Privacy Policy

We use your personal information for the following purposes:

• Order Processing: To process and fulfill your orders, arrange delivery, and provide customer support
• Communication: To respond to your inquiries, send order confirmations, and provide updates about your purchases
• Marketing: To send you newsletters, promotional offers, and information about our products (with your consent)
• Website Improvement: To analyze how our website is used and improve user experience
• Legal Compliance: To comply with legal obligations and protect our rights and interests
• Fraud Prevention: To detect and prevent fraudulent transactions and protect our business

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you when you place an order
• Consent: Where you have given us explicit consent, such as for marketing communications
• Legitimate Interests: For improving our services, fraud prevention, and business operations
• Legal Obligation: Where we need to comply with legal or regulatory requirements

Our website uses cookies and similar technologies to enhance your browsing experience. We use strictly necessary cookies by default, and optional analytics/marketing cookies only when you opt in through our cookie settings.

Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you use our website
• Improve website functionality and performance
• Measure campaign effectiveness and deliver relevant advertisements

If you consent to marketing cookies, we may use Meta Pixel (Meta Platforms) to measure events such as page views, product views, add-to-cart actions, checkout starts, and purchases. This helps us understand ad performance and improve marketing relevance.

You can change or withdraw your cookie consent at any time from the Cookie Settings link in the website footer.

You can also control cookie settings through your browser preferences. However, disabling some cookies may affect site functionality.

We do not sell or rent your personal information to third parties. We may share your information only with:

• Service Providers: Trusted partners who help us operate our business, such as payment processors, delivery services, and email marketing platforms
• Analytics & Advertising Partners (with consent): Platforms such as Meta Platforms that help us measure campaign performance and improve ad relevance
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of our business assets

All third-party service providers are contractually obligated to keep your information secure and use it only for the purposes we specify.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure SSL/TLS encryption for data transmission
• Secure storage systems with access controls
• Regular security assessments and updates
• Employee training on data protection practices

While we strive to protect your personal information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Order Information: Retained for up to 7 years for accounting and tax purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Analytics: Typically retained for 26 months

Under UK data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request that we limit how we use your personal data
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data

To exercise any of these rights, please contact us at cliffnaturaltea@gmail.com. We will respond to your request within one month.

With your consent, we may send you marketing communications about our products, special offers, and promotions via email.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Contacting us directly at cliffnaturaltea@gmail.com
• Updating your preferences in your account settings (if applicable)

Please note that opting out of marketing communications will not affect transactional emails related to your orders.

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

Your personal information is primarily stored and processed within the United Kingdom. If we transfer your data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.

For significant changes, we may notify you via email or through a prominent notice on our website.

If you have concerns about how we handle your personal data, please contact us first, and we will do our best to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us: