Privacy Policy.

• Order data: name, delivery address, billing address, email, phone (optional), basket contents and payment confirmation. Payment card numbers never touch our server: Stripe and PayPal handle that side directly.
• Account data: if you create an account, your password is salted and hashed by WordPress core. We see only the hash.
• Communications: email replies, contact form submissions and returns correspondence.
• Analytics: aggregated traffic data through Microsoft Clarity and Google Search Console. We do not sell or share individual-level data.

Order records are kept for 7 years to satisfy HMRC bookkeeping rules. Account profiles persist until you ask us to delete them. Email correspondence is kept for 24 months and then purged. Analytics aggregates are anonymised at source.

You can request a copy of your data, ask us to correct it, ask us to delete it, or withdraw any optional consent. Email hello@teas.co.uk with the subject line “Data request” and we will respond within 30 days. You can also complain to the Information Commissioner’s Office if you are not satisfied.

Royal Mail and our pallet couriers receive your delivery name and address. Stripe and PayPal receive the payment amount and your billing details. We never sell email lists.

You can use teas.co.uk inside AI assistants that support the Model Context Protocol (MCP), such as ChatGPT, Claude, Grok, Mistral Vibe and Cursor. This is what happens to your information when you do.

• Shopping without an account: when you ask the assistant to find or compare products, it sends us the search details you gave it, for example “decaf tea under £5”. To keep your basket between messages and to prevent misuse, we receive an anonymous identifier from the assistant, never your name, email address or chat history. We store only a scrambled form of it, for up to 35 days after your basket was last changed.
• Checking out: payment never happens inside the assistant. The checkout link opens teas.co.uk, where you sign in or create an account and pay as usual, and the rest of this policy applies.
• Linking your account (optional): you sign in on teas.co.uk and see exactly what the assistant will be able to do before you allow it. It can then, only when you ask, see your name, email address, orders, delivery tracking, repeat deliveries and reward points; pause, resume or cancel a repeat delivery; and send us a return request. It never sees your password or payment details and cannot place an order. The link stops working 30 days after it was last used, and we delete its scrambled record a week later. You can disconnect at any time in My Account under Connected apps, and changing your password or email address disconnects every app.
• What the assistant provider receives: what is shown to you in the conversation, such as product details, your basket or your order status, is sent to the assistant provider so it can show it to you, under their own privacy policy (OpenAI’s for ChatGPT, Anthropic’s for Claude, xAI’s for Grok, Mistral AI’s for Vibe and Anysphere’s for Cursor).
• Service records: for each request an assistant sends to our MCP server we record what it asked the shop to do (the tool, and the search words, filters and product ids it sent, with email addresses, phone numbers and postcodes removed, and any search mentioning health, medication or religion left out), what came back (for example which products were shown), how long it took, which assistant app sent it and the country it came from. We never record your chat, name, email address, password, payment details or delivery address. Identifiers are scrambled with a secret key, so we can see repeat visits without knowing who you are. We use these records to run and protect the service, to improve search and recommendations, and to study shopping patterns, including to train teas.co.uk’s own models. After 12 months the scrambled identifiers are removed, so what is left cannot be linked to anyone. If you linked your teas.co.uk account, you can ask us to delete the records linked to it: email hello@teas.co.uk.