online Privacy Protection Act (COPPA), the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), the Florida Information Protection Act (FIPA), the California Consumer Privacy Act (CCPA) where applicable, and other applicable state privacy laws. This Privacy Policy sets out the basis of how and when we collect your personal information, what that information is used for, who uses it, when it may be disclosed to other parties and to whom we may disclose it. By contacting ZAM'S to make an enquiry, to join our ZAM'S Loyalty Program, to place an order or by accessing the ZAM'S website at www.zamsusa.com or any related mobile application (the Website), you are deemed to have read and agreed to be bound by this Privacy Policy. For the avoidance of doubt, the Website includes the ZAM’S mobile application.
What is your personal information?
Personal information is any information or an opinion that can be used to identify you. This may include your name, address, telephone number, email address, and date of birth. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.
What personal information is collected from you?
a) Website. When you visit the Website or use the Website to make an order from a Restaurant, we may collection information you provide about yourself including your name, address, date of birth, contact details (such as mobile number and e-mail address) and payment information. We may also collect information about your usage of the Website and information about you from materials you post to the Website and e-mails or letters you send to us.
b) Audio Recordings and Transcriptions. When you contact our customer service team, restaurant or office by telephone, or interact with any voice-enabled ordering technology, your call or verbal interaction may be recorded and transcribed for training, quality assurance, and service improvement purposes. You will be informed at the commencement of any such recording where required by applicable law.
c) Mobile devices. We may collect technical information from your mobile device or your use of the Service or Website, for example, location data and certain characteristics of, and performance data about, your device, carrier/operating system including device and connection type, IP address, mobile payment methods, interaction with other retail technology such as use of NFC Tags, QR Codes or use of mobile vouchers.
d) Applications. If you are applying for a position of employment or to be a franchise partner with us, we may collect information provided by you or your referees as part of those applications.
e) ZAM’S Loyalty Program. If you sign up for and participate in our ZAM'S Loyalty Program, you may be asked to provide certain contact information (including name, mobile number and email address). We collect information about purchases you make through our ZAM'S Loyalty Program.
Where you choose to provide your date of birth as part of registering for or participating in our ZAM'S Loyalty Program, ZAM'S will use this information to provide you with a birthday reward, such as a discount or complimentary item, around the time of your birthday. Your date of birth may also be used on an aggregated, non-identifiable basis for customer purchasing analysis. It is not compulsory for you to provide your date of birth. If you choose not to, you will not receive a birthday reward but will otherwise be able to participate in the ZAM'S Loyalty Program.
f) In-Restaurant Data Collection. When you visit one of our restaurants, we may collect information about you through the following means:
CCTV and Video Surveillance. We use closed-circuit television (CCTV) and other video surveillance technology in and around our restaurant premises. We only use CCTV where it is lawful to do so, and for the following purposes: (i) to prevent and detect crime, misconduct, accidents, and health and safety issues; (ii) to report alleged criminal activity to appropriate law enforcement authorities; (iii) to ensure the security of our property and protect our assets; (iv) to provide evidence in connection with legal proceedings; and (v) to assist in ongoing operational management, including dealing with complaints. CCTV footage is retained for a limited period and is only accessible to authorised personnel or as required by law.
In-Store Kiosks. If you place an order or interact with a self-service kiosk in our restaurant, we may collect your order details and payment information. This information is used to process your order and, where you are a ZAM'S Loyalty Program member, to update your account by the applicable reward points and purchase information.
In-Store Wi-Fi. If we offer Wi-Fi services at any of our locations, our Wi-Fi network provider may capture certain data from devices that connect to the network, such as a unique device identifier. We may also use Bluetooth or similar technologies in our restaurants to detect the presence of your device, which provides us with operational and analytics insights. You are not required to connect to our Wi-Fi to visit or dine at ZAM'S.
g) Third-Party Delivery Platforms. If you place an order through a third-party food delivery platform or service (such as Uber Eats or similar providers), that platform may share certain information with us relating to your order, such as your name, phone number, delivery address, and order details. Information collected by third-party delivery platforms is also governed by their own privacy policies, which we encourage you to review.
How we collect your personal information
ZAM'S will endeavour to collect information directly from you whenever possible, however personal information may also be collected on our behalf by our agents. We collect personal information about you in a number of ways, including but not limited to:
- directly from you when you make a telephone or online enquiry or place an order;
- directly from you if you send us personal correspondence, such as emails or letters;
- when you provide information and navigate through the Website, including through cookies and other tracking technologies;
- when you complete our ZAM'S Loyalty Program application, contact us form, or any other forms;
- when you enter competitions run by us;
- when you apply for any positions with us (see Applications for Employment below);
- when you apply to become a franchise partner (see Franchise Partner Applications below);
- from ZAM'S related companies;
- from publicly available sources of information;
- from third parties such as credit reporting bodies and marketing agencies, including information you may provide to us using our social media pages;
- from our own records. We only collect personal information which is reasonably necessary for us to conduct our business and to meet our legal obligations.
- from social media networks when you interact with our pages or content (for example, when you “like”, “follow”, or “share” our content). The information we receive depends on your privacy settings with the relevant social network;
- if you log into the Website using a third-party authentication service (such as Facebook or Google), we will receive certain profile information from that service (such as your name and email address) as permitted by your settings on that platform. You should review the privacy policy of any third-party platform before using it to connect to our Services; and
- from third-party food delivery platforms where you place an order for our products through their service (see “What personal information is collected from you?” section above).
Applications for Employment
a) When you apply for a job with us, most of the personal information that we collect about you is the information that you provide and contained within your application, such as your name, address, telephone number, education and employment history.
b) In considering your application, we may also collect personal information about you from third parties such as your previous employers or referees. We may also collect sensitive personal information about you, such as your criminal record. Where we do so, your consent will be sought first.
c) The information collected in the course of your employment application process will be used to assess your suitability for a position with us (or another ZAM'S company), to assess your qualification to move forward in the recruitment process and/or to store your details for opportunities that may arise in the future.
d) Where you do not provide us with information that we request we may not be able to assess your suitability for a position or any future openings.
e) During the course of your employment application process with us, we may disclose your information to: a. your nominated referees; b. past employers; c. recruitment agencies/contractors; d. other ZAM'S companies; e. government or other agencies, such as to conduct criminal record checks; and f. educational organizations, such as to verify your qualifications.
Franchise Partner Applications
a) When you apply to become a ZAM'S franchise partner, most of the personal information that we collect about you is the information that you provide and contained within your application, such as your name, address, telephone number, education, employment history, financial status and history, business interests and associations.
b) In considering your application, we may also collect personal information about you from third parties such as your previous employers, and business or personal referees. We may also collect sensitive personal information about you, such as your criminal record. Where we do so, your consent will be sought first.
c) The information collected in the course of your franchise partner application will be used to assess your suitability for owning a franchise with us (or another ZAM'S company), to move forward in the recruitment process and/or to store your details for future franchise opportunities.
d) During the course of your franchise partner application with us, we may disclose your information to: a. your nominated referees; b. past employers; c. agencies/contractors acting for you; d. government or other agencies, such as to conduct criminal record check, credit checks and business interests searches; and e. educational organizations, such as to verify your qualifications.
For what purposes do we collect, hold, use and disclose your personal information?
a) ZAM'S uses your personal information so that we can improve and perform our business activities and functions and to provide you with any products or services which you may request, or to respond to any query or complaint that you may have. We may also use your personal information, for example to:
a. verify your identity;
b. administer and manage our ZAM'S Loyalty Program, including sending you offers and promotional communications;
c. provide the products or orders to you and to bill you or process your payment;
d. administer and manage our services including charging and billing you for those products;
e. assist with the administrative, marketing, planning, product or service development, quality control and research purposes of us and our related bodies corporate, contractors or service providers;
f. inform you of ways that the services provided to you could or have been improved;
g. conduct appropriate checks for fraud;
h. update our records and keep your contact details up to date;
i. provide to third parties who have a bona fide interest in acquiring a franchise or in relation to the sale of our business generally; and
j. maintain and develop our business systems and infrastructure, including testing and upgrading of these systems.
b) ZAM'S may combine any information which it collects from you with information collected by its related companies. We will not sell or license any of your personal data to third parties for their direct marketing purposes unless we have your express consent to do so.
c) We will also use and analyse the information we collect so that we can administer, support, improve and develop our business, for any other purpose whether statistical or analytical and to help us prevent fraud.
d) When collecting your personal information, we do so in accordance with applicable United States federal and state privacy laws. We may also use your personal information for other purposes not listed above. Where we do so, this will be made clear to you.
e) You agree that we may disclose personal information which we collect from you to other companies that also hold information about you (including any payment processor). We and/or those companies may combine the information in order to better understand your preferences and interests, thereby enabling them and us to serve you better.
f) We may use artificial intelligence (AI) and automated processing tools to assist with customer service, order processing, analytics, and service improvement. Where we use AI tools that process your personal information, we do so in accordance with this Privacy Policy and applicable law. We may use de-identified or aggregated data derived from your interactions with our Services to train, test, or improve AI models; we will not use personally identifiable information for AI training without appropriate authorisation. We do not use AI to make decisions that produce significant legal effects about you without human oversight.
g) We may de-identify or aggregate personal information we collect such that it can no longer reasonably be used to identify you. We may use de-identified or aggregated data for any lawful business purpose, including analytics, research, product development, and marketing, and we may share such data with third parties. We will not attempt to re-identify de-identified data and will contractually require our partners to do the same.
What happens if we cannot collect your personal information?
If you do not provide us with the personal information described above, some or all of the following may happen:
a) we may not be able to provide our products or the Services to you;
b) we may not be able to provide registration or benefits under our ZAM'S Loyalty Program;
c) we may not be able to provide you with information or responses that you may want, including information about special promotions or an event;
d) we may be unable to tailor the content of the Website (including the mobile application) to your preferences; or
e) we may not be able to process or progress your application, such as for employment or a franchised business.
When we disclose your personal information
a) In order to deliver the products and services you require, ZAM'S may disclose your personal information to organizations outside ZAM'S.
b) The information you provide to us will be transferred to and stored on our servers which may be in or outside the United States, and may be accessed by or given to our staff working outside the United States and third parties including companies within the ZAM'S group of companies (which means our subsidiaries and affiliates, our ultimate holding company and its subsidiaries and affiliates).
c) Your personal information may be disclosed to organizations and third-party service providers who we engage to carry out the following services: a. customer support enquiries; b. mailing operations; c. billing and debt-recovery functions; d. payment systems requirements; e. technology services; f. professional service functions like legal, accounting and business advisory; g. marketing and market research; h. product, website and mobile application usage analysis; and i. administration and management of our ZAM'S Loyalty Program.
d) We may disclose your personal information to:
a. any parties necessary to provide the products you purchase from us or the Services (including payment processors); b. any parties necessary to provide you with access to the Website or to operate our ZAM'S Loyalty Program; c. external IT service providers; d. your authorized representatives or your legal advisers (when requested by you to do so);
e. credit reporting bodies or fraud checking agencies (where relevant); f. our related and associated companies (see also Zambrero Group Access below); g. our professional advisers, including our accountants, auditors and lawyers; h. government and regulatory authorities and other organizations, as required or authorized by law; i. potential and current franchisees and their agents; j. if ZAM'S is taken over or sold, to the takeover company and professional advisors associated with that transaction; k. third party competition/promotion hosting agencies; and l. any others you have been informed of or consented to (express or implied).
e) ZAM'S shall take reasonable steps to ensure that these organizations are bound by privacy obligations in relation to the continuing protection of your personal information.
f) We may use the information that you provide if we are under a duty to disclose or share your information in order to comply with any legal obligation; or in order to enforce the Website terms of use, the ZAM'S Loyalty Program terms and any other agreement; or to protect our rights or the rights of others. This includes exchanging information with other organizations for the purposes of fraud protection and prevention.
Transfer of Personal Information
Personal information collected on the Website may be hosted, stored, processed or supported in the United States or in any other country in which ZAM'S or its affiliates, subcontractors or agents maintain facilities. By using the Website, you consent to any transfer of information outside your state or country of residence. Where personal information is transferred internationally, ZAM'S will take reasonable steps to ensure that the information is protected consistently with this Privacy Policy and applicable United States law.
In particular, as ZAM'S uses Wix as its website platform and email marketing provider, data may be stored or processed in the United States and other jurisdictions where Wix and its service providers operate. By using the Website and Services, you acknowledge and consent to the transfer of your information to those jurisdictions, which may have data protection laws that differ from those in your state of residence.
Zambrero Group Access
ZAM'S forms part of the Zambrero group of companies. Accordingly, team members employed by Zambrero group companies may access ZAM'S customer data where this is necessary to provide services to ZAM'S or to take actions on ZAM'S behalf, such as providing IT support, marketing services, data analytics, legal and compliance support, or operational management. Where Zambrero group team members access your personal information in this capacity, they do so as service providers or agents of ZAM'S and are subject to confidentiality obligations and required to protect your information in accordance with this Privacy Policy and applicable law. ZAM'S remains responsible for the handling of your personal information.
Data Retention
We retain your personal information for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to provide our Services, maintain our ZAM'S Loyalty Program, meet our legal and accounting obligations, resolve disputes, and enforce our agreements. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.
When we no longer require your personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate it from further processing until deletion is possible. Where we anonymize your personal information, it may be retained and used indefinitely as de-identified data. If you have opted out of marketing communications, we will retain your contact details on our suppression list for the period necessary to honour your opt-out preference.
Direct Marketing and your privacy
a) ZAM'S also collects your personal information for marketing purposes, including e-newsletters, promotions and special offers. Our communications may be sent to you in various forms, including mail, SMS, in-app notifications, and email, in accordance with applicable laws (including the CAN-SPAM Act and the TCPA). If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so.
b) If you have received marketing information from ZAM'S and you wish to stop receiving it, you can contact us (either using the contact details below or the opt-out mechanism detailed in our marketing material). ZAM'S will not charge you, or in any way disadvantage you, if you choose to opt out. For email marketing, each marketing email will include a clear and conspicuous unsubscribe link in compliance with the CAN-SPAM Act. For SMS marketing, you may reply STOP to any promotional text message to opt out in compliance with TCPA requirements.
c) ZAM'S may occasionally provide its marketing material to third parties to distribute material on ZAM'S' behalf.
d) Notice to California Residents: Under the CCPA and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information, including the right to opt out of the sale or sharing of their personal information. Please see State Privacy Rights below for further details.
Children's Online Privacy Protection Act
The Website is not directed at, nor should it be used by children under the age of 13. ZAM'S supports and complies with the COPPA. ZAM'S does not knowingly solicit or collect personal information from children under the age of 13. If we receive notice that a child under the age of 13 has submitted personal information to us, we will immediately delete that information from our records. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate it from further processing until deletion is possible. If you believe we have inadvertently collected information from a child under 13, please contact us immediately using the contact details below.
Cookies and Tracking Technologies
a) Like many companies, ZAM'S uses cookies and other tracking technologies on the Website. A cookie is a small summary file containing a unique ID number which is stored on your computer by your browser. ZAM'S uses cookies to help identify the features in which you have the greatest interest so that it may better personalise your access to the Website.
b) In addition to cookies, we and our third-party service providers may use other tracking technologies including web beacons (also known as tracking pixels or clear GIFs), embedded scripts, software development kits (SDKs), session-replay tools, and similar technologies (collectively, Tracking Technologies). These Tracking Technologies allow us to: (i) remember your preferences so you do not have to re-enter information; (ii) understand how you navigate and interact with the Website; (iii) provide personalised content and advertising; (iv) measure the effectiveness of our marketing campaigns; (v) detect and prevent fraud; and (vi) analyse usage patterns to improve our Services. We may use session-replay technologies that record how users interact with the Website (such as mouse movements, clicks, and scrolling). Information collected through Tracking Technologies may be combined with other personal information we hold about you.
c) We may use third-party analytics services (such as Google Analytics) and advertising technology partners that collect information about your use of our Services through Tracking Technologies. These partners may use the information to provide us with analytics about how our Services are used, and to deliver targeted advertisements to you on our Services and on third-party websites and applications. The use of Tracking Technologies by these third parties is governed by their own privacy policies. You can opt out of Google Analytics by visiting tools.google.com/dlpage/gaoptout.
d) If you do not wish to receive cookies, you can set your browser so that your computer does not accept them. Please note that disabling cookies may affect your ability to use certain features of the Website.
e) We may work with third-party advertising networks and platforms to serve you advertisements that are relevant to your interests, both on the Website and third-party websites and mobile applications. These advertising partners may collect information about your online activities over time and across different websites using Tracking Technologies. You may opt out of interest-based advertising from participating companies through the Digital Advertising Alliance at optout.aboutads.info and the Network Advertising Initiative at optout.networkadvertising.org. You may also adjust your ad preferences through platforms such as Google Ads Settings (adssettings.google.com) and Meta Ad Preferences. Please note that opting out of interest-based advertising does not mean you will stop seeing advertisements; you may continue to see general, non-targeted ads.
f) ZAM'S recognises and responds to the Global Privacy Control (GPC) browser signal as a request to opt out of the sale or sharing of your personal information for purposes of targeted advertising, where required by applicable law. With regard to Do Not Track (DNT) signals, as a uniform technological standard has not yet been established, we do not currently respond to DNT signals from web browsers separately from the GPC. For other opt-out options, please see the State Privacy Rights section below.
g) Where required by applicable law, we will seek your consent before placing non-essential cookies or Tracking Technologies on your device. You may manage your cookie preferences through our cookie consent tool available on the Website, or by adjusting your browser settings. You may withdraw your consent at any time, although this will not affect the lawfulness of processing based on consent before its withdrawal.
Links to other websites
The Website may contain links to other sites. ZAM'S makes no representations or warranties as to the privacy practices of any site operated by a third party and is not responsible for the privacy policies of such other sites. We encourage you to read the privacy policy of any third-party website before providing your personal information.
Notification
As part of installation of the ZAM'S mobile application (App) on your mobile device, you may receive Push Notifications, which may include alerts, badges, banners and sounds, on your mobile device. You may choose to stop receiving Push Notifications at any time by selecting the option within the App's settings menu, by adjusting your device's notification settings, or by deleting the App from your mobile device.
Security and Data Quality
a) We will take all reasonable steps to secure your personal information. Electronic information is protected by various security measures and access to information and databases is restricted to our staff and contractors that need access to the information in order to perform their duties.
b) Where you have registered an account with ZAM'S and entered a password which allows you to access certain parts of the Website, you are responsible for keeping this password confidential. You must not share your password with anyone and we recommend that you use a password that is unique to your ZAM’S account.
c) All user details captured by ZAM'S are stored securely. All data is protected using SSL (Secure Socket Layer) encryption. Credit card details are handled by a PCI-DSS Level 1 Service Provider. ZAM'S does not store your credit card details.
d) However, the transmission of information via the internet is not completely secure. Although we will take reasonable steps to protect your information, we cannot guarantee the security of your data transmitted to the Website; any transmission is at your own risk.
How you can access and correct your personal information held by ZAM'S
a) You are entitled at any time to request details and a copy of your personal information held by us by contacting us in writing at the address detailed below. To protect your privacy, ZAM'S may require proof of your identity before acting upon your request. Access will be provided unless there is a legal or administrative reason for denying or limiting access. We will advise you of the grounds of any refusal.
b) Where we hold information that you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by mailing or emailing it to you). ZAM'S reserves the right to charge you a reasonable administrative fee for access to the personal information, subject to law. We will not charge for simply making the request and will not charge for making any corrections to your personal information.
c) If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request us to amend it. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment, then we will add a note to the personal information stating that you disagree with it.
State Privacy Rights
Depending on where you reside, you may have additional rights under applicable state privacy laws. This section currently applies to residents of the following states that have enacted comprehensive consumer privacy laws: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (collectively, Covered States). ZAM'S will update this list as additional state privacy laws come into effect.
Residents of Covered States may have some or all of the following rights, subject to applicable exceptions and our identity verification requirements:
Right to Know / Access: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom we share it. You may also request a portable copy of your personal information in a readily usable format.
Right to Correct: You may request that we correct inaccurate personal information we hold about you.
Right to Delete: You may request that we delete personal information we have collected about you, subject to certain legal exceptions.
Right to Opt Out of Sharing / Targeted Advertising: You have the right to opt out of the sharing of your personal information for cross-context behavioral advertising, and the use of your personal information for targeted advertising. To exercise this right, please contact us using the details below. ZAM'S also recognises the Global Privacy Control (GPC) signal as an opt-out request where required by applicable law.
Right Not to Be Discriminated Against: You have the right not to be retaliated against or discriminated against for exercising your privacy rights.
California Residents - Additional Rights:
CCPA/CPRA: In addition to the rights above, California residents have the right to: (i) limit the use and disclosure of sensitive personal information; (ii) opt out of profiling decisions that produce significant legal effects; and (iii) receive notice of financial incentives (see Notice of Financial Incentive below). ZAM'S does not sell personal information as defined by the CCPA/CPRA.
California Shine the Light Law: California residents may request, once per calendar year, information about the categories of personal information (as defined by the Shine the Light law) we have disclosed to third parties for their own direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. To make a Shine the Light request, please contact us at the address below with the subject line Shine the Light Request, including your full name, mailing address, and confirmation of California residency. Generally, ZAM'S does not disclose personal information to third parties for their own direct marketing purposes without your consent.
Oregon and Minnesota Residents: In addition to the rights above, residents of Oregon and Minnesota may request a list of the specific third parties (other than natural persons) to whom we have disclosed personal information.
Exercising Your Rights:
To submit a privacy rights request, please contact us using the details in the “How to contact us section” below. We will respond to verifiable consumer requests within 45 days of receipt. Where reasonably necessary, we may extend this period by a further 45 days and will notify you of any such extension. We will not charge a fee for your request unless it is excessive or manifestly unfounded, in which case we will notify you of the proposed fee before processing.
Identity Verification: To protect your privacy and the security of your information, we are required to verify your identity before processing certain requests. We may ask you to provide information such as your name, email address, and other verification details. We will not use information submitted for any purpose other than verification.
Authorised Agents: Residents of Covered States may designate an authorised agent to submit privacy rights requests on their behalf. To use an authorised agent, you must provide the agent with signed, written permission to act on your behalf, or a valid power of attorney under applicable law. We may require you to confirm the agent's authority directly with us and to verify your own identity before processing the request.
Appeal Rights: If we deny your privacy rights request, in whole or in part, you may appeal our decision by contacting us at the email address set out below with the subject line Privacy Request Appeal, including your full name, a description of your original request, and the reason you are appealing. We will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, residents of applicable states may submit a complaint to the relevant state attorney general or consumer protection authority.
Notice of Financial Incentive
ZAM'S offers the ZAM'S Loyalty Program (the Program), through which members may earn rewards, receive discounts, and access exclusive offers in exchange for providing certain personal information and participating in the Program. Under the CCPA/CPRA and similar state laws, the collection and use of personal information in connection with the Program may be considered a financial incentive.
Categories of personal information collected in connection with the Program: identifiers (such as name and email address), contact information (such as mobile phone number), date of birth, and commercial information (such as purchase history and reward redemptions).
Nature of the incentive: Members of the ZAM'S Loyalty Program may receive rewards credits based on their spend, birthday rewards, exclusive promotional offers, and early access to new products. Details of Program benefits are set out in the ZAM'S Loyalty Program terms and conditions available on the Website.
Value of personal information: The financial incentive is reasonably related to the value of the personal information provided, as determined in good faith based on our estimation of the revenue generated through the Program, the costs of operating the Program, and the value of enhanced customer engagement and repeat purchasing. ZAM'S does not make the receipt of any goods or services contingent on your participation in the Program.
Participation is entirely voluntary. You may enrol in the ZAM'S Loyalty Program by entering your details via the ZAM'S website at www.zamsusa.com or via the App. You may withdraw from the Program at any time by contacting us at the details below, by emailing privacy@zamsusa.com, or through your account settings on the Website. Withdrawal from the Program will result in the forfeiture of any accrued but unredeemed rewards. We cannot provide you with your Loyalty Program rewards, discounts, or benefits if you delete your personal information from our systems, as we use that information to administer the Program and verify your identity.
Data Breach Notification
In the event of a data breach that is reasonably likely to cause significant harm to affected individuals, ZAM'S will notify affected individuals and relevant regulatory authorities in accordance with applicable United States federal and state data breach notification laws. Notification will be provided without unreasonable delay and within the timeframes required by applicable law.
Changes to this Privacy Policy
From time to time, it may be necessary for us to make updates or change this privacy policy. ZAM'S values your privacy and we will ensure that any changes will not alter how we handle previously collected information. Where we make a material change to this Privacy Policy, we will notify you by updating the Last Updated date at the top of this Policy and, where appropriate, by other means such as email notification.
ZAM'S reserves the right to amend this Privacy Policy from time to time. The most current version of this policy will be located on the website www.zamsusa.com, or a copy can be obtained by contacting the ZAM'S Privacy Officer at privacy@zamsusa.com.
How to contact us
a) If you would like to contact us or require more information concerning our approach to privacy or how ZAM'S handles your personal information, you can write to us as set out below:
b) Attention: ZAM'S Privacy Officer, Suite 1, Level 11, Gateway Tower, 1 Macquarie Place, Sydney NSW 2000, Australia.
c) Alternatively, you can email your privacy query directly to privacy@zamsusa.com.
How do you make a complaint?
a) If you wish to make a complaint to ZAM'S about a possible breach of privacy, please provide full details of your complaint in writing, and send it to the ZAM'S Privacy Officer (see contact details above in “How to contact us” section). Please allow up to 30 days for your request or complaint to be processed.
b) If you are not satisfied with the manner in which we deal with your complaint, you may file a complaint with the United States Federal Trade Commission (FTC) at www.ftc.gov/complaint, or with the Florida Attorney General's office or the consumer protection authority in your state of residence. California residents may also contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov. Please see the “State Privacy Rights - Appeal Rights” section above for information on appealing a denied privacy request.
c) Where your complaint does not relate to these matters, you must first lodge a complaint with us in writing and provide us with details of the incident so that we can investigate. We will treat your complaint confidentially and aim to resolve it within a reasonable time.
d) Individuals enquiring about their rights and remedies for breaches of privacy may access information at the Federal Trade Commission (www.ftc.gov) or the consumer protection authority in their state of residence.
Waiver
If ZAM'S delays or does not exercise any of its rights and remedies available to it under this Privacy Policy, that will not be a waiver of that right or remedy.
Severability
If any provision of this Privacy Policy is held to be invalid, void, unenforceable or illegal for any reason, such provision shall be deemed to be severed from this Privacy Policy and the remaining provisions shall continue in full force and effect.
This Privacy Policy was last updated in June 2026.