Last updated: August 2026

Tea with Nan (“Tea with Nan”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information.

This Privacy & Cookie Policy explains how we collect, use, store and protect personal information when you visit our website, purchase merchandise, contact us or otherwise interact with Tea with Nan.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, the data controller responsible for your personal information is:

Business / Legal Name: [insert legal business or trader name]
Trading Name: Tea with Nan
Address: [insert business address]
Email: [insert privacy/contact email]

If you have questions about this Privacy Policy or how we use your personal information, please contact us using these details.

2. Personal Information We Collect

Depending on how you interact with the website, we may collect information including:

• your name;
• billing address;
• delivery address;
• email address;
• telephone number;
• order and purchase details;
• products purchased or returned;
• payment transaction information;
• correspondence with us;
• information submitted through contact forms;
• newsletter or marketing preferences;
• IP address;
• browser and device information;
• referring website;
• pages visited and interactions with the website;
• approximate location derived from your IP address; and
• cookie and analytics information.

We do not normally receive or store your complete payment-card details. Card and other electronic payments are generally processed by specialist payment providers.

3. How We Collect Your Information

We may collect information directly from you when you:

• place an order;
• enter information during checkout;
• contact us;
• subscribe to marketing communications;
• create an account, if account functionality is available;
• participate in a promotion or competition; or
• otherwise submit information through the website.

We may also collect information automatically through cookies, analytics technologies, server logs and similar technologies when you browse the website.

Some information may also be received from third parties involved in processing your order, such as payment processors or delivery companies.

4. How We Use Your Information

We may use your personal information to:

• process and fulfil orders;
• take and administer payments;
• arrange delivery;
• communicate with you about an order;
• process cancellations, returns and refunds;
• provide customer support;
• respond to enquiries;
• prevent fraud and protect the security of the website;
• maintain business and accounting records;
• comply with tax, legal and regulatory requirements;
• manage customer accounts;
• improve our website and customer experience;
• understand how visitors use the website;
• measure the effectiveness of our marketing;
• manage promotions or competitions; and
• send marketing communications where permitted.

We will not use your personal information for purposes that are incompatible with those described in this policy unless permitted or required by law.

5. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the activity, we may rely on:

Contract – where processing is necessary to fulfil an order or take steps requested by you before entering into a contract. This includes processing your delivery information and communicating about your purchase.

Legal obligation – where we need to process or retain information to comply with legal requirements, including tax and accounting obligations.

Legitimate interests – where processing is reasonably necessary for our business interests and those interests are not overridden by your rights. This may include website security, fraud prevention, improving our services and certain administrative activities.

Consent – where you have specifically agreed to processing, such as certain marketing activities or the use of non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time.

6. Order and Payment Information

When you purchase from our store, we need certain information to fulfil your order.

This may include your:

• name;
• billing address;
• delivery address;
• email;
• telephone number;
• items ordered; and
• transaction details.

Payment information may be processed directly by third-party payment providers such as [insert Stripe / PayPal / WooPayments or applicable provider].

Those providers process information in accordance with their own privacy policies.

We may receive limited payment information such as confirmation that payment was successful, payment method, transaction identifiers and the last few digits of a payment card.

7. Delivery Information

Where physical products are purchased, we may share relevant personal information with postal services, couriers, fulfilment partners or merchandise suppliers where necessary to deliver your order.

This will generally include information such as:

• recipient name;
• delivery address;
• contact telephone number; and
• email address where required for delivery notifications.

These organisations may process your information as independent controllers or processors depending on the service they provide.

8. Email Marketing

If you subscribe to the Tea with Nan mailing list, we may send you emails relating to:

• new merchandise;
• product launches;
• promotions;
• latest episodes;
• Tea with Nan news; and
• other relevant updates.

Electronic marketing is subject to both data protection law and the Privacy and Electronic Communications Regulations (PECR). ICO guidance states that marketing emails to individuals generally require consent, subject to a limited exception for certain existing customers.

You may unsubscribe at any time by:

• using the unsubscribe link in an email; or
• contacting us directly.

Unsubscribing from marketing will not prevent us from sending transactional communications necessary to fulfil an order.

9. Who We Share Personal Information With

We do not sell your personal information.

We may disclose information where reasonably necessary to organisations including:

• website hosting providers;
• WooCommerce and WordPress service providers;
• payment processors;
• banks and payment networks;
• postal and courier companies;
• merchandise fulfilment providers;
• email marketing platforms;
• website analytics providers;
• IT and security providers;
• accountants and professional advisers; and
• government bodies, regulators or law enforcement authorities where required by law.

We only provide information that is reasonably necessary for the relevant service.

10. International Data Transfers

Some of the third-party services used by our website may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are used where required under UK data protection law.

These safeguards may include transferring information to countries recognised as providing adequate protection or using approved contractual safeguards.

11. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting and regulatory obligations.

Retention periods may vary depending on the type of information.

For example:

Order and transaction records: generally retained for the period necessary to meet accounting, tax and contractual obligations.

Customer correspondence: retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate business records.

Marketing information: retained until you unsubscribe, withdraw consent or we determine that the information is no longer required.

Analytics information: retained according to the retention settings applied within the relevant analytics platform.

Where information is no longer required, we will delete or anonymise it where reasonably practicable.

12. Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping passwords or account credentials confidential where account functionality is available.

Cookies

13. What Are Cookies?

Cookies are small files or pieces of information stored on your computer, phone or other device when you visit a website.

They can be used to remember preferences, maintain shopping-cart functionality, improve website performance, measure website usage and support advertising or marketing.

UK rules concerning cookies and similar technologies are principally contained in PECR, alongside applicable data protection law.

14. How We Use Cookies

Tea with Nan may use cookies and similar technologies for purposes including:

• keeping the website functioning;
• maintaining your shopping basket;
• remembering preferences;
• providing secure checkout functionality;
• protecting against fraud and abuse;
• understanding how visitors use the website;
• measuring website performance;
• measuring advertising effectiveness; and
• supporting social-media, video or other third-party functionality.

Cookies may be set directly by our website or by third-party services incorporated into it.

15. Types of Cookies We May Use

Strictly Necessary Cookies

These cookies are required for the website to operate correctly.

They may be used for:

• shopping baskets;
• checkout;
• security;
• fraud prevention;
• login sessions; and
• remembering cookie-consent choices.

Disabling these cookies may prevent parts of the website from working correctly.

Analytics Cookies

Analytics cookies help us understand how visitors use the website.

They may record information such as:

• pages visited;
• length of visits;
• traffic sources;
• device types;
• interactions with pages; and
• website errors.

For example, we may use services such as Google Analytics if enabled on the website.

Functional Cookies

These cookies enable additional website features or remember your preferences.

They may include functionality relating to:

• embedded videos;
• social-media services;
• customer preferences; and
• enhanced website functionality.

Advertising and Marketing Cookies

Where advertising or remarketing technologies are used, cookies may be used to:

• measure advertising performance;
• understand whether visitors make purchases after seeing advertisements;
• limit how often advertisements are displayed; and
• help deliver more relevant advertising.

Where consent is required, these technologies will not be activated until the appropriate consent has been obtained.

16. Cookie Consent

PECR applies to cookies and similar storage/access technologies, including where the information involved is not itself personal data.

Where required, we will ask for your consent before placing or accessing non-essential cookies on your device.

Strictly necessary cookies may be used without consent where permitted because they are required to provide a service requested by you or for the proper operation of the website.

You should be able to:

• accept optional cookies;
• reject optional cookies; and
• manage your cookie preferences.

The ICO provides specific guidance for organisations on cookies and privacy notices, including the need to explain why cookies are used and how users can make informed choices.

17. Managing Cookies

You can normally manage your cookie preferences through the cookie controls displayed on our website.

You can also configure your browser to:

• block cookies;
• delete existing cookies;
• notify you when a cookie is being placed; or
• restrict particular types of cookies.

Blocking cookies may affect the functionality of the website. In particular, blocking essential e-commerce cookies may prevent products from remaining in your basket or interfere with checkout.

18. Third-Party Content and Cookies

Our website may contain content or functionality provided by third parties, including:

• YouTube;
• Instagram;
• TikTok;
• Spotify;
• payment providers; and
• analytics services.

Interacting with embedded content or social-media features may allow those third parties to set cookies or collect information about your device or interaction.

For example, embedded video and social-network functionality can result in additional cookies being set when users interact with those services.

These third parties operate under their own privacy and cookie policies.

19. Specific Cookies Used on This Website

Before publishing the site, this section should be updated following an actual cookie audit.

A final version could contain a table such as:

Cookie / Service	Purpose	Type	Duration
WooCommerce session cookies	Basket and checkout functionality	Necessary	Session / limited duration
Cookie consent preference	Remembers your privacy choices	Necessary	[insert duration]
Google Analytics	Website usage measurement	Analytics	[insert duration]
YouTube	Embedded video functionality	Functional/Marketing	Provider dependent
Spotify	Embedded podcast/audio functionality	Functional	Provider dependent

The precise cookies should be checked once the final WordPress site, plugins, analytics and embedded services have been configured. GOV.UK’s cookie guidance similarly recommends auditing and categorising the cookies actually used rather than relying on a generic list.

Your Data Protection Rights

20. Your Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• request transfer of your information where applicable;
• withdraw consent where processing is based on consent; and
• complain about how your personal information has been used.

These rights are subject to certain legal conditions and exemptions.

21. Making a Data Protection Request

To exercise a data protection right, contact:

Email: [insert privacy email]

Please provide sufficient information for us to identify you and understand your request.

We may need to verify your identity before responding.

22. Complaints

If you are concerned about how we handle your personal information, please contact us first so that we have an opportunity to resolve the issue.

You may also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

23. Children’s Privacy

Our website and merchandise store are not specifically designed to collect personal information directly from children.

If you are under the age required to enter into a purchase independently, you should ask a parent or guardian to make the purchase on your behalf.

If we become aware that personal information relating to a child has been collected inappropriately, we will take reasonable steps to address the matter.

24. External Links

The Tea with Nan website may contain links to websites operated by other organisations.

This Privacy Policy applies only to our website.

We are not responsible for the privacy practices of third-party websites, and you should review their own privacy policies when visiting them.

25. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes to:

• the website;
• our products and services;
• the technologies we use;
• our third-party providers; or
• applicable law and regulatory guidance.

The most recent revision date will be displayed at the top of this page.

26. Contact

For questions about this Privacy & Cookie Policy or how your personal information is handled, please contact:

Tea with Nan
Legal / Business Name: [insert legal business name]
Email: [insert privacy email]
Address: [insert business address]