Privacy Policy
Last updated: 23/02/2026
CEYARA (“Ceyara”, “we”, “our”, “us”) is committed to protecting the privacy of every visitor and customer. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit www.ceyaratea.com (the “Website”), make a purchase, sign up for marketing, or contact us.
By using our Website, you agree to the practices outlined below. If you do not agree, please discontinue use immediately.
For the purposes of UK data protection laws, Ceyara Ltd is the data controller responsible for your personal information.
1. Information We Collect
We may collect and process the following categories of information:
1.1 Information Provided by You
- Identity details: name, email address, billing and delivery address, telephone number.
- Account details: username, password, preferences.
- Order information: tea products purchased, payment confirmation, delivery requests.
- Support and communication: emails, messages, or files you send through contact forms or customer service.
- Marketing preferences: newsletter subscriptions, promotional opt-ins or opt-outs.
1.2 Information Collected Automatically
- IP address.
- Browser type, device type, operating system.
- Pages viewed, time spent, referral source.
- Cookies and tracking data (see Section 7).
1.3 Payment Information
We do not store card details. Payments are securely processed by third-party providers:
2. How We Use Your Information
We use personal information to:
- Process payments and fulfil orders.
- Deliver products and manage returns/refunds.
- Provide customer support and respond to enquiries.
- Personalise your shopping experience.
- Send order confirmations, delivery updates, and important notifications.
- Improve our Website using analytics and performance monitoring.
- Send marketing communications where consent has been provided.
- Prevent fraud, misuse, and unauthorised activity.
- Comply with legal and regulatory obligations.
You may unsubscribe from marketing communications at any time using the unsubscribe link included in our emails or by contacting us directly.
3. Third-Party Services & Data Sharing
We only share personal information where necessary to operate our business, fulfil orders, or comply with legal obligations.
3.1 E-Commerce Platform
3.2 Payment Providers
3.3 Analytics & Tracking
3.4 Email Marketing Providers
3.5 Shipping & Logistics Providers
We share delivery information (name, address, telephone number) with logistics providers such as:
3.6 Advertising Platforms
We do not sell personal information.
4. Legal Basis for Processing (UK GDPR)
We process personal data under the following lawful bases:
- Contractual necessity – to process and deliver orders.
- Legitimate interests – fraud prevention, analytics, service improvement.
- Consent – marketing communications and non-essential cookies.
- Legal obligation – accounting, tax, and regulatory compliance.
5. International Data Transfers
Some of our service providers (including Shopify, Stripe, Google, and Klaviyo) may process personal information outside the UK or European Economic Area (EEA).
Where this occurs, we rely on appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- UK GDPR-compliant transfer mechanisms
6. Security Measures
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, misuse, disclosure, alteration, or destruction.
These measures include:
- SSL encryption
- Secure payment gateways
- Restricted administrative access
- Firewall and malware protection
- Shopify-hosted infrastructure security
In the event of a data breach affecting personal information, we will comply with all applicable legal notification requirements.
7. Cookies & Tracking Technologies
We use cookies and similar technologies to improve user experience, analyse website traffic, and support marketing activities.
Cookies may include:
- Essential cookies – required for website functionality
- Analytics cookies – to understand visitor behaviour
- Marketing cookies – for advertising and remarketing
- Preference cookies – to remember settings and preferences
We use cookie consent tools allowing users to manage preferences.
Additional information:
You may also use browser signals such as Global Privacy Control (GPC), which we honour where technically supported.
8. Your Rights (UK GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO Website:
https://ico.org.uk/make-a-complaint/
To exercise your rights, contact:
info@ceyaratea.com
We aim to respond to privacy-related requests within 30 days.
9. Data Retention
We retain personal information only as long as necessary for:
- Order fulfilment
- Customer service
- Legal and accounting requirements
- Fraud prevention
- Tax compliance
Order-related records may be retained for up to 6 years in accordance with UK legal and tax obligations.
Marketing information is retained until consent is withdrawn.
After applicable retention periods, personal information is securely deleted or anonymised.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
11. Children’s Privacy
This Website is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.
If such information is identified, it will be deleted promptly.
By using this Website, you confirm that you are at least 18 years old or using the Website under the supervision of a parent or guardian.
12. External Links
Our Website may contain links to third-party websites. These external websites operate independently and maintain their own privacy policies.
We are not responsible for their content, policies, or practices.
Examples include:
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes.
The “Last updated” date will indicate when changes were made.
Continued use of the Website after updates constitutes acceptance of the revised Privacy Policy.
14. Related Policies
Please also review our:
- Terms & Conditions
- Cookie Policy
- Refund Policy
- Shipping Policy
15. Contact Us
If you have questions about this Privacy Policy or your personal information, please contact:
Ceyara Ltd
Alison Business Centre
39–40 Alison Crescent
Sheffield S2 1AS
United Kingdom
Email: info@ceyaratea.com
Registered in England and Wales.
Company Registration Number: 16864371