The small print, made readable

Privacy Policy

Last updated: 3 July 2026

⚠️ Before launch: replace every [bracketed placeholder] below with your real business details, and update the "Who we share data with" section once you've chosen your payment and email providers. Consider a legal review for your jurisdiction.

1. Who we are

[YOUR LEGAL BUSINESS NAME] (trading as "Aunt-Tea Matcha", "we", "us") operates aunt-tea.xyz. Our registered address is [REGISTERED BUSINESS ADDRESS]. For anything privacy-related, email hello@aunt-tea.xyz.

2. What we collect

We keep it minimal — only what we need to get matcha to your door and answer your messages:

When you…	We collect
Place an order	Name, email, shipping address, phone (for the courier), and what you bought. Payment details go directly to our payment provider — we never see your card number.
Send the contact form	Your name, email, topic and message.
Join the newsletter	Your email address.
Browse the site	Your basket and preferences, stored locally on your own device (see section 5). We don't currently run analytics or ad trackers.

3. How we use it

To fulfil orders — processing payment, shipping your tins, and sending order updates.
To reply to you — answering questions sent through the contact form or by email.
To send the newsletter — brewing tips and offers, only if you signed up. Every email includes an unsubscribe link.
To run subscriptions — scheduling your deliveries and billing on your chosen cycle.

We do not sell your personal information, full stop.

4. Who we share data with

Only the services that make the shop work:

Hosting & forms: our site and contact-form submissions are handled by our hosting provider [Netlify / YOUR HOST].
Payments: [PAYMENT PROVIDER — e.g. Stripe or Shopify] processes payments; they receive what's needed to charge your card securely.
Email: MailerLite stores newsletter addresses and sends our emails; our mailboxes run on Zoho Mail.
Delivery: couriers receive your name, address and phone number to deliver your order.

Each provider processes your data under their own privacy terms and, where required, a data-processing agreement with us.

5. Cookies & local storage

We keep your basket, newsletter status and welcome-voucher state in your browser's local storage — it stays on your device, isn't sent to us, and you can clear it any time in your browser settings. We don't set advertising cookies. If we add analytics later, we'll update this policy and ask for consent where the law requires it.

6. How long we keep it

Order records: [e.g. 6 years], as required for tax and accounting.
Contact messages: up to [e.g. 12 months] after we resolve your query.
Newsletter emails: until you unsubscribe.

7. Your rights

Depending on where you live (including under the GDPR, UK GDPR or Thailand's PDPA), you can ask us to access, correct, delete or export your personal data, and to stop sending you marketing at any time. Email hello@aunt-tea.xyz and we'll respond within one month. You can also complain to your local data-protection authority.

8. Children

Our site sells tea, not toys — it isn't directed at children under 16, and we don't knowingly collect their data. If you believe a child has given us personal information, contact us and we'll delete it.

9. Changes to this policy

If we change how we handle your data, we'll update this page and the "last updated" date above. Significant changes will be flagged on the site or by email.

10. Contact

Questions, requests or concerns: hello@aunt-tea.xyz, or write to [REGISTERED BUSINESS ADDRESS].