Privacy Policy
Last updated: November 2, 2026
This policy explains what personal information tea& collects through tea-and.com, why we collect it, and the choices you have. By using our website or contacting us, you agree to the practices described here.
Who we are
tea& is an online-only tea business offering loose leaf teas, custom tea blending, private events, catering and a tea subscription service. Our website is https://tea-and.com. In this policy, “we”, “us” and “our” mean tea&. We operate online only and do not have a physical storefront or office address. You can reach us at [email protected].
Information we collect
Contact form. When you send us a message, we collect your first and last name, email address, phone number, the service you are asking about (private events, catering, custom tea blending, tea subscription service or other) and the message you write. Messages are emailed to our team and also stored in our website’s database.
Updates signup. When you sign up for updates using the form in our website footer, we collect your email address and first name. We use them only to send you updates about events and new recipes, and we store them in our website’s database.
Blog comments. When you leave a comment on our blog, we collect the name, email address and website you enter, along with your IP address and browser user agent, which help us detect spam. If you use Gravatar, an anonymized string created from your email address may be sent to the Gravatar service to check whether you have a profile picture. Gravatar’s privacy policy is at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public next to it.
Instagram feed. Our website displays posts from our Instagram account. When that feed loads, your browser may connect to Instagram, which can receive your IP address and other technical information. Instagram’s privacy policy is at https://help.instagram.com/519522125107875.
Information collected automatically. Like most websites, our servers and our hosting provider, WP Engine, log technical information such as your IP address, browser type, device, the pages you visit, and the date and time of your visit. We also use Cloudflare Web Analytics to measure how many people visit our website and which pages they view. See Cloudflare’s Privacy Policy for details.
How we use your information
- To reply to your enquiries and provide the services you ask about, including events, catering, custom blends and subscriptions
- To send you updates about events and new recipes, if you signed up for them
- To keep our website secure and to prevent spam and abuse
- To understand how our website is used and improve it
- To meet our legal, tax and accounting obligations
Spam protection and security
Our contact form and updates signup are protected by Cloudflare Turnstile, a bot-detection service provided by Cloudflare, Inc. The check runs automatically in the background and, in most cases, needs no action from you. To tell real visitors from automated bots, Turnstile processes technical signals such as your IP address, TLS fingerprint and browser User-Agent. These signals are used to detect and block bots, not to identify or profile you, and Cloudflare states that it cannot directly identify individuals from them. Cloudflare processes this data on our behalf to secure our website. Cloudflare may also use the same signals, as an independent controller, to improve Turnstile’s bot detection. For details, see Cloudflare’s Turnstile Privacy Addendum. If you have questions or want to exercise your data protection rights, contact us using the details in this policy.
Cookies
Our website uses cookies and similar technologies that help it work. Cloudflare Turnstile, our hosting provider and the Instagram feed may also set cookies or similar technologies for security, performance and display purposes. You can block or delete cookies in your browser settings, but some parts of the website may not work properly without them.
Who we share your information with
We do not sell your personal information. We share it only with service providers who help us run the website and the business, and only as needed for the task they perform:
- Our website hosting provider, WP Engine
- Cloudflare, for spam and bot protection and for website analytics, as described above
We may also disclose information where the law requires it, to protect our rights or safety, or in connection with a sale or transfer of our business.
How long we keep your information
We keep contact form messages for 2 years after we last communicate with you. We keep updates signup details until you ask us to remove them. Comments stay on the website until you ask us to remove them. After these periods, we delete or anonymize the information.
Your rights
You can ask us at any time to tell you what personal information we hold about you, to correct it, or to delete it. You can also ask us to remove you from our updates at any time. To make a request, email [email protected]. We may need to verify your identity before acting on a request.
Visitors from the European Economic Area and the United Kingdom. You also have the right to object to or restrict certain processing, to receive a copy of your data in a portable format, to withdraw consent where we rely on it, and to complain to your local data protection authority. Our legal bases for processing are your consent (for example, updates signups), performance of a contract (for example, providing services you ask us for), our legitimate interests (for example, replying to enquiries, website security and spam prevention) and legal obligations.
California residents. You have the right to know what personal information we collect, use and disclose, to request deletion or correction, and not to be treated differently for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
Children
Our website is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Links to other websites
Our website may link to other websites, including our social media pages. We are not responsible for their privacy practices, and we encourage you to read their policies.
Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. Significant changes will be announced on our website or by email.
Contact us
If you have questions about this policy or how we handle your information, contact us at [email protected].