Privacy Policy

The Teabreak Project is run by Jenny Badger, trading as The Teabreak Project.

Email: jenny@theteabreakproject.co.uk

For data-protection purposes, Jenny Badger trading as The Teabreak Project is the controller of your personal information.

We collect information when you shop with us, join a membership, sign up to our emails, contact us or otherwise interact with Teabreak.

This may include:

• Your name, email address, postal address and phone number
• Order, payment and delivery information
• Membership details, including your drink and treat preferences and birthday
• Gift recipient details, gift messages and delivery information supplied by the purchaser
• Details provided for corporate orders, including recipient information supplied by the organisation placing the order
• Messages, enquiries and collaboration requests you send us
• Email-marketing preferences and how you interact with our emails
• Information you share in the Hummingbird Community or when you tag or mention us on social media
• Reviews you leave through Google, Facebook or another review platform
• Technical information about how you use our website, where you have consented to relevant cookies or tracking

We do not receive or store your full card details. Payments are handled securely by Stripe or PayPal.

We use your information to:

• Process, pack, deliver and manage your order or membership
• Manage your account, preferences, referrals, account credit and member benefits
• Send essential service communications, such as order confirmations, payment updates, delivery information and important membership information
• Send birthday treats or other membership benefits where relevant
• Respond to questions, requests and complaints
• Manage corporate, supplier, stockist, affiliate and collaboration enquiries
• Keep business and tax records
• Protect the business and our customers from fraud or misuse
• Improve our website, products, services and customer experience
• Send marketing emails where you have opted in, or where we are otherwise permitted to do so by law
• Show relevant Teabreak advertising on platforms such as Meta, where appropriate permissions have been given
• Understand the performance of our website and advertising, where you have consented to analytics or marketing cookies

Data-protection law requires us to have a reason for using personal information. Depending on the situation, we rely on:

• Contract — where we need your information to fulfil an order, provide a membership or manage your account.
• Legal obligation — where we need to keep records for tax, accounting or other legal requirements.
• Legitimate interests — where we need to run and protect the business sensibly, such as responding to enquiries, preventing fraud, improving our services and handling collaboration requests.
• Consent — for newsletter marketing, optional cookies and certain advertising or tracking activity.

You can unsubscribe from marketing emails at any time using the link in the email or by contacting us.

Essential service and membership emails are separate from marketing emails. For example, we may need to email a customer about their payment, box, account or membership benefits even if they have chosen not to receive general marketing.

If you sign up through our website newsletter form, we will use double opt-in. This means we will ask you to confirm your email address before adding you to our marketing list.

We may also send marketing to existing customers where they have opted in, or where the law allows us to use the customer “soft opt-in” for similar Teabreak products or services. Every marketing email includes an easy way to unsubscribe.

We use Klaviyo to manage marketing emails, welcome flows, birthday messages and audience segments. We may also use customer information to create or measure advertising audiences through Meta platforms, where permitted.

We do not sell your personal information or share it with other businesses for their own marketing.

If you tag, mention or publicly share Teabreak content on social media, we may reshare it using the platform’s normal sharing tools.

Posts made in the private Hummingbird Community are treated more carefully. If we would like to share something outside the group, we will either keep it anonymous or ask for your permission to share it in full.

If you leave a review through Google, Facebook or another review platform, that platform may display your name and review publicly according to its own settings and policies.

We only share information where it is needed to run Teabreak properly. This may include trusted service providers such as:

• Subbly, which runs our website, shop, checkout and membership system
• Stripe and PayPal, which process payments
• Royal Mail and other delivery providers, which deliver orders
• Klaviyo, which sends email marketing and manages relevant customer communication
• Microsoft, including Microsoft Forms and OneDrive, which we use for business administration and form responses
• Xero and relevant accounting support, for bookkeeping and tax records
• Meta, including Facebook and Instagram, for social media, advertising and advertising measurement
• Google, including Google Analytics 4 and Google Reviews
• Metricool, which we use for website-visit reporting
• Trusted people who help us run Teabreak, but only where they genuinely need access to do their work

These providers are required to handle information appropriately and securely.

Some of these providers may process information outside the UK. Where this happens, we use providers that offer appropriate safeguards for international data transfers.

We only keep information for as long as we need it.

• Order, tax and accounting records are normally kept for six years.
• Membership and account information is normally kept for six years after your last transaction or account activity.
• Newsletter information is kept until you unsubscribe. We may retain a minimal record afterwards so we can make sure we do not accidentally add you back to marketing.
• General enquiries, supplier pitches and collaboration requests are normally kept for up to 24 months.
• Corporate enquiry information is normally kept for up to 24 months, unless it becomes part of an active customer relationship.

We may keep information longer where required by law or where it is needed to resolve a dispute.

Our website uses strictly necessary technologies to make it work properly.

We also use optional analytics and marketing technologies, including Google Analytics 4 and Metricool for website-visit reporting, plus Meta/Facebook Pixel and Klaviyo's onsite script for marketing activity. These help us understand how people use the site and whether our marketing is working. Klaviyo's onsite script also powers the newsletter pop-up.

We will ask for your permission before placing non-essential cookies or similar technologies on your device. You can change your preferences at any time through our cookie settings.

For more detail, please see our Cookie Policy.

You have rights over your personal information, including the right to:

• Ask for a copy of the information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete information in certain circumstances
• Ask us to restrict or object to certain uses of your information
• Withdraw consent where we rely on consent
• Ask for your information in a portable format where applicable
• Complain to the Information Commissioner’s Office if you are unhappy with how we have handled your information

To exercise any of these rights, email jenny@theteabreakproject.co.uk.

You can also contact the Information Commissioner’s Office at ico.org.uk.

Our website and memberships are intended for adults. We do not knowingly collect personal information directly from children.

We may update this policy from time to time, particularly if the way we use information or the services we use changes.

The latest version will always be published on this page.