Privacy Policy
This document explains the personal information collected by Botanica Traditii S.R.L. ("CeaiBotanica") while browsing ceaibotanica.shop or completing an order, along with the processing purposes, retention periods, recipients, and your specific rights. We comply with all requirements under the General Data Protection Regulation (GDPR).
1. About this privacy policy
The rules described here apply to the ceaibotanica.shop platform, registered purchases, and communications sent to us. We do not manage external websites linked from our pages, each of which is governed by its own policies.
2. Data controller details and contact information
Data is managed directly by Botanica Traditii S.R.L., Str. Baba Novac nr. 19, 900366 Constanța, România. If you have privacy requests, contact [email protected] or call +40 592 331 329.
- Merchant
- Botanica Traditii S.R.L.
- Registered address
- Str. Baba Novac nr. 19, 900366 Constanța, România
- [email protected]
- Phone
- +40 592 331 329
3. Personal data we collect
We collect only the details strictly necessary to fulfill each purpose specified below.
3.1 Information you provide directly
Name, delivery destination, email address, and phone number when placing an order; the text of messages sent directly or submitted as a review. We retain these while preparing your parcel and pursuant to accounting regulations, and written correspondence for up to 3 years from the last interaction.
3.2 Payment and transaction data
Purchase identifier, selected botanical varieties, order totals, payment method, and parcel status. We do not collect card details on this platform. We retain these records for the duration required by statutory accounting standards.
3.3 Automatically collected information
IP address, web browser, device used, visited sections, traffic source, and timestamp, stored on the server and through files outlined in the Cookie Policy. These are retained for 30 days in technical logs and up to 14 months in aggregated analytics.
3.4 Marketing and advertising data
The promotional source, advertisement, or URL through which you accessed the store, recorded to monitor purchase attribution. Kept for up to 90 days.
3.5 Data provided by our partners
Shipping updates provided by the courier company and transaction confirmations from the payment processor, directly linked to your package.
3.6 Children
The platform is intended exclusively for individuals over 18. We do not knowingly collect data from minors; a parent or legal guardian can request its deletion by writing to [email protected].
4. Mandatory information to complete your order
Your full name, postal address, email, and phone number are required to ship the herbal blends and provide delivery updates. Without them, we cannot send the package. Any other detail remains optional.
5. How we use the collected information
- We prepare your tea selection, issue invoices, handle shipping, and manage related returns or payment procedures.
- We respond to your inquiries and update you on the package status via email or SMS.
- We maintain the technical stability of the store, prevent fraud attempts, and analyze how visitors navigate the catalog.
- We send updates about inventory and harvests only if you specifically requested them; an unsubscribe link is always available in every email.
- We comply with applicable legal requirements, including archiving financial and accounting records.
6. Recipients of personal information
We do not sell user data. We share it strictly with the listed partners, who are under clear contractual obligations to act solely on our instructions.
6.1 Payment processing
The payment service provider receives only the details necessary to process and confirm the financial transfer.
6.2 Shipping and fulfilment partners
The courier company receives your name, delivery address, and phone number to deliver the herbal package and notify the recipient directly.
6.3 Service providers
Technical hosting platforms, messaging systems, and support services process data directly on our behalf.
6.4 Advertising and analytics partners
Analytics and advertising modules, enabled only with your consent, share browsing details with partners as outlined in the cookie policy.
6.5 Legal and regulatory disclosures
We disclose information to authorities when required by law or when necessary to protect our legal rights, such as in a delivery dispute.
6.6 Business transfers
If the business is transferred or merged, the database transfers to the new owner under the same strict security standards.
7. International data transfers
Some partners may operate servers outside Romania. When this occurs, we rely on official adequacy decisions or standard contractual clauses to ensure the same level of security.
8. Your rights and choices
Under the provisions of the General Data Protection Regulation (GDPR), you have data subject rights under Articles 15-22 GDPR.
8.1 Access, rectification, deletion, and data portability
You have the right to access your stored data, request its correction or deletion, receive a copy in a standard format, restrict or object to processing, and withdraw your prior consent. Actions carried out before withdrawal remain valid.
8.2 Marketing choices
All promotional messages include a direct unsubscribe link. Statistics and advertising modules can be disabled at any time through the cookie settings.
8.3 Exercising your rights
Send a request to [email protected]. We may request proof of identity and will respond within 30 days. You also have the right to file a complaint with the data protection supervisory authority in Romania.
9. Data security
The platform uses a secure HTTPS protocol. Order records are stored on protected servers, accessible exclusively to personnel designated to prepare and deliver the teas. We never collect or store payment card details.
10. Data retention
Accounting documents and order records remain archived for the period required by tax legislation, after which they are permanently deleted. Customer support correspondence is deleted after 3 years from the last interaction. Technical logs are kept for 30 days, aggregated statistics up to 14 months, and your newsletter consent remains valid until you opt out.
11. Third-party websites and services
External websites, social media accounts, or partner financial services apply their own privacy policies. We are not responsible for how data is handled on those platforms.
12. Changes to this policy
We update these terms whenever changes occur in our operations or legal obligations. The official version is always the one published here, with the revision date displayed at the top.
CeaiBotanica