Tea Narrative Privacy Policy

Effective Date: January 31, 2026

Thank you for choosing Tea Narrative (hereinafter referred to as “we”). We deeply value the security of your personal information and privacy protection, and commit to complying with major global privacy regulations. When processing your information, we adhere to the principles of “data minimization, clear purpose notification, and end-to-end security assurance.” This policy clearly outlines how we collect, use, store, and protect your personal information, as well as the rights you are entitled to.

Scope of Application

This policy applies to all information processing activities when you access, browse, register, purchase products on this website (including Yixing Zisha clay teapots, tea pets, tea set bundles, etc.), participate in promotional activities, and use related services.

This policy does not apply to the following situations:

• External websites or services accessed through links on this website (such as payment gateways, logistics tracking platforms); please refer to the official privacy statements of third parties for their privacy rules.
• Information collected by third-party advertisers displayed on this website; relevant privacy policies are independently formulated by the advertisers.

Collection and Acquisition of Information

We only collect information necessary to provide products and services, which is divided into the following three categories:

Information You Voluntarily Provide

1. Account and Order Information: Name, email address, phone number, and password provided during registration; shipping address, contact phone number, and payment account-related information (such as the last four digits of a credit card for verification; full card numbers are not stored) provided when placing an order.
2. Customization Service Information: If you choose personalized customization services (such as tea set engraving, pattern customization, etc.), you need to provide customization requirements (such as text content, pattern preferences) and other necessary related information.
3. Activity and Interaction Information: Name, email address, and shipping address provided when participating in website contests or promotional activities (for announcement of winners and delivery of prizes); problem descriptions, product photos, logistics exception certificates, etc., submitted through customer service inquiries or after-sales feedback.
4. Subscription and Communication Information: Email address provided when subscribing to newsletters; content and related information sent when communicating with us through contact forms or emails.

Automatically Collected Information

1. Device and Technical Information: IP address, browser type, device model, and operating system version at the time of access; web browsing history (such as viewed tea set categories, page stay time, visit frequency), referring website or search keywords, and visit date and time.
2. Cookies and Tracking Technologies: Cookies are used to record your login status, shopping cart content, and browsing preferences (such as commonly used tea set sizes, style preferences) to optimize page loading speed and recommendation accuracy. You can disable non-essential Cookies in your browser settings, but this may affect your shopping experience (such as inability to save shopping cart items).
3. Location-Related Information: If you enable device location permissions, we only use it to display information about nearby logistics warehouses or customs clearance ports, and do not store precise geographic location data.

Information Shared by Third Parties

1. Payment service providers (such as PayPal, Stripe): We only receive your basic payment verification information to complete transactions and do not store full payment card information.
2. Cross-border logistics service providers (such as DHL, FedEx): To implement order delivery and tracking, we will share necessary information such as your shipping address and contact phone number, and the logistics providers will comply with their own privacy policies.

Purposes of Information Use

1. Core Service Support: Process order payments, prepare and ship products (including production of customized products), arrange logistics and delivery, and resolve after-sales issues (such as returns, exchanges, and product quality inquiries).
2. Experience Optimization: Recommend suitable tea set products based on your browsing history and purchase preferences (such as recommending matching tea pets for users who purchased Yixing Zisha clay teapots); analyze data such as page loading speed and product display clarity to continuously improve website functions and service quality.
3. Security and Compliance: Verify account identity, detect abnormal orders (such as preventing fraudulent transactions), and meet compliance requirements such as customs clearance and tax declaration in target countries/regions.
4. Necessary Notifications: Inform you of important information such as order status (e.g., “Your product has been shipped”), logistics updates, product stock delays, and privacy policy changes via email or SMS.
5. Marketing and Activities: With your explicit consent, send you newsletters, new product previews, and promotional activity notifications (such as limited-time discounts); you can unsubscribe at any time.

Restrictions on Information Sharing and Disclosure

• Prohibition of Data Selling: We will never sell or rent your personal information to third parties in any form (including commercial purposes).
• Principle of Limited Sharing: We only share information with third parties necessary to complete services (such as payment processors, logistics providers, and website hosting services), and such third parties must comply with the following obligations:
  • Use information only for the purpose of performing services and immediately terminate access rights after services are completed.
  • Implement information security protection measures no less than those of this website.
• Situations for Legal Disclosure: We will only disclose your information in the following circumstances:
  • Obtain your explicit written consent.
  • Respond to legal requirements such as court subpoenas and customs compliance inspections.
  • Protect the personal and property safety of users of this website (such as handling fraudulent orders and responding to security threats).

Data Storage and Cross-Border Transmission

Storage Period

1. Account information: Deleted or anonymized within 6 months after account cancellation.
2. Order and customization data: Retained for 2 years after transaction completion (for after-sales traceability and compliance with tax declaration requirements in target markets).
3. Subscription and marketing data: Retained until you unsubscribe; only the subscription cancellation date and confirmation records are kept after unsubscription.
4. Cookies data: Non-essential Cookies are automatically cleared when you close your browser.

Cross-Border Transmission

Your information is stored in international server regions that comply with the privacy regulations of target markets (such as EU-compliant and US-compliant data centers), and the transmission process is secured using SSL+AES-256 encryption technology.

If cross-border transmission of EU user data is involved, we will ensure that the data protection standards meet GDPR requirements through a combination of measures including “storing data in compliant regions + encrypted transmission + strict access control.”

Your Rights and Exercise Methods

Pursuant to regulations such as GDPR and CCPA/CPRA, you are entitled to the following rights:

1. Right of Access and Correction: Log in to the “Personal Center” of your account to view and modify your personal information and order history; to correct customization service-related data, please contact customer service.
2. Right to Erasure: If your information is no longer necessary for services, you can send an email to [email protected] to request deletion, and we will respond with the processing result within 15 working days.
3. Right to Data Portability: You can request to obtain your order history and basic account information in a structured, machine-readable format (such as Excel spreadsheet) to facilitate migration to other platforms. We will respond to your request and complete information collation within 15 working days.
4. Right to Withdraw Consent: You can disable Cookies through browser settings or click the “Unsubscribe” link in marketing emails to stop receiving promotional information at any time; withdrawing consent will not affect the validity of information processing based on prior legal consent.
5. Right to Lodge a Complaint: If you have objections to our privacy protection measures, please contact customer service first. If no agreement is reached, you have the right to complain to the data protection authority of your country/region.

Protection of Minors

This website does not provide services to minors under the age of 13. If minor information is collected inadvertently, guardians can contact us to request immediate deletion.

Information Security Assurance

1. Technical Protection: Adopt technologies such as SSL encrypted transmission, server firewalls, and anonymized data storage to prevent information leakage, tampering, or loss.
2. Management Specifications: Only authorize personnel in positions such as production, customer service, and logistics to access necessary information, and conduct regular privacy protection training and security audits.
3. Emergency Response: In the event of a data breach, we will notify you via email within 72 hours, report to relevant regulatory authorities, and take remedial measures to minimize the impact.

Explanation of Cookies and Tracking Technologies

• Necessary Cookies: Ensure the normal operation of basic website functions (such as login and shopping cart) and cannot be disabled.
• Functional Cookies: Record your preference settings (such as language and size selection) to improve usability.
• Analytical Cookies: Analyze website usage through tools such as Google Analytics to optimize services (you can opt out of Google Analytics tracking via https://tools.google.com/dlpage/gaoptout).

Policy Updates and Notifications

1. We may update this policy in response to revisions to privacy regulations or changes in business models (such as adding AI product recommendation functions). After the update, it will be posted at the bottom of the website for 30 days.
2. In case of major changes (such as adjustments to data sharing rules), we will separately notify you via your registered email. Your continued use of this website’s services will be deemed acceptance of the updated policy.

Contact Information

If you have any questions about this privacy policy, need to exercise relevant rights, or submit a complaint, you can contact us through the following methods:

• Email: [email protected]
• Contact Form: Submit an inquiry through the “Contact Us” page on the website

We will respond to your request within 12 hours and make every effort to protect your privacy rights.