Privacy policy

Effective 14 July 2026

In short: We collect only what we need to run the store and fulfill your order, we don't sell your data for money, and you can access or delete it anytime by emailing us.

Who we are

This Privacy Policy explains how Cuttea™ collects, uses, and protects your personal information when you visit drinkcuttea.com (the "Site" - "Online Store") or buy from us. We are the data controller. Contact: support@drinkcuttea.com.

A note on scope

We sell to customers worldwide, with most orders shipping to the United States. We aim to meet the EU General Data Protection Regulation (GDPR) and, for US shoppers, applicable state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

1. Information we collect

  • You give us: name, email, phone (optional), shipping/billing address, order details, and any messages you send us.
  • Payment: card payments are handled by our payment providers (e.g. Shopify Payments / third-party processors). We do not store full card numbers.

2. How and why we use it — and our legal bases

  • To fulfill your order — process payment, ship, and provide support.
  • To run and secure the store — prevent fraud, debug, analyze, and improve.
  • Marketing — emails, SMS (if you opt in)
  • Legal & tax obligations — invoicing, accounting, and responding to lawful requests

3. Cookies & tracking

We use strictly necessary cookies to run the store, plus — with your consent where required — analytics and advertising cookies and pixels, including the Meta Pixel, TikTok Pixel, and Google Analytics, to measure performance. You can control cookies through our consent banner (where shown) and your browser settings. Blocking some cookies may affect how the Site works.

4. When we share information

We share personal data with service providers who help us operate: Shopify (store platform), payment processors, shipping carriers and fulfillment partners, email/SMS tools, and advertising/analytics providers. We may also disclose data to comply with the law, enforce our terms, or as part of a business transfer. We do not sell your personal information for money. Some ad-related data sharing may count as a "sale" or "sharing" under certain US state laws — see Your rights. See more at Your Privacy Choices

5. International transfers

Because our providers (including Shopify and the ad platforms) operate in the United States and elsewhere, your data may be transferred outside the EEA. Where it is, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

We keep order and transaction records for as long as needed to provide our service and to meet legal, tax, and accounting obligations, then delete or anonymize them. Marketing data is kept until you unsubscribe or object.

7. Your rights

If you're in the EU/EEA or UK (GDPR): you may access, correct, delete, restrict, or object to processing of your data, request portability, and withdraw consent at any time.

If you're in California or another US state: you may request to know, access, correct, or delete your personal information, and opt out of its "sale"/"sharing" or of targeted advertising. We won't discriminate against you for exercising these rights.

To exercise any right, email support@drinkcuttea.com. We may need to verify your identity first.

8. Marketing choices

Unsubscribe from emails via the link in any message, reply STOP to SMS, or email us. You can opt out of personalized ads in your Meta, TikTok, and Google account settings.

9. Children

The Site and our products aren't directed to children. We don't knowingly collect data from anyone under 16, and Cuttea is intended for adults 18+.

10. Security

We use reasonable technical and organizational measures to protect your data.

11. Changes

We may update this policy; the "Effective" date shows the current version, and we'll post material changes here.