Privacy Policy

At Golden Steep, we respect your privacy and are committed to protecting your personal information. This policy outlines how we collect, use, store, and safeguard your data when you interact with our rare tea curation services.

Last updated: December 12, 2025

Our Commitment to Your Privacy

We understand that when you share information with us regarding your interest in rare tea collections, you're entrusting us with details that matter to you. We treat this responsibility seriously and have implemented measures to ensure your data remains secure and is used only in ways you'd expect and approve.

This policy applies to all information collected through our website, email communications, and any other interactions you have with Golden Steep.

Information We Collect

Information You Provide Directly

When you contact us or engage with our services, you may provide:

• Contact Details: Name, email address, and any other information you choose to share in inquiry forms or correspondence
• Collecting Interests: Details about your tea preferences, collecting goals, and areas of interest when you inquire about our services
• Communication Content: Information contained in messages you send us through our contact forms or email

Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical Information: IP address, browser type, operating system, and device information
• Usage Data: Pages visited, time spent on pages, links clicked, and navigation paths through our site
• Cookie Information: Data stored through cookies and similar technologies, as detailed in our Cookie Policy

Information from Third Parties

We may receive information from:

• Analytics Services: Aggregated data about website usage and visitor behavior from analytics platforms
• Marketing Platforms: Information related to marketing campaigns and email engagement

How We Use Your Information

We use the information we collect for specific, legitimate purposes:

Communication and Service Delivery:

To respond to your inquiries, provide information about our rare tea offerings, and facilitate your engagement with our curation services

Website Improvement:

To analyze how visitors interact with our site and make improvements to enhance user experience and content relevance

Marketing Communications:

To send information about our services, rare tea availability, and educational content, only with your consent or where legally permitted

Legal Compliance:

To comply with applicable laws, regulations, and legal processes

Security and Fraud Prevention:

To protect our website, services, and users from security threats and fraudulent activities

Legal Basis for Processing

We process your personal information based on the following legal grounds:

→ Consent: When you provide explicit consent for specific processing activities, such as marketing communications
→ Contract Performance: When processing is necessary to provide services you've requested
→ Legitimate Interests: When we have legitimate business interests that don't override your privacy rights
→ Legal Obligations: When we must process information to comply with legal requirements

How We Share Your Information

We respect the confidential nature of our relationships with collectors and enthusiasts. We share your information only in limited circumstances:

Service Providers

We work with trusted third-party service providers who assist with website hosting, email communications, analytics, and payment processing. These providers are contractually obligated to protect your information and use it only for the services they provide to us.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Legal Requirements

We may disclose your information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights or the safety of others.

With Your Consent

We may share your information with other parties when you've given us explicit permission to do so.

How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information:

Technical Safeguards

• Encryption of data in transit and at rest
• Secure server infrastructure
• Regular security assessments
• Firewall protection and intrusion detection

Organizational Measures

• Limited access to personal data
• Employee confidentiality agreements
• Regular staff training on data protection
• Incident response procedures

While we strive to protect your personal information, no method of transmission or storage is completely secure. We encourage you to use caution when sharing sensitive information online.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Retention periods vary based on:

• The nature of the information and how it's used
• Legal, accounting, or reporting requirements
• Your consent and any preferences you've expressed
• Whether there's an ongoing relationship with us

When information is no longer needed, we securely delete or anonymize it according to our data retention schedule.

Your Privacy Rights

You have several rights regarding your personal information:

Right to Access

Request a copy of the personal information we hold about you

Right to Rectification

Request correction of inaccurate or incomplete personal information

Right to Erasure

Request deletion of your personal information in certain circumstances

Right to Data Portability

Receive your data in a structured, commonly used format

Right to Object

Object to certain types of processing, including direct marketing

Right to Restrict Processing

Request limitation on how we process your information

Right to Withdraw Consent

Withdraw consent for processing at any time where consent is the legal basis

To exercise any of these rights, please contact us using the details provided at the end of this policy. We'll respond to your request within the timeframe required by applicable law.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided below. We will process your request promptly.

Children's Privacy

Our services are intended for adults interested in rare tea collection and curation. We do not knowingly collect personal information from individuals under the age of 18. If you believe we've inadvertently collected information from a minor, please contact us immediately so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

Updates to This Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make significant changes, we'll update the "Last updated" date at the top of this page.

We encourage you to review this policy regularly to stay informed about how we protect your information. Continued use of our services after changes have been posted constitutes acceptance of the updated policy.