Privacy policy

Effective date: May 15, 2026

This Privacy Policy explains how Nepali Tea Traders, LLC ("Nepali Tea Traders," "we," "us," or "our") collects, uses, discloses, and protects information about you when you visit nepaliteatraders.com (the "Site"), purchase our products, sign up for marketing, or otherwise interact with us online. We are an online-only store based in Saugus, Massachusetts, USA. If you have questions about this policy, email contact@nepaliteatraders.com.

1) Information We Collect

Information you provide

  • Contact details: name, email, phone, billing and shipping addresses
  • Account credentials: email and password (passwords are stored hashed)
  • Order and payment details: items purchased, transaction identifiers, gift recipient info if applicable
  • Support and inquiry messages: support emails, survey responses, wholesale applications (business name, role, address, sourcing needs)
  • Reviews and feedback: product reviews and ratings you submit through our review platform

Information collected automatically

  • Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referring/exit pages, timestamps, click patterns
  • Cookies, pixels, and similar technologies: see Section 4 below for details

Information from third parties

  • E-commerce and payment providers: Shopify, Shopify Payments, PayPal
  • Email marketing provider: Klaviyo (for newsletter signups, abandoned cart, transactional and marketing emails)
  • Review platform: Stamped.io (for product reviews and post-purchase feedback)
  • Fulfillment and shipping partners: USPS, UPS
  • Analytics and marketing platforms: Shopify Analytics, Google Analytics, and similar tools

Payment card data: We do not store full payment card numbers. Payments are processed by third-party providers (Shopify Payments, PayPal) who handle card data under their own security standards.

2) How We Use Your Information

  • Process and fulfill orders, returns, and customer support requests
  • Send transactional emails (order confirmation, shipping notifications, return updates)
  • Provide account services and personalize your shopping experience
  • Send marketing communications where permitted (you can unsubscribe anytime via the link in any marketing email)
  • Process and respond to wholesale applications and partner inquiries
  • Request reviews and post-purchase feedback
  • Protect our Site, prevent fraud, and enforce our Terms of Service
  • Analyze and improve our Site, products, content, and marketing performance
  • Comply with legal, tax, and regulatory obligations

3) How We Share Information

We share information with service providers that perform services on our behalf — including e-commerce hosting, payment processing, shipping and fulfillment, email marketing, review collection, analytics, and site infrastructure. These providers are authorized to use your information only as necessary to perform services for us.

We may also share information:

  • To comply with applicable law, legal process, or to protect our rights, property, or users
  • To investigate or prevent fraud, security incidents, or technical issues
  • In connection with a business transaction (e.g., merger, acquisition, sale of assets)
  • With your consent or at your direction

We do not sell personal information for money. However, we may "share" (as defined by California law) identifiers and internet activity with advertising and analytics partners for cross-context behavioral advertising. See Section 5: Your Privacy Choices & Rights below for how to opt out.

4) Cookies, Analytics & Advertising

We use cookies and similar technologies to operate the Site, remember your preferences, measure performance, and (where permitted) deliver relevant advertising. These include:

  • Essential cookies: required for cart functionality, secure checkout, and account login
  • Analytics cookies: help us understand how visitors use the Site so we can improve it
  • Marketing/advertising cookies: used to measure ad performance and (where permitted) deliver personalized advertising

Your controls

  • Browser settings: most browsers let you block or delete cookies through their privacy settings
  • Email opt-out: click "unsubscribe" at the bottom of any marketing email
  • Ad choices: use opt-out tools from the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA) at youradchoices.com
  • Global Privacy Control (GPC): where detected, we treat GPC signals as a request to opt out of "sale/share" in applicable jurisdictions

5) Your Privacy Choices & Rights

Depending on where you live, you may have rights to access, correct, delete, opt out of "sale/share" or targeted advertising, object to or restrict processing, and request data portability.

U.S. residents (including California — CCPA/CPRA)

  • Access: request a copy of the personal information we have about you
  • Deletion: request that we delete your personal information, subject to legal exceptions
  • Correction: request correction of inaccurate information
  • Opt-out of "sale/share": opt out of cross-context behavioral advertising (see "How to submit a request" below)
  • Non-discrimination: we will not discriminate against you for exercising your privacy rights

EEA / UK residents (GDPR / UK GDPR)

Our legal bases for processing personal information include:

  • Contract: to fulfill orders and provide customer service
  • Legitimate interests: for site security, analytics, fraud prevention, and improving our products and services
  • Consent: where required, such as for non-essential cookies and certain marketing communications
  • Legal obligations: to comply with tax, accounting, and other laws

You may object to processing based on legitimate interests and withdraw consent where applicable. You also have the right to lodge a complaint with your local data protection authority.

How to submit a privacy request

Email contact@nepaliteatraders.com with the subject line "Privacy Request". Include:

  • The right you wish to exercise (access, deletion, correction, opt-out, etc.)
  • Your full name and email address used with our store
  • Any other information needed to verify your identity

We will acknowledge your request within a reasonable timeframe and provide a substantive response within the timeframe required by applicable law. We will verify your identity before fulfilling requests. You may designate an authorized agent to act on your behalf where permitted by law.

Do Not Sell or Share My Personal Information

To opt out of "sale" or "share" of your personal information under California law, email contact@nepaliteatraders.com with the subject "Do Not Sell or Share", or use the cookie preferences banner on our Site if available. We also honor Global Privacy Control (GPC) browser signals where applicable.

6) Data Retention

We retain personal information only as long as needed for the purposes described in this policy, including:

  • While your account is active
  • To fulfill orders, process returns, and provide customer support
  • To meet legal, tax, and accounting obligations (typically 7 years for transaction records)
  • To resolve disputes and enforce our agreements

When information is no longer needed, we delete or anonymize it.

7) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data we process. Our Site is hosted on Shopify, which uses industry-standard SSL encryption for data in transit. Payment information is handled by PCI-compliant third-party processors.

However, no method of transmission or storage is 100% secure. If we become aware of a security incident that affects your personal information, we will notify you in accordance with applicable law.

8) Children's Privacy

Our Site is not directed to children under 13 (or under 16 in certain regions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact contact@nepaliteatraders.com and we will delete it.

9) International Users

If you access the Site from outside the United States, your information may be processed in the U.S., where data protection laws may differ from those in your country. Where required by law, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border data transfers.

10) Public Areas & Third-Party Links

Information you post in public areas (such as blog comments or product reviews) may be read, collected, and used by others. Please use caution when sharing personal information publicly.

Our Site may link to third-party websites, social media platforms, and services. Their privacy practices are governed by their own policies, not ours. We encourage you to read the privacy policies of any third-party sites you visit.

11) Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. If we make material changes, we will post the updated policy on this page and update the effective date at the top.

We encourage you to review this policy periodically to stay informed about how we protect your information.

12) Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

We respond to privacy inquiries within a reasonable timeframe as required by applicable law.