Privacy & Cookie Policy
We collect as little as we can, we tell you plainly what we hold, and we never sell your data. This page explains what we gather when you shop with us, why, and the choices you have.
01 Who we are
Cultever ("we", "us", "our") is an organic botanical tea brand based in Surrey, United Kingdom. We are the data controller for the personal information described in this policy. For any privacy question, contact [email protected].
02 What we collect
Depending on how you use the site, we may collect:
- Your name and email address — to confirm orders and send delivery updates.
- Delivery address and phone number — to ship your order and let the carrier reach you.
- Order history — what you bought and when.
- Payment confirmation — we never see or store your full card details; these go directly to our payment providers.
- Quiz responses (if you take the ritual quiz) — to recommend a blend.
- Reviews and photos you choose to submit about a product.
- Basic usage data — pages viewed, what you added to your basket, and how you arrived, via the cookies described in section 5.
- A one-way hash of your email address — if, and only if, you have accepted advertising cookies. This is an irreversible scramble sent to Meta, TikTok or Google so they can recognise an existing customer without us ever handing over your actual email.
03 Why we use it & our legal basis
Under the UK GDPR, we rely on the following bases:
- Contract — to take payment, fulfil your order and handle returns.
- Consent — to send you marketing emails and to set advertising cookies. You can withdraw consent at any time.
- Legitimate interests — to prevent fraud and improve the experience, balanced against your rights.
- Legal obligation — to keep order and tax records for the period UK law requires.
04 Who we share it with
We never sell your data. We share it only with the service providers that help us run the shop, each acting under contract and appropriate safeguards:
- WooPayments / Stripe and PayPal — to take payment securely. They receive your payment and billing details directly.
- Huboo — our fulfilment partner, who receives your name and delivery address to pack and ship your parcel.
- Royal Mail / carrier — to deliver and provide tracking.
- Klaviyo — email delivery and list management (data may be processed in the US under standard contractual clauses).
- Ideal Postcodes — UK address lookup when you use the address finder at checkout.
- ReviewX / CusRev — to invite and publish product reviews, if you opt in.
- Cloudflare and Hostinger — hosting, content delivery and security.
- Meta (Facebook and Instagram), TikTok and Google (Analytics and Ads) — to measure which content and adverts bring people to us, and only if you accept advertising cookies (see section 5). Where these providers process data outside the UK, they do so under standard contractual clauses.
05 Cookies & tracking
Until you choose Accept all, only essential and functional cookies are set. Here is what each does:
| Source | Purpose | Set when |
|---|---|---|
| WooCommerce | Remembers your cart and keeps checkout secure (essential). | Always |
| Your browser storage | Stores your cart and consent choice on your device. | Always |
| Klaviyo | Delivers the emails you asked for (functional / first-party). | Always |
| Meta Pixel | Measures which Facebook and Instagram content leads to a visit or an order, so we can advertise to people likely to enjoy the tea rather than everyone. | Only after you Accept all |
| TikTok Pixel | The same measurement for TikTok content and adverts. | Only after you Accept all |
| Google Analytics 4 | Tells us which pages people actually read and where the journey breaks down, so we can improve the shop. IP addresses are anonymised. | Only after you Accept all |
| Google Ads | Records that a visit or order followed a Google advert, so we know what is worth running. | Only after you Accept all |
Nothing loads before you say yes. The Meta, TikTok and Google scripts are not on the page at all until you choose Accept all — they are injected only at that moment. Choose Essential only and they are never downloaded, so no advertising cookie is ever set.
Changing your mind. To withdraw consent, clear this site's data in your browser settings and reload — the banner returns and you can choose Essential only. Advertising preferences can also be managed directly in your Meta, TikTok and Google account settings.
Anonymous visit count. When you arrive from another site, we record where the visit came from (for example Instagram, a Google search or one of our emails) and the page you landed on. Nothing is stored on your device and no identifier, IP address or cookie is used, so this count cannot be linked to you. If you choose Accept all, we also remember that source in your browser for up to 30 days, so that an order you place can show where you first found us.
06 How long we keep it
Order and payment records are kept for six years, as UK tax law requires. If an account was created for you when you ordered, it is kept until you ask us to close it. Marketing data is kept until you unsubscribe or ask us to delete it. Aggregated, anonymous analytics may be kept longer.
07 Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your data ("right to be forgotten"), where we are not required to keep it.
- Object to or restrict how we use it.
- Withdraw consent at any time, including by unsubscribing from any email.
- Request a copy of your data in a portable format.
To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
08 Contact
Questions about this policy or your data? We'd genuinely rather hear from you than not.
Email [email protected]
Cultever · Surrey, United Kingdom