Privacy Policy
Last updated: December 15, 2024
Our Commitment to Your Privacy
At Daily Steep, we take your privacy seriously. This policy explains how we collect, use, protect, and handle your personal information when you visit our website or use our services.
We believe in transparency and want you to understand exactly what information we collect and why. If you have any questions, please don't hesitate to reach out to us.
Information We Collect
Information You Provide
When you interact with our website or services, you may provide us with:
- Name and contact information (email address, phone number if provided)
- Delivery address for subscription services
- Payment information (processed securely through third-party payment processors)
- Communication preferences and tea preferences
- Any information you include in messages sent through our contact form
Information Collected Automatically
When you visit our website, we automatically collect:
- Browser type and version
- Device information and operating system
- IP address and general location data
- Pages visited and time spent on our site
- Referring website or source
- Cookie data (see our Cookie Policy for details)
Legal Basis for Processing
We process your personal data based on:
- Your consent when you submit forms or accept cookies
- Contract performance when providing services you've requested
- Legitimate interests in improving our services and website
- Legal obligations to maintain records and comply with regulations
How We Use Your Information
Service Delivery: To fulfill your tea subscriptions, process orders, and deliver products to your specified address.
Communication: To respond to your inquiries, send service updates, and provide information about your account or orders.
Website Improvement: To analyze how visitors use our website and identify areas for enhancement.
Marketing Communications: To send you information about our services, special offers, or tea-related content (only with your consent, and you can opt out anytime).
Customer Support: To address questions, resolve issues, and provide assistance with our services.
Security: To protect against fraud, unauthorized access, and ensure the security of our website and services.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
How We Share Your Information
We do not sell your personal information to third parties. We may share your data with:
Service Providers: Trusted partners who help us operate our business, such as payment processors, shipping companies, email service providers, and website hosting services. These partners are bound by confidentiality agreements.
Analytics Services: We use analytics tools like Google Analytics to understand website usage. These services collect data in accordance with their own privacy policies.
Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights and safety.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
How We Protect Your Data
Security Measures: We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.
Encryption: Sensitive data, such as payment information, is encrypted during transmission using SSL/TLS technology.
Secure Storage: Personal data is stored on secure servers with restricted access.
Access Controls: Only authorized personnel have access to personal information, and they are bound by confidentiality obligations.
Monitoring: We regularly monitor our systems for potential vulnerabilities and security threats.
Breach Notification: In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by law.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Account information: Retained while your account is active and for a reasonable period afterward
- Order history: Retained for business records and legal compliance (typically 7 years)
- Contact form inquiries: Retained for up to 2 years
- Website analytics: Anonymized data retained for up to 26 months
- Marketing communications: Until you unsubscribe or withdraw consent
Your Privacy Rights
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data, subject to certain legal obligations.
Right to Data Portability: You can request to receive your data in a structured, commonly used format.
Right to Object: You can object to the processing of your personal data for marketing purposes or based on legitimate interests.
Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us using the information provided on our Contact page.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.
You can browse our website and learn about our services without providing any personal information.