CeaiBotanicaCeaiBotanica
Legal Information · Updated on September 2026Order now

Privacy Policy

This document explains the personal information collected by Botanica Traditii S.R.L. ("CeaiBotanica") while browsing ceaibotanica.shop or completing an order, along with the processing purposes, retention periods, recipients, and your specific rights. We comply with all requirements under the General Data Protection Regulation (GDPR).

1. About this privacy policy

The rules described here apply to the ceaibotanica.shop platform, registered purchases, and communications sent to us. We do not manage external websites linked from our pages, each of which is governed by its own policies.

2. Data controller details and contact information

Data is managed directly by Botanica Traditii S.R.L., Str. Baba Novac nr. 19, 900366 Constanța, România. If you have privacy requests, contact [email protected] or call +40 592 331 329.

Merchant
Botanica Traditii S.R.L.
Registered address
Str. Baba Novac nr. 19, 900366 Constanța, România
Email
[email protected]
Phone
+40 592 331 329

3. Personal data we collect

We collect only the details strictly necessary to fulfill each purpose specified below.

3.1 Information you provide directly

Name, delivery destination, email address, and phone number when placing an order; the text of messages sent directly or submitted as a review. We retain these while preparing your parcel and pursuant to accounting regulations, and written correspondence for up to 3 years from the last interaction.

3.2 Payment and transaction data

Purchase identifier, selected botanical varieties, order totals, payment method, and parcel status. We do not collect card details on this platform. We retain these records for the duration required by statutory accounting standards.

3.3 Automatically collected information

IP address, web browser, device used, visited sections, traffic source, and timestamp, stored on the server and through files outlined in the Cookie Policy. These are retained for 30 days in technical logs and up to 14 months in aggregated analytics.

3.4 Marketing and advertising data

The promotional source, advertisement, or URL through which you accessed the store, recorded to monitor purchase attribution. Kept for up to 90 days.

3.5 Data provided by our partners

Shipping updates provided by the courier company and transaction confirmations from the payment processor, directly linked to your package.

3.6 Children

The platform is intended exclusively for individuals over 18. We do not knowingly collect data from minors; a parent or legal guardian can request its deletion by writing to [email protected].

4. Mandatory information to complete your order

Your full name, postal address, email, and phone number are required to ship the herbal blends and provide delivery updates. Without them, we cannot send the package. Any other detail remains optional.

5. How we use the collected information

  • We prepare your tea selection, issue invoices, handle shipping, and manage related returns or payment procedures.
  • We respond to your inquiries and update you on the package status via email or SMS.
  • We maintain the technical stability of the store, prevent fraud attempts, and analyze how visitors navigate the catalog.
  • We send updates about inventory and harvests only if you specifically requested them; an unsubscribe link is always available in every email.
  • We comply with applicable legal requirements, including archiving financial and accounting records.

6. Recipients of personal information

We do not sell user data. We share it strictly with the listed partners, who are under clear contractual obligations to act solely on our instructions.

6.1 Payment processing

The payment service provider receives only the details necessary to process and confirm the financial transfer.

6.2 Shipping and fulfilment partners

The courier company receives your name, delivery address, and phone number to deliver the herbal package and notify the recipient directly.

6.3 Service providers

Technical hosting platforms, messaging systems, and support services process data directly on our behalf.

6.4 Advertising and analytics partners

Analytics and advertising modules, enabled only with your consent, share browsing details with partners as outlined in the cookie policy.

6.5 Legal and regulatory disclosures

We disclose information to authorities when required by law or when necessary to protect our legal rights, such as in a delivery dispute.

6.6 Business transfers

If the business is transferred or merged, the database transfers to the new owner under the same strict security standards.

7. International data transfers

Some partners may operate servers outside Romania. When this occurs, we rely on official adequacy decisions or standard contractual clauses to ensure the same level of security.

8. Your rights and choices

Under the provisions of the General Data Protection Regulation (GDPR), you have data subject rights under Articles 15-22 GDPR.

8.1 Access, rectification, deletion, and data portability

You have the right to access your stored data, request its correction or deletion, receive a copy in a standard format, restrict or object to processing, and withdraw your prior consent. Actions carried out before withdrawal remain valid.

8.2 Marketing choices

All promotional messages include a direct unsubscribe link. Statistics and advertising modules can be disabled at any time through the cookie settings.

8.3 Exercising your rights

Send a request to [email protected]. We may request proof of identity and will respond within 30 days. You also have the right to file a complaint with the data protection supervisory authority in Romania.

9. Data security

The platform uses a secure HTTPS protocol. Order records are stored on protected servers, accessible exclusively to personnel designated to prepare and deliver the teas. We never collect or store payment card details.

10. Data retention

Accounting documents and order records remain archived for the period required by tax legislation, after which they are permanently deleted. Customer support correspondence is deleted after 3 years from the last interaction. Technical logs are kept for 30 days, aggregated statistics up to 14 months, and your newsletter consent remains valid until you opt out.

11. Third-party websites and services

External websites, social media accounts, or partner financial services apply their own privacy policies. We are not responsible for how data is handled on those platforms.

12. Changes to this policy

We update these terms whenever changes occur in our operations or legal obligations. The official version is always the one published here, with the revision date displayed at the top.