Privacy Policy
Effective Date: 07-09-2025
NaN Teas (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website [www.nanteas.com] (the “Site”), including purchases made via WooCommerce, and your rights under EU law (GDPR).
1. Data We Collect
When you use our website or make a purchase, we may collect the following:
- Account & Order Information: Name, email, billing/shipping address, phone number, and order history.
- Payment Information: Processed securely via third-party payment providers (e.g., Stripe). Full card details are not stored on our servers.
- Website & Technical Data: IP address, browser type, device, pages visited, and interactions with the site.
- Communications: Emails, messages, or contact form submissions.
- Marketing Preferences: Newsletter subscriptions or other marketing communications (with consent).
2. Data Obtained from Third Parties
We may receive personal data about you from third parties, such as:
- Social media platforms (if you log in via Facebook, Google, etc.)
- Marketing partners or campaigns
- Referral programs or gift orders
This data is used only for the purposes described in this Privacy Policy, and we ensure that third parties provide it legally and in compliance with applicable laws.
3. How We Use Your Data
We use your personal data to:
- Process and fulfill orders, including shipping and invoicing.
- Manage your account and provide customer support.
- Communicate with you regarding orders, updates, or inquiries.
- Provide personalized offers and marketing (with your consent).
- Improve our website, products, and services.
- Comply with legal and tax obligations.
4. Legal Basis for Processing
Under GDPR, we process your data based on:
- Contractual necessity: To process orders and provide services.
- Consent: When you sign up for newsletters or marketing.
- Legitimate interests: Improving our website, preventing fraud, or enhancing security.
- Legal obligations: Tax, accounting, and regulatory compliance.
5. Sharing Your Data
We do not sell or rent your personal data. We may share it with:
- Service providers: Payment gateways, shipping companies, IT/hosting providers.
- Legal authorities: When required by law or to protect our legal rights.
All third parties are required to handle your data securely and comply with GDPR.
6. Payment Information
Payments on our website are processed securely through trusted third-party providers, such as Stripe. These providers handle your payment details directly, and full payment information is never stored on our servers. All transactions are encrypted using industry-standard security protocols to ensure your data is safe.
7. Cookies & Tracking
Our website uses cookies to:
- Manage shopping carts and login sessions (essential cookies).
- Analyze site traffic and performance (analytics cookies, with consent).
- Provide marketing and personalized offers (marketing cookies, with consent).
You can manage cookies via your browser or our cookie consent banner. For details, see our Cookie Policy.
8. Data Retention
- Order & account data are retained as long as necessary to fulfill orders and comply with tax/legal obligations.
- Marketing data (email subscriptions) are retained until you withdraw consent.
- Technical & analytics data are kept in anonymized or aggregated form for site improvement.
9. Your Rights (Under GDPR)
You have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Request data portability.
- Withdraw consent for marketing communications at any time.
- Lodge a complaint with a supervisory authority (e.g., Dutch Data Protection Authority – Autoriteit Persoonsgegevens).
To exercise your rights, contact us at [email protected].
10. WooCommerce/WordPress Specifics
- WooCommerce stores personal data required for orders and account management.
- WordPress may log technical data such as IP addresses for security and site management.
11. Data Security
We implement technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
12. Minors
Our website is not intended for persons under 16. We do not knowingly collect data from minors.
13. International Users
Our website is accessible globally. If you access it from outside the EU, your data may be processed in countries with different data protection laws. We handle your data in accordance with this Privacy Policy and EU GDPR and take steps to ensure adequate protection when data is transferred internationally.
14. Changes to this Policy
We may update this Privacy Policy. The latest version will always be on our website with an updated effective date.
Contact
For questions or requests regarding your data:
NaN Teas
Posthoornstraat 17, 3011 WD, Rotterdam, The Netherlands
Email: [email protected]