Privacy Policy · 隐私政策

Tchit Bubbletea ("we", "us", "our") operates the website tchit7bubbletea.com and the online ordering service available on it. Our store is located at 148 King Street, Aberdeen, AB24 5BD, Scotland, UK.

For any privacy-related questions, please contact us at hello@tchit7bubbletea.com.

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or services. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following personal data when you use our services:

Account & Registration Data
When you create a member account: your name, email address, phone number, and date of birth (optional, used for birthday rewards).

Order DataWhen you place an order: your name, phone number, email address, delivery address (if applicable), and order details including items, quantities, and preferences.

Payment DataPayment transactions are processed securely by Stripe. We do not store your credit card details. Stripe may collect and process payment information in accordance with their own privacy policy.

Loyalty & Rewards Data
Your stamp balance, redemption history, and member level (Standard, Silver, or Gold).

Gift Card DataIf you purchase or use a gift card: the gift card code, balance, and transaction history.

Usage & Analytics Data
We use Google Analytics to collect anonymous data about how visitors use our website, including pages visited, time spent on site, and general location (country/city level). This data does not identify you personally.

Contact Form DataIf you send us a message via our contact form: your name, email address, and the content of your message.

We use your personal data for the following purposes:

To process and fulfil your orders, including delivery and pickup coordination.

To manage your member account and calculate your stamp balance and member level.

To send order confirmation and status update emails.

To send marketing emails about new products, promotions, and exclusive member offers — only if you have given us your explicit consent to do so.

To improve our website and services using anonymised analytics data from Google Analytics.

To respond to enquiries submitted via our contact form.

To comply with legal obligations, including financial record-keeping requirements.

Under UK GDPR, we process your personal data on the following legal bases:

Contract performance: Processing your orders and managing your account.

Legitimate interests: Improving our services, preventing fraud, and maintaining the security of our systems.

Legal obligation: Retaining financial and transactional records as required by UK law.

Consent: Sending marketing emails. You may withdraw your consent at any time by clicking "unsubscribe" in any marketing email or by contacting us at hello@tchit7bubbletea.com.

We do not sell your personal data to any third parties.

We share your data only with the following service providers who help us operate our business:

Stripe — Payment processing. Your payment data is handled directly by Stripe in accordance with their privacy policy (stripe.com/privacy).

Google Analytics — Anonymous website analytics. Data is processed by Google in accordance with their privacy policy.

SendGrid — Email delivery service used to send order confirmations and notifications.

Our website and database are hosted on secure cloud servers based in the UK/EU.

All third-party providers are required to process your data securely and only for the purposes we specify.

We retain your personal data for the following periods:

Order records: 7 years, as required by UK tax and financial regulations (HMRC guidelines).

Member account data: For as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain certain records.

Contact form messages: 1 year from the date of submission.

Marketing consent records: Until you withdraw consent or request deletion.

After these periods, your data is securely deleted or anonymised.

We use cookies on our website for the following purposes:

Essential cookies: Required for the website to function correctly, including keeping you logged in and maintaining your shopping cart.

Analytics cookies: Used by Google Analytics to collect anonymous data about website usage. You can opt out of Google Analytics tracking at any time via your browser settings or by using the Google Analytics Opt-out Browser Add-on.

We do not use advertising or tracking cookies for targeted advertising purposes.

By continuing to use our website, you consent to our use of essential cookies. You can manage your cookie preferences in your browser settings at any time.

Under UK GDPR, you have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct any inaccurate or incomplete data.

Right to erasure: You can request that we delete your personal data, subject to legal retention requirements.

Right to restrict processing: You can ask us to temporarily stop processing your data in certain circumstances.

Right to data portability: You can request your data in a machine-readable format.

Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.

Right to withdraw consent: Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time.

To exercise any of these rights, please contact us at hello@tchit7bubbletea.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

These measures include SSL/TLS encryption for all data transmitted between your browser and our website, secure server hosting on Linode infrastructure, restricted access to personal data on a need-to-know basis, and regular security reviews.

Payment data is handled exclusively by Stripe, which is PCI DSS compliant. We never store credit card details on our own servers.

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at hello@tchit7bubbletea.com and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: hello@tchit7bubbletea.com
Phone: 01224 919930
Address: 148 King Street, Aberdeen, AB24 5BD, Scotland, UK

You also have the right to make a complaint to the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113