Privacy Policy

---

**Privacy Policy**

**Effective Date:** 13/03/2022

**1. Introduction**

Welcome to Tea Apothecary ("we," "our," "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.tea-apothecary.co.uk (the "Site") or use our services. It also outlines your rights under the General Data Protection Regulation (GDPR).

**2. Data Controller**

Tea Apothecary is the data controller responsible for your personal data. If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact

**3. Information We Collect**

We collect the following types of information:

- **Personal Data:** This includes any information that relates to an identified or identifiable individual, such as your name, email address, phone number, IP address, and payment information.

- **Special Categories of Personal Data:** We do not intentionally collect any special categories of personal data (such as data concerning health, religion, or race) unless explicitly provided by you with your consent.

- **Usage Data:** We collect information about how you use our Site, such as your IP address, browser type, pages viewed, and the time and date of your visit.

- **Cookies and Similar Technologies:** We use cookies and similar tracking technologies to collect and use personal information about you. Please see our [Cookie Policy] for more details.

**4. How We Use Your Data**

We process your personal data for the following purposes:

- **To Provide and Manage Services:** To perform our contractual obligations and provide you with the services you have requested.

- **To Improve Our Services:** To understand how our Site is used, improve user experience, and develop new products and services.

- **To Communicate with You:** To send you updates, marketing communications, and information about our services. We will obtain your consent where required by law.

- **Legal Compliance:** To comply with applicable laws, regulations, and legal processes, and to protect our legal rights.

**5. Legal Basis for Processing**

We process your personal data based on the following legal grounds:

- **Consent:** Where you have provided your explicit consent for the processing of your personal data.

- **Contractual Necessity:** Where processing is necessary for the performance of a contract to which you are a party.

- **Legal Obligation:** Where we are required to process your data to comply with a legal obligation.

- **Legitimate Interests:** Where the processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests.

**6. Data Sharing and Disclosure**

We may share your personal data with:

- **Service Providers:** Third-party vendors who provide services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

- **Affiliates:** We may share information with our affiliates for business purposes.

- **Legal Authorities:** If required by law, we may disclose your data to public authorities or other third parties.

**7. International Data Transfers**

Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. However, we will take all necessary measures to ensure that your data is transferred securely and in accordance with this Privacy Policy and applicable data protection laws.

**8. Data Retention**

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

**9. Your Data Protection Rights**

Under the GDPR, you have the following rights:

- **Right to Access:** You can request access to the personal data we hold about you.

- **Right to Rectification:** You have the right to request that we correct any inaccuracies in your personal data.

- **Right to Erasure:** You can request that we delete your personal data under certain conditions.

- **Right to Restrict Processing:** You can request that we restrict the processing of your personal data under certain conditions.

- **Right to Data Portability:** You have the right to request that we transfer your personal data to another organization, or directly to you, in a structured, commonly used, and machine-readable format.

- **Right to Object:** You can object to the processing of your personal data under certain conditions.

- **Right to Withdraw Consent:** If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us at [Your Contact Information].

**10. Security of Your Data**

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, so we cannot guarantee absolute security.

**11. Children's Privacy**

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such data.

**12. Changes to This Privacy Policy**

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the "Effective Date" at the top of this policy and, in some cases, we may provide additional notice (such as adding a statement to our homepage or sending you a notification).

**13. Contact Us**

If you have any questions about this Privacy Policy or our data practices, please contact us at 

Tea Apothecary, 22a Magdalene Street, Cambridge CB3 0AF. Email Hello@tea-apothecary.co.uk. Phone 01223 944812.

---