Privacy Policy.
What teas.co.uk collects, why it is needed, how long it is kept, and the choices available to you.
Privacy
We process personal data under the UK GDPR and the Data Protection Act 2018. We collect only what we need to run the shop, ship orders, take payment and answer questions.
What we collect
- Order data: name, delivery address, billing address, email, phone (optional), basket contents and payment confirmation. Payment card numbers never touch our server: Stripe and PayPal handle that side directly.
- Account data: if you create an account, your password is salted and hashed by WordPress core. We see only the hash.
- Communications: email replies, contact form submissions and returns correspondence.
- Analytics: aggregated traffic data through Microsoft Clarity and Google Search Console. We do not sell or share individual-level data.
How long we keep it
Order records are kept for 7 years to satisfy HMRC bookkeeping rules. Account profiles persist until you ask us to delete them. Email correspondence is kept for 24 months and then purged. Analytics aggregates are anonymised at source.
Your rights
You can request a copy of your data, ask us to correct it, ask us to delete it, or withdraw any optional consent. Email hello@teas.co.uk with the subject line “Data request” and we will respond within 30 days. You can also complain to the Information Commissioner’s Office if you are not satisfied.
Who we share with
Royal Mail and our pallet couriers receive your delivery name and address. Stripe and PayPal receive the payment amount and your billing details. We never sell email lists.
