EN
This site is made for portrait — please turn your phone back (◐‿◑)

Privacy & Cookies

This Privacy & Cookies Policy explains how personal data is collected and used when you visit www.oootea.co, place an order, subscribe to our newsletter, contact us or otherwise interact with ooo.tea.

1. Who is responsible for your data

The data controller is the operator of www.oootea.co, identified in our Legal Notice.

For questions about this Policy or requests concerning your personal data, please contact:

hello@oootea.co

2. Information we collect

Depending on how you use the website, we may collect:

  • your name and contact details, including your email address and telephone number;

  • billing and delivery information;

  • order, payment and transaction information;

  • information you provide when contacting us;

  • newsletter subscription preferences;

  • information relating to wholesale, event or collaboration enquiries;

  • information about interactions with our emails, where the relevant functions are enabled;

  • technical information such as IP address, browser, device, website activity and Cookie preferences.

If you provide personal data relating to another person—for example, when sending an order to someone else—you should make sure that you are authorised to provide that information.

We do not receive or store complete payment-card details. Payments are processed by the payment services available through our checkout.

3. How and why we use personal data

Orders and customer service

We use the information provided during checkout to:

  • process and confirm orders;

  • collect payment;

  • arrange delivery;

  • communicate about an order;

  • manage returns, refunds and customer-service requests;

  • prevent or investigate fraudulent or unauthorised transactions.

This processing is generally necessary to perform the purchase contract, take requested steps before entering into a contract, comply with legal obligations and protect our legitimate interest in operating a secure online shop.

Contact and correspondence

When you contact us by email, through a website form or through another available contact channel, we use the information you provide to respond to your enquiry and manage the relevant communication.

Depending on the nature of the enquiry, this processing is based on taking steps at your request before entering into a contract or on our legitimate interest in responding to customers, maintaining business relationships and administering ooo.tea.

We use Zoho Mail as our business email service. Information contained in emails sent to or received from us may therefore be processed and stored through Zoho’s email infrastructure.

Wholesale, events and collaborations

If you contact us about wholesale orders, events, workshops, press, partnerships or other collaborations, we use the information provided to consider and respond to the enquiry, prepare proposals and manage any resulting relationship.

This processing is based on taking steps at your request before entering into an agreement or on our legitimate interest in developing and managing our business relationships.

Newsletter and marketing communications

If you subscribe to our newsletter, we use the information you provide to manage your subscription and send news, product information, editorial content, event announcements and other communications from ooo.tea.

Our newsletter service is provided by Klaviyo, which processes subscriber information on our behalf. Depending on the functions enabled, this may include:

  • email address and contact information;

  • language and subscription preferences;

  • subscription and consent records;

  • delivery, opening and link-click information;

  • purchase or website activity connected with the subscriber profile.

Where the Shopify integration or automated email functions are enabled, relevant customer or order information may be transferred to Klaviyo to manage mailing lists and send communications connected with a customer’s activity or orders.

Newsletter and promotional communications are sent on the basis of consent, where consent is required. You can withdraw your consent at any time by using the unsubscribe link in any marketing email or by contacting us.

Withdrawing consent does not affect processing that took place before consent was withdrawn. We may retain a limited suppression or consent record where necessary to respect an unsubscribe request and demonstrate compliance.

Legal and administrative obligations

We may process and retain order, invoice, transaction and communication records where necessary to comply with tax, accounting, consumer-protection and other legal obligations, or to establish, exercise or defend legal claims.

Website security

We may process limited technical and activity information to maintain the security and proper operation of the website, identify errors and protect against fraud, misuse or unauthorised access.

This processing is based on our legitimate interest in keeping the website and our services secure.

Cookies and similar technologies

Strictly necessary technologies are used where required for the website, checkout, security and requested services to function.

Optional technologies used for preferences, analytics or marketing are activated only where the required consent has been obtained. More information is provided in the Cookie section below.

4. Service providers and other recipients

We disclose personal data only where reasonably necessary to operate the website, fulfil orders, provide requested services, comply with legal obligations or protect our rights and legitimate interests.

Depending on the services used, recipients may include:

  • Shopify, which provides ecommerce, checkout and related store services;

  • payment providers made available during checkout;

  • delivery, postal and logistics providers;

  • Klaviyo, for newsletter and marketing communications;

  • Zoho Mail, for business email and correspondence;

  • website hosting, maintenance, security and technical-support providers;

  • accounting, tax, legal and other professional advisers;

  • public authorities or other parties where disclosure is required by law or reasonably necessary to protect legal rights.

These providers receive only the information reasonably necessary to perform the relevant service and process it under their own legal obligations or under appropriate contractual arrangements.

Third-party services may also process data in accordance with their own privacy notices where they act as independent data controllers.

5. International data transfers

Some service providers or their subprocessors may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we rely on the safeguards required by applicable data-protection law. Depending on the destination and provider, these may include an adequacy decision adopted by the European Commission, approved Standard Contractual Clauses or other legally recognised safeguards.

Further information about the safeguards applicable to a particular transfer may be requested by contacting hello@oootea.co.

6. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting or reporting requirements.

In general:

  • order, payment, invoice and accounting information is retained for the periods required by applicable tax, accounting and consumer law;

  • customer-service and enquiry records are retained for as long as reasonably necessary to respond, manage the relevant relationship and address possible legal claims;

  • wholesale and collaboration information is retained while the relevant business relationship or proposal remains active and for a reasonable period afterwards;

  • newsletter information is retained until consent is withdrawn or the subscription is otherwise terminated, subject to limited records needed to respect the request and demonstrate compliance;

  • Cookie preferences are retained for the period stated in the relevant Cookie information.

Retention periods may vary depending on the nature of the information, the relationship and any applicable legal requirement.

7. Your data-protection rights

Depending on the circumstances and applicable law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive certain data in a portable format;

  • withdraw consent at any time where processing is based on consent;

  • object to direct-marketing communications.

These rights are not absolute and may be limited where continued processing or retention is required by law or justified on another lawful basis.

To exercise a right, contact hello@oootea.co and indicate the nature of your request. We may ask for information reasonably necessary to verify your identity and protect your data.

You also have the right to submit a complaint to the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) or, where applicable, another competent supervisory authority.

8. Security

We use reasonable technical and organisational measures intended to protect personal data against accidental loss, unauthorised access, alteration, disclosure or misuse.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure. Nothing in this section limits our obligations under applicable data-protection law.

9. Third-party websites

The website may contain links to third-party websites or services, including event, editorial, social-media or payment platforms.

Websites and services that we do not operate are governed by their own privacy and Cookie policies. We are not responsible for their independent privacy practices.

Cookies

10. What Cookies are

Cookies are small files or similar technologies stored on or accessed through a device when a website is visited.

They can be used to remember selections, maintain a shopping session, support checkout and security, understand how a website is used or provide marketing and personalisation functions.

Cookies may be placed directly by ooo.tea or by third-party services used on the website.

11. Types of Cookies we may use

Strictly necessary Cookies

These Cookies are required for functions such as:

  • navigation and website operation;

  • shopping-cart and checkout functions;

  • payment and transaction security;

  • fraud prevention;

  • remembering privacy choices;

  • maintaining a secure user session.

Strictly necessary Cookies do not require consent where they are used solely to provide a service requested by the user or to ensure the website’s technical operation and security.

Disabling them through browser settings may prevent parts of the website or checkout from functioning correctly.

Preference Cookies

Preference Cookies remember selections such as language, region or display settings.

Where these Cookies are not strictly necessary to provide a function expressly requested by the user, they are used only with consent.

Analytics Cookies

Analytics Cookies help us understand, in aggregated or statistical form, how visitors use the website and where technical or navigation improvements may be needed.

Analytics Cookies will only be used where the relevant service has been enabled and the required consent has been obtained.

Marketing Cookies and similar technologies

Marketing technologies may be used to measure interactions with communications, connect website activity with a subscriber profile or provide more relevant communications.

They will only be used where the relevant functions have been enabled and the required consent has been obtained.

If Klaviyo website tracking, onsite forms or similar functions are enabled, the relevant Klaviyo technologies and their purposes will be identified in the Cookie Settings panel.

12. Cookie providers, purposes and duration

The current list of Cookies and similar technologies used by the website—including their provider, purpose, category and duration—is available through the Cookie Settings panel.

This information reflects the technologies currently enabled on the website and may be updated when services or website functions change.

Zoho Mail is not normally included in the Cookie list because it provides our email infrastructure rather than placing Cookies through the ooo.tea website.

Klaviyo will appear in the Cookie list only where its website-based tracking, forms or related technologies are active.

13. Managing Cookie preferences

When you first visit the website, you can:

  • accept optional Cookies;

  • reject optional Cookies;

  • choose Cookies by category.

Rejecting optional Cookies will not prevent access to the main content of the website, although some optional or personalised functions may be unavailable.

You can change or withdraw your choices at any time through the Cookie Settings link available on the website.

Consent is not required for strictly necessary Cookies. Withdrawing consent does not affect the lawfulness of any processing carried out before it was withdrawn.

You can also delete or block Cookies using your browser settings. Browser controls vary, and blocking all Cookies may affect the operation of the website, shopping cart or checkout.

14. Changes to this Policy

We may update this Privacy & Cookies Policy where our website, services, providers or legal obligations change.

The current version will be published on this page with its latest revision date. Where appropriate, significant changes will be communicated through the website or another suitable channel.

15. Contact

For questions about this Policy, the use of personal data or Cookie preferences, contact:

hello@oootea.co