Privacy Policy

TOTEA ("TOTEA", "we", "us" or "our") operates this online store and website, including all related content, features, tools, products and services (collectively, the "Services").

Our store is powered by Shopify, which provides the technology that allows us to offer our Services, process transactions and operate our online store.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, use our Services, place an order, communicate with us, or otherwise interact with TOTEA.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is intended to apply internationally. However, privacy and data protection laws vary between countries and regions. Where mandatory privacy laws provide you with additional rights or protections, those rights will apply to the extent required by applicable law.

1. Personal Information We Collect

When we use the term "personal information" or "personal data", we mean information that identifies you or can reasonably be associated with you.

Depending on how you interact with TOTEA, the information we may collect includes:

Contact Information

This may include:

• Full name;

• Email address;

• Billing address;

• Shipping address;

• Phone number; and

• Other contact details you provide to us.

Order and Transaction Information

This may include:

• Products you view, add to your cart or purchase;

• Order details;

• Transaction history;

• Payment method;

• Billing information;

• Shipping information;

• Returns, refunds and exchanges; and

• Other information necessary to process your order.

Payment Information

Payments made through our store are processed by third-party payment providers.

Depending on the payment method you use, TOTEA may receive information such as payment confirmation, transaction details and limited payment information.

We do not intentionally store complete payment card numbers when payment processing is handled by third-party payment providers.

Account Information

If you create an account, we may collect information such as:

• Username;

• Password;

• Account preferences;

• Saved information; and

• Other information associated with your account.

Communications

When you contact TOTEA, we may collect the information contained in your communication, including emails, customer service requests, questions, reviews and other messages.

Device and Technical Information

When you visit our website, certain technical information may be collected automatically, including:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Network information;

• Approximate location derived from technical information;

• Referring website;

• Pages visited;

• Date and time of access; and

• Other technical identifiers.

Usage Information

We may collect information about how you interact with our website, including browsing activity, products viewed, searches, clicks, cart activity and interactions with our Services.

2. How We Collect Personal Information

We may collect personal information from the following sources:

Directly from You

You may provide information when you:

• Place an order;

• Create an account;

• Subscribe to marketing communications;

• Contact customer support;

• Submit a review;

• Enter a promotion or competition;

• Complete a form; or

• Otherwise interact with TOTEA.

Automatically

We may automatically collect certain information when you browse or use our website through cookies, pixels, analytics tools and similar technologies.

From Service Providers

We may receive information from companies that provide services to TOTEA, such as payment processing, analytics, advertising, fraud prevention, fulfilment, shipping, customer support and technology services.

From Third Parties

We may receive information from other third parties where permitted by applicable law, including advertising partners, social media platforms, business partners and other service providers.

3. Cookies and Similar Technologies

TOTEA and our service providers may use cookies, pixels, tags, scripts and similar technologies to operate and improve our website.

These technologies may be used to:

• Keep products in your shopping cart;

• Remember preferences;

• Understand how visitors use our website;

• Measure website performance;

• Improve our Services;

• Analyse purchasing behaviour;

• Prevent fraud and protect our website;

• Provide personalised content; and

• Deliver or measure advertising.

Depending on where you live, you may have choices regarding certain cookies and similar technologies.

Where required by applicable law, we will request your consent before using non-essential cookies or similar technologies.

You may also be able to control cookies through your browser settings or through available privacy controls on our website.

4. How We Use Personal Information

Depending on how you interact with TOTEA, we may use your personal information to:

Provide and Operate Our Services

We may use your information to:

• Process and fulfil orders;

• Process payments;

• Arrange delivery;

• Provide customer support;

• Process returns, refunds and exchanges;

• Maintain customer accounts;

• Remember preferences;

• Provide product recommendations;

• Improve our website and Services; and

• Otherwise provide the Services you request.

Marketing and Advertising

Where permitted by applicable law, we may use your information to:

• Send promotional emails or other marketing communications;

• Advertise our products;

• Measure advertising performance;

• Show you advertisements that may be relevant to your interests;

• Create audiences for advertising platforms; and

• Understand how customers interact with our marketing.

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in our communications.

Where applicable law requires consent for certain marketing activities, we will obtain that consent.

Security and Fraud Prevention

We may process information to:

• Detect and prevent fraud;

• Identify suspicious transactions;

• Protect our customers and Services;

• Prevent abuse or misuse;

• Investigate potentially illegal activity; and

• Maintain the security of our website and systems.

Legal and Compliance Purposes

We may process personal information when necessary to:

• Comply with applicable laws;

• Respond to lawful requests from authorities;

• Protect our legal rights;

• Enforce our policies and agreements;

• Resolve disputes; and

• Establish, exercise or defend legal claims.

5. Legal Bases for Processing

Depending on your location and applicable privacy law, TOTEA may process personal information on one or more of the following grounds:

• To perform a contract with you, such as processing and delivering an order;

• To comply with a legal obligation;

• With your consent, where consent is required;

• For our legitimate business interests, where permitted by law; and

• To protect our rights, customers, Services and business.

Where consent is the legal basis for processing, you may withdraw your consent where permitted by applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. How We Share Personal Information

We may disclose personal information to third parties where necessary to operate our business and provide our Services.

These may include:

Shopify

Our store is powered by Shopify. Shopify provides the infrastructure and technology necessary to operate our online store and may process personal information in connection with our Services.

Shopify may process information in countries other than your country of residence.

You can review Shopify's consumer privacy information through Shopify's official privacy resources.

Shopify Consumer Privacy Policy

Payment Providers

We may share information with payment processors and financial service providers to process transactions, payments, refunds and fraud checks.

Fulfilment and Shipping Providers

We may share information such as your name, shipping address, email address and phone number with companies involved in fulfilling and delivering your order.

This may include logistics providers, fulfilment partners, warehouses and shipping carriers.

Technology and Service Providers

We may share information with service providers that assist us with:

• Website hosting;

• Cloud storage;

• Analytics;

• Customer support;

• Email communications;

• Marketing;

• Advertising;

• Fraud prevention;

• Security;

• IT services; and

• Other business operations.

Advertising and Marketing Partners

Where permitted by applicable law, we may share or allow certain information to be collected by advertising and marketing partners to help us advertise our products, measure advertising effectiveness and provide relevant advertisements.

Depending on where you live, you may have rights to opt out of certain forms of targeted advertising or sharing of personal information.

Legal and Business Transactions

We may disclose personal information when reasonably necessary to:

• Comply with applicable laws;

• Respond to legal processes or government requests;

• Protect our rights or property;

• Prevent fraud or security threats;

• Enforce our agreements;

• Investigate suspected unlawful activity; or

• Facilitate a merger, acquisition, sale, restructuring, financing, bankruptcy or other business transaction.

7. International Data Transfers

Because TOTEA operates an international online store and uses service providers that may operate globally, your personal information may be transferred to, stored in or processed in countries other than the country where you live.

The privacy laws of those countries may differ from the laws of your country.

Where applicable law requires specific safeguards for international transfers, TOTEA will use legally recognised transfer mechanisms or other safeguards appropriate to the relevant jurisdiction.

For customers in the European Economic Area or the United Kingdom, where applicable, international transfers may rely on mechanisms such as adequacy decisions, Standard Contractual Clauses or other legally recognised safeguards.

Shopify also maintains mechanisms designed to support international transfers of personal data in accordance with applicable privacy requirements.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our Services;

• Complete transactions;

• Maintain business and accounting records;

• Comply with legal obligations;

• Resolve disputes;

• Prevent fraud;

• Enforce agreements; and

• Protect our legitimate business interests.

The specific retention period may vary depending on the type of information and the purpose for which it is processed.

When personal information is no longer required, we may delete it, anonymise it or securely dispose of it, subject to applicable legal and operational requirements.

9. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect your information, we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have some or all of the following rights:

• The right to know whether we process your personal information;

• The right to access your personal information;

• The right to request correction of inaccurate information;

• The right to request deletion of your personal information;

• The right to restrict certain processing;

• The right to object to certain processing;

• The right to data portability;

• The right to withdraw consent where processing is based on consent;

• The right to opt out of certain marketing or targeted advertising; and

• The right to lodge a complaint with an applicable privacy or data protection authority.

These rights are not absolute and may be subject to legal exceptions or limitations.

The rights available to you depend on your jurisdiction and circumstances. For example, GDPR provides European individuals with rights including access, rectification, erasure, restriction, portability and objection in certain circumstances.

11. How to Exercise Your Rights

If you wish to exercise a privacy right or ask a question about how TOTEA handles your personal information, please contact us:

Email: mytotea@use.startmail.com

Please include enough information for us to identify your request and, where reasonably necessary, verify your identity.

We may request additional information to verify that the person making the request is authorised to do so.

We will respond to valid requests within the timeframe required by applicable law.

12. Marketing Communications

You may unsubscribe from promotional emails at any time by clicking the unsubscribe link included in our marketing communications.

Even if you opt out of marketing communications, we may continue to send you non-promotional communications that are necessary to complete or manage your order, account or interaction with TOTEA.

13. Children's Privacy

Our Services are not intended for children who are below the minimum age permitted to use online services in their jurisdiction.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information in circumstances where it should not have been collected, please contact us so that we can review the matter and take appropriate action.

14. Third-Party Websites and Services

Our website may contain links to websites, applications, social media platforms or other services operated by third parties.

TOTEA does not control the privacy practices of those third parties.

If you access a third-party website or service through our website, we recommend reviewing its privacy policy before providing personal information.

TOTEA is not responsible for the privacy, security or practices of third-party services except to the extent required by applicable law.

15. Social Media and Third-Party Integrations

Our Services may include features provided by social media platforms or other third parties.

These services may collect information about your interaction with them in accordance with their own privacy policies and terms.

Your interactions with third-party platforms are subject to the privacy settings and policies of those platforms.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business practices;

• Our Services;

• Technology;

• Privacy requirements;

• Legal or regulatory obligations; or

• The way we process personal information.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

17. Complaints

If you have a concern or complaint regarding the way TOTEA handles your personal information, please contact us first at:

mytotea@use.startmail.com

We will review your complaint and respond within the timeframe required by applicable law.

Depending on your location, you may also have the right to lodge a complaint with your local data protection or privacy authority.

18. Contact Us

If you have any questions about this Privacy Policy, our privacy practices or your personal information, please contact:

TOTEA
Email: mytotea@use.startmail.com

We will use reasonable efforts to assist you with your privacy-related request.

19. Applicable Privacy Laws

This Privacy Policy is intended to operate across multiple jurisdictions.

Nothing in this Privacy Policy is intended to exclude, restrict or override any privacy or data protection right that cannot legally be excluded or restricted in your jurisdiction.

Where mandatory privacy legislation provides additional protections or rights, those provisions will apply to the extent required by law.

If any provision of this Privacy Policy is found to be invalid or unenforceable under applicable law, the remaining provisions will continue to apply to the extent permitted by law.