Last updated: January 2025
Introduction
This Privacy Policy explains how NooTea ("we", "us", "our") collects, uses, and protects your personal information when you visit our website, place an order, or contact us. It applies to users in the United Kingdom and the European Union.
Information We Collect
When you visit NooTea, place an order, or contact us, we may collect the following information:
- Contact information (such as name, email address, and phone number)
- Shipping address for order delivery
- Payment information (processed securely by Stripe; we do not store card details)
- Order history and product preferences
- Information submitted via contact forms (including message content)
- Website usage data collected through cookies and similar technologies
How We Use Your Information
We use your information to:
- Process and fulfil your orders
- Communicate with you about orders, subscriptions, or enquiries
- Provide customer support
- Improve our products, services, and website
- Send marketing communications where you have given consent
- Meet legal and regulatory obligations
Legal Basis for Processing
Under UK GDPR and EU GDPR, we process personal data on the following legal bases:
- Contract performance (to fulfil orders and subscriptions)
- Legitimate interests (to operate, secure, and improve our business)
- Consent (for marketing communications and certain cookies)
- Legal obligations (where required by law)
Information Sharing
We never sell your personal information.
We may share your data only with trusted third parties where necessary, including:
- Payment processors (such as Stripe) to handle transactions securely
- Shipping and fulfilment partners to deliver your orders
- Service providers who help operate our website and business
- Legal or regulatory authorities when required by law
All third parties are required to handle your data securely and in accordance with applicable data protection laws.
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, and reporting requirements. When data is no longer required, it is securely deleted or anonymised.
Your Rights
If you are located in the UK or EU, you have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data
- Object to or restrict certain processing
- Request data portability
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details below.
Cookies
We use cookies and similar technologies to improve your browsing experience, remember preferences, analyse site usage, and measure advertising performance. Where required, consent is obtained before non-essential cookies are used. You can control cookies through your browser settings.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at:
- Email: Click to reveal
- WhatsApp/SMS: Click to reveal