Privacy Policy
Who we are
Suggested text: Our website address is: https://teaoris.com.
Privacy Policy
Website: teaoris (teaoris.com)
Last Updated: August 1, 2025
Effective Date: August 1, 2025
1. Information We Collect
1.1 Information You Provide Directly
- Personal Identifiers: Name, email address, shipping address, phone number, payment information (processed via third-party gateways; we do not store full card numbers).
- Account Data: Username, password, order history, shopping cart content.
- User-Generated Content: Product reviews, comments, customer service inquiries.
1.2 Information Collected Automatically
- Device & Log Data: IP address, browser type, device ID, operating system, access timestamps, page interactions (clicks, scrolls).
- Cookies & Tracking Technologies:
- Essential Cookies: Maintain shopping cart functionality and login sessions (e.g., session IDs).
- Analytical Cookies: Google Analytics (_ga) for traffic and user behavior analysis (requires your consent).
- Advertising Cookies: Facebook Pixel, Google Ads (_gcl_au) for personalized ads (requires explicit consent).
- Geolocation Data: Country/region estimated via IP for localized content (precise location only requested with permission).
2. How We Use Your Information
| Purpose | GDPR Legal Basis | CCPA Business Purpose |
|---|---|---|
| Order Processing & Fulfillment | Contract Performance | Complete Transactions |
| Promotional Emails | Your Consent (opt-out) | Marketing |
| Fraud Prevention & Security | Legitimate Interests | Security |
| Website Optimization (Analytics) | Your Consent | Internal R&D |
| Personalized Advertising | Your Explicit Consent | Advertising |
3. Cookies & Tracking Technologies
3.1 Cookie Categories
| Type | Function | Consent Required |
|---|---|---|
| Essential Cookies | Core functionality (checkout, login) | No |
| Preference Cookies | Remember language/currency settings | Yes |
| Analytical Cookies | Analyze traffic & engagement metrics | Yes |
| Marketing Cookies | Cross-platform ads (e.g., Facebook) | Explicit Yes |
3.2 Managing Your Cookie Preferences
- First-Visit Banner: Control cookie categories via our cookie consent banner (only essential cookies enabled by default).
- Browser Settings: Clear cookies or disable tracking anytime ([link to browser guide]).
Compliance Notes:
- Provide a “Reject All Non-Essential Cookies” button (GDPR requirement).
- Marketing cookies require active opt-in.
4. Data Sharing & Disclosure
We do not sell your personal information (as defined by CCPA), and only share data in these cases:
- Third-Party Processors:
- Payment gateways (e.g., Stripe/PayPal)
- Shipping carriers (e.g., DHL/FedEx)
- Email services (e.g., Mailchimp/Klaviyo)
- Legal Compliance: Respond to subpoenas or government requests.
- Business Transfers: Data transfer during acquisitions (30-day advance notice).
5. Your Rights
GDPR (EU Users)
- Access/Correction: Request or modify your data.
- Erasure (“Right to be Forgotten”): Demand full data deletion.
- Objection: Opt out of data processing or direct marketing.
- Withdraw Consent: Revoke cookie or email permissions anytime.
CCPA (California Residents)
- Right to Know: Disclose data collection categories and purposes.
- Deletion: Request data deletion (legal exceptions apply).
- Opt-Out of Sale: Block data sharing for ads (use “Do Not Sell My Personal Information” link in footer).
Exercise Your Rights: Email requests to info@teaoris.com. We respond within 30 days (CCPA) or 1 month (GDPR).
6. Data Retention & Security
- Retention Periods:
- Order data: 7 years (tax compliance)
- Account data: 6 months post-account deletion
- Security Measures: SSL encryption, regular audits, employee access controls.
7. Children’s Privacy
We do not knowingly collect data from children under 16 (EU) or 13 (US). Contact us for immediate deletion if detected.
8. Policy Updates
Material changes (e.g., expanded data uses) trigger website banners + email notifications (if impacting your rights).
9. Contact Us
Data Protection Officer: teaoris Privacy Team
Email: info@teaoris.com
