Free delivery over £35

Privacy Policy

This Privacy Policy explains how BRAVANTA GROUP LLP (company) trading as Ritual Tea (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website https://ritualtea.co.uk/ (the “Site”), place an order, subscribe, sign up to our newsletter, or contact us.

We are committed to protecting your privacy and handling your personal data responsibly and in line with UK data protection law (including the UK GDPR and the Data Protection Act 2018).

1. Who we are

Data controller: BRAVANTA GROUP LLP (trading as Ritual Tea)
Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Email: [email protected]

2. What personal data we collect

Depending on how you use the Site, we may collect:

A) Data you give us

  • Contact details: name, email address, telephone number (if provided)

  • Account information: username, password (stored in an encrypted/hashed format), order history

  • Order and delivery details: billing address, shipping address, delivery notes, products purchased, subscription details

  • Communications: messages you send via our contact form, email, or customer service enquiries

  • Customer content: product reviews, testimonials, and any images or content you submit (where enabled)

B) Data we collect automatically

  • Technical data: IP address, device type, browser type and version, operating system, referring URLs

  • Usage data: how you interact with the Site (pages visited, clicks, time on page)

  • Cookie and tracking data: identifiers stored via cookies or similar technologies (see “Cookies” below)

C) Payments

We use Stripe to process payments. We do not store your full card details. Stripe processes your payment information directly.

3. How we use your personal data

We use personal data to:

  • Process and fulfil orders and subscriptions (including taking payment, shipping items, handling returns/refunds)

  • Create and manage customer accounts

  • Provide customer support and respond to enquiries

  • Send service messages (e.g., order confirmations, delivery updates, subscription notices)

  • Improve and secure the Site (performance, troubleshooting, fraud prevention)

  • Measure marketing and advertising performance (e.g., understanding which ads lead to purchases)

  • Send marketing communications where permitted (e.g., newsletters), and to manage your preferences

4. Our lawful bases for processing (UK GDPR)

We rely on the following legal bases:

  • Contract: where processing is needed to provide what you’ve asked for (e.g., fulfil an order/subscription, manage your account).

  • Legitimate interests: where processing supports our business in a way that does not override your rights (e.g., site security, improving the Site, basic analytics, measuring ad performance, preventing fraud).

  • Consent: where required (e.g., certain cookies and marketing communications where you have opted in).

  • Legal obligation: where we must comply with legal requirements.

5. Who we share personal data with

We share personal data only where necessary to run our business and deliver our services, for example with:

  • Our distributor (to fulfil and deliver your order/subscription)

  • Payment processor: Stripe (to process payments)

  • Website platform and plugins: WooCommerce/WordPress-related services that support ordering and account features

  • Analytics and advertising partners:

    • Google Analytics

    • Google Ads/Google Tag

    • Meta (Facebook Pixel)

  • Security/anti-spam: Cloudflare Turnstile (to help prevent automated abuse)

  • Cookie management: CookieAdmin (to manage cookie preferences/consent)

  • Customer communications: our email services via cPanel hosting (e.g., sending order emails and responding to enquiries)

  • WhatsApp click-to-chat (if you choose to contact us via WhatsApp, that communication is handled by WhatsApp/Meta)

We may also share data if required by law, to protect our rights, or to prevent fraud or abuse.

6. International transfers

Some of the third-party services we use (for example, analytics and advertising providers) may process personal data outside the UK. Where this happens, we take steps designed to ensure appropriate safeguards are in place, such as contractual protections.

7. Cookies and similar technologies

We use cookies and similar technologies to:

  • make the Site work properly (e.g., shopping basket, login sessions)

  • remember preferences (including cookie choices)

  • measure and improve performance (analytics)

  • support advertising and conversion measurement (e.g., Meta Pixel, Google Ads)

Cookie preferences

We use CookieAdmin to help you manage cookie choices. Where required, non-essential cookies will only be set if you consent. You can update your cookie preferences at any time via the cookie settings on the Site (where available) or by adjusting your browser settings.

Types of cookies we may use

  • Strictly necessary cookies: required for the Site to function (e.g., checkout, account login).

  • Functional cookies: remember choices and preferences.

  • Analytics cookies: help us understand how the Site is used (e.g., Google Analytics).

  • Marketing/advertising cookies: used to measure and improve advertising (e.g., Meta Pixel, Google Ads conversion tracking).

8. Marketing

If you subscribe to our newsletter or opt in to marketing, we may send you updates about products, offers, and news from Ritual Tea.

You can opt out at any time by:

Even if you opt out of marketing, we may still send service emails related to your orders or subscriptions.

9. Automated decision-making and profiling

We may use marketing and analytics tools that create audiences or measure conversions (for example, showing ads to people who have visited certain pages). This can involve profiling for advertising purposes. It does not involve decisions that produce legal or similarly significant effects solely by automated means.

10. How we keep your data secure

We take reasonable technical and organisational measures to protect personal data, including access controls and security tools designed to reduce the risk of unauthorised access, loss, or misuse.

No website can be guaranteed 100% secure, but we work to use appropriate safeguards.

11. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this policy, including to provide services, maintain records, and support legitimate business needs.

12. Your rights (UK GDPR)

You have rights over your personal data, including:

  • Access: request a copy of the personal data we hold about you

  • Correction: ask us to correct inaccurate or incomplete data

  • Erasure: ask us to delete your data in certain circumstances

  • Restriction: ask us to limit how we use your data in certain circumstances

  • Objection: object to certain processing (including some types of marketing/profiling)

  • Data portability: request transfer of certain data to you or another provider

To exercise your rights, contact [email protected].

Complaints

If you’re unhappy with how we handle your data, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

13. Third-party links

Our Site may include links to third-party websites or services (including WhatsApp). If you follow a link to a third party, their own privacy policy will apply.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was most recently changed.

15. Contact us

If you have questions about this policy or your personal data, contact:
Email: [email protected]
Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE