Privacy Policy
Effective Date: 28 July 2025
Artisan Specialty Tea Trading LLC (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice (“Notice”) describes how we collect, use, disclose, transfer, and store your personal data in accordance with applicable data protection legislation, including the United Arab Emirates Personal Data Protection Law (PDPL), and, where relevant, the European Union General Data Protection Regulation (GDPR).
This Notice applies to the global website avantcha.com (the “Site”), which offers and markets AVANTCHA products operated and distributed by Artisan Specialty Tea Trading LLC. Please note that AVANTCHA is a trademark owned by AVANTCHA Switzerland GmbH.
By accessing or using the Site, you acknowledge that you have read, understood, and agree to this Notice. If you do not agree, please do not use the Site.
1. Scope of this Notice
This Notice governs the collection, use, storage, sharing, and other processing of personal data by Artisan Specialty Tea Trading LLC in connection with the Site and any related online or offline interactions you may have with us. It covers personal data collected from you through:
- Your use of the Site and its features
- Orders and purchases, including guest checkout or through a registered account
- Communications with our customer service
- Participation in marketing communications, promotions, or surveys
- Interactions with our online advertisements, social networks, or third-party platforms
This Notice may be supplemented by other privacy statements relevant to specific promotions or services, which will be provided to you where appropriate.
2. Sources of Personal Data
We collect personal data from or about you through various sources, including:
- Direct interactions (for example, when you place an order, create an account, contact us, or subscribe to marketing communications)
- Automated technologies (such as cookies, web beacons, and similar tools when you browse our Site)
- Third-party sources (for example, social login providers like Google, or marketing and advertising partners)
We may combine these sources to ensure the accuracy and completeness of our records.
3. Categories of Personal Data Collected
Depending on your interactions with us, we may collect the following categories of personal data:
- Identity and contact data: name, title, billing and shipping addresses, email address, phone number
- Account data: username, encrypted passwords, login tokens, security question answers
- Transaction and payment data: transaction history, partial card numbers, payment tokens (full card details are not stored and are processed securely by our payment providers)
- Order details: products ordered, delivery instructions, preferences
- Technical data: IP address, browser type, operating system, device identifiers, diagnostic logs
- Usage data: browsing activity, referring/exit pages, pages viewed, session information
- Marketing preferences: opt-ins or opt-outs for newsletters, promotional engagement
- Social login data: information you choose to share when using Google sign-in
- Location data: approximate location derived from IP address or shipping address
We do not intentionally collect sensitive personal data (such as religious beliefs, health data, or biometric data) and kindly request that you do not provide it.
4. Purposes and Legal Bases for Processing
We process your personal data only where we have a valid legal basis under applicable data protection laws. The main purposes and their legal bases include:
| Purpose | Legal Basis |
|---|---|
| Fulfilling and delivering orders | Contract performance |
| Account creation, maintenance, and verification | Contract performance |
| Providing customer service | Legitimate interests |
| Sending marketing communications | Consent |
| Personalizing product recommendations or offers | Legitimate interests / Consent |
| Securing the Site and preventing fraud | Legitimate interests |
| Complying with laws, regulations, and lawful enforcement requests | Legal obligation |
Where processing is based on your consent (for example, for marketing), you have the right to withdraw consent at any time.
5. Cookies and Similar Tracking Technologies
We use cookies and related technologies to operate our Site, enhance your browsing experience, and provide relevant marketing and analytics.
Cookies are small text files stored on your device. They serve various functions, including:
- Strictly Necessary Cookies: required for the Site to function, such as keeping your shopping cart active or remembering your account login session
- Performance and Analytics Cookies: to measure and analyse how you interact with the Site, to improve usability and performance
- Marketing Cookies: to help us deliver advertising relevant to you and measure campaign effectiveness
Examples of third-party tracking technologies used on our Site include:
- Google Analytics 4
- Meta Pixel
- TikTok Pixel
- Mouseflow
- Google Ads Conversion Tracking
Depending on your location, when you visit our Site for the first time, you will be shown a cookie banner where you can manage your preferences and choose to accept or reject non-essential cookies. You can also control cookies through your browser settings at any time.
If you disable some cookies, certain features of the Site may not function properly.
6. Data Sharing and Disclosure
We do not sell your personal data. However, we may share personal data with third parties under strict contractual terms, only for the purposes described in this Notice. These third parties include:
- Payment processors: Stripe (for secure payment processing)
- Shipping and delivery partners: DHL, Quiqup, Carriyo and other courier companies
- Marketing tools: Emarsys (for newsletter and promotional mailings)
- Analytics and advertising partners: Google, Meta, TikTok, Mouseflow
- Infrastructure and technical partners: Cloudflare, Loqate, Google Tag Manager, Google Search Console, Zapier
In limited circumstances, we may also disclose your data:
- To regulators, law enforcement, or courts if legally required
- To legal advisors or auditors in the context of protecting our legal interests
- In the event of a merger, business transfer, or acquisition, under appropriate confidentiality safeguards
7. International Transfers of Personal Data
We may transfer your personal data to countries outside your place of residence, including the United States and countries in the European Economic Area. In such cases, we implement appropriate legal safeguards, such as Standard Contractual Clauses approved by relevant data protection authorities, to ensure your personal data remains protected.
8. Data Retention
We retain your personal data only as long as necessary for the purposes described in this Notice, or as required to meet legal, accounting, or regulatory obligations. In particular:
- Account data will be retained until you request deletion
- Order and transaction data will be retained for legal, tax, and compliance requirements
- Marketing data will be retained until you withdraw your consent
If you exercise your right to delete your account, we will retain only the data strictly necessary to comply with legal obligations or resolve disputes.
9. Data Security
We maintain robust administrative, technical, and physical safeguards to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure. These measures include:
- TLS/SSL encryption of data in transit
- Secure servers protected by modern firewall technologies
- PCI DSS-compliant payment processing via Stripe
- Role-based access controls and staff confidentiality agreements
- Ongoing system monitoring and security reviews
Despite these safeguards, no data transmission over the internet is completely secure. You are responsible for protecting your login credentials and promptly notifying us of any suspected unauthorized activity.
10. Your Rights
You have clear and enforceable rights under applicable data protection laws, including the United Arab Emirates Personal Data Protection Law (PDPL) and, for users located in the European Economic Area, the General Data Protection Regulation (GDPR). These rights include:
- Right of Access: You have the right to request confirmation of whether we process your personal data, and to obtain a copy of the personal data we hold about you.
- Right of Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right of Erasure: You may request the deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or you withdraw consent.
- Right to Restrict Processing: You have the right to request that we temporarily or permanently stop processing all or some of your personal data, under certain conditions.
- Right to Object: You have the right to object to our processing of your personal data based on our legitimate interests, including profiling for marketing purposes.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal.
- Right to Lodge a Complaint: You have the right to file a complaint with your local supervisory data protection authority if you believe your rights have been infringed.
You can exercise any of these rights at any time by contacting us at customercare@avantcha.com. We will respond to all valid requests within one month, or within any shorter period required by local laws. Where legally permitted, we may extend this period for complex requests but will inform you of any delay and the reasons behind it.
11. Children’s Privacy
Our Site and products are intended for adult customers. We do not knowingly collect personal data from children under the age of 18. If we become aware that personal data has been collected from a minor without appropriate consent, we will delete it. Parents or legal guardians who believe a child’s data has been submitted to us may contact us to request deletion.
12. Definitions
For the purposes of this Notice, the following definitions apply:
- Personal Data: any information relating to an identified or identifiable natural person.
- Processing: any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
- Data Subject: the individual to whom the Personal Data relates.
- Controller: the entity that determines the purposes and means of processing Personal Data.
- Processor: any entity that processes Personal Data on behalf of the Controller.
- Consent: a freely given, specific, informed and unambiguous indication of a Data Subject’s wishes, signifying agreement to the processing of their Personal Data.
- Cookies: small text files or similar technologies stored on a user’s device to gather information about browsing behavior.
- Third Party: any person or organization other than the Data Subject, the Controller, or Processor.
- Applicable Law: data protection or privacy legislation relevant to the jurisdictions in which Artisan Specialty Tea Trading LLC operates, including the UAE Personal Data Protection Law and, where applicable, the EU GDPR.
13. Contact Information
If you have any questions, concerns, or wish to exercise your rights under this Notice, please contact:
Artisan Specialty Tea Trading LLC
Unit 12, Kunooz 6 St, Al Quoz Industrial Area 1
Dubai, United Arab Emirates
License number: 803469
Email: customercare@avantcha.com
We reserve the right to modify this Notice at any time to reflect changes in legal requirements or business practices. Updated versions will be posted on this page with a new effective date. Please review this Notice periodically.
