1.  Introduction

This privacy policy explains how Aun-Tea Ltd (“Aun-Tea”, “we”, “our” or “us”) collects, uses, and protects your personal data when you visit our website, place an order, sign up to our mailing list, or otherwise interact with us.

It also outlines your privacy rights and how the law protects you under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully to understand how and why we are using your personal data.

Children: This website is not intended for children under the age of 13, and we do not knowingly collect data relating to children.

This privacy policy was last updated on 7 June 2025.

2.  Who We Are

Aun-Tea Ltd is a company registered in the United Kingdom. Our mission is to deliver fun, flavourful, and freshly brewed bubble teas, now available in canned form.

As a data controller, we are responsible for deciding how we use personal data you provide to us.

Contact us:

Email:

Address: Aun-Tea Ltd, 27 Broadway, North Lincolnshire, DN16 2SN, United Kingdom.

3.  How We Collect Personal Data

We collect personal data in the following ways:

Direct interactions: You provide data by: - Placing an order - Creating an account - Signing up for emails or newsletters - Entering competitions, promotions, or surveys - Contacting us via email, contact forms, or social media

Automated technologies: As you interact with our website, we may collect: - IP address - Device type Browser data - Site usage and navigation

Third parties: We may receive personal data from: - Shopify (our ecommerce platform) - Payment processors (e.g. Stripe, PayPal) - Analytics providers (e.g. Google Analytics) - Social media platforms (e.g. Instagram, Facebook)

4.  What Data We Collect

We may collect the following types of personal data:

• Identity Data: Name, title, username or similar identifier

• Contact Data: Billing address, delivery address, email address, phone number

• Transaction Data: Payment and order details

• Technical Data: IP address, browser type, operating system, referring URLs

• Usage Data: How you use our website and services

• Marketing Data: Your communication and marketing preferences

We also collect aggregated, anonymous data for analytical purposes. This cannot identify you and is not considered personal data by law.

We do not collect or process sensitive personal data unless you voluntarily provide it and give explicit consent.

5.  How We Use Your Data

We use your personal data to:

        Purpose                                                                                                 Legal Basis

Process and deliver your order	Contractual necessity
Manage your account	Contractual necessity
Communicate with you	Legitimate interests
Send promotional emails (if opted-in)	Consent
Handle refunds and complaints	Legal obligation / Legitimate interests
Improve our website and services	Legitimate interests
Comply with legal obligations (e.g. tax compliance)	Legal obligation

You can opt out of marketing communications at any time by clicking "unsubscribe" or emailing us.

6.  Sharing Your Data

We only share your personal data with trusted third parties when necessary:

• Shopify (for order management)

• Payment processors (e.g. Stripe, PayPal)

• Delivery partners (e.g. Royal Mail, couriers)

• Analytics and marketing tools (Google, Meta)

• Legal or regulatory bodies (when required by law)

All our partners are contractually bound to protect your data and use it only for the agreed purpose.

7.  Cookies and Tracking

We use cookies to improve your experience on our website, including:

• Remembering your basket

• Understanding visitor behaviour

• Personalising content or promotions

You can manage your cookie preferences in your browser settings. For more detail, see our Cookie Policy.

8.  Data Retention

We only keep your personal data for as long as necessary to fulfil the purpose we collected it for, including legal, tax, and accounting requirements.

• Customer order data is typically retained for 6 years

• Marketing data is retained until you withdraw consent or unsubscribe

9.  Data Security

We take appropriate technical and organisational security measures to protect your personal data. These include:

• Secure servers

• Encrypted transactions

• Access restrictions

In the unlikely event of a data breach, we will notify you and any applicable regulator where legally required.

10.  Your Rights

Under the UK GDPR, you have the right to:

•          Request access to your personal data

•          Request correction or erasure

•          Object to processing or withdraw consent

•          Request data portability

•          Lodge a complaint with the Information Commissioner’s Office (ICO) To exercise any of these rights, please contact us at hello@aun-tea.co.uk.

11.  Third-Party Links

Our website may include links to third-party websites. Clicking these may allow third parties to collect or share your data. We are not responsible for their content or privacy practices. Always review their privacy policies before submitting data.

12.  Changes to This Policy

We may update this policy occasionally. When we do, we’ll revise the “last updated” date at the top. If the changes are significant, we will notify you on our website or via email where appropriate.