Privacy Policy

Effective Date: August 7, 2026  |  Tea Heaven Storefront

At Tea Heaven, we are committed to safeguarding your personal data with institutional security controls, 256-bit SSL encryption, and strict data privacy compliance.

1. Information We Collect

We collect information to fulfill your tea orders, enhance storefront performance, and deliver personalized customer support. This includes:

  • Account & Order Identification: Full name, email address, phone number, and delivery shipping addresses.
  • Transactional Details: Order items, weight variants, promo code redemptions, and payment status (Paid, COD, Refunded).
  • Payment Data Safety: Online payments are processed via Razorpay's PCI-DSS Level 1 compliant gateway. Tea Heaven never stores raw credit/debit card numbers or UPI PINs on our servers.
  • Technical Logs: IP address, browser type, device information, and session tokens utilized for security logging and rate-limiting.

2. How We Use Your Information

Your personal data is strictly processed for legitimate business operations:

  • To validate, confirm, and ship your tea orders to your address.
  • To issue real-time order status updates and tracking details via email.
  • To manage your customer account, wishlist, and verified buyer reviews.
  • To prevent fraudulent transactions and enforce rate-limiting on login/checkout endpoints.

3. Data Protection & Sharing

We do not sell, rent, or trade customer personal data to any third-party advertisers or data brokers.

Limited data is shared solely with trusted service providers essential for store operations:

  • Payment Gateway: Razorpay Software Private Limited for payment capture and refund processing.
  • Logistics Partners: Certified courier services (BlueDart, Delhivery, India Post) for order dispatch.
  • Statutory Compliance: When required by court order or law enforcement under applicable laws of India.

4. Cookie Policy

Tea Heaven uses essential HTTP cookies and local storage tokens to:

  • Maintain active shopping cart items across browsing sessions.
  • Enforce CSRF security protection on forms and AJAX endpoints.
  • Store authenticated customer session keys securely.

You can clear or manage your cookie preferences through your web browser settings at any time.

5. Your Data Rights

You have the right to access, update, or request deletion of your account and personal details through your account profile page or by submitting an inquiry on our Contact Page.