Privacy policy

Last Updated: December 31, 2025

Orient Cha operates this store and website to provide you, the customer, with a curated shopping experience (the "Services"). Orient Cha is powered by Shopify, which enables us to provide these Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described herein. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall control regarding personal information processing.

---

1. Personal Information We Collect or Process

When we refer to "personal information," we mean information that identifies or can reasonably be linked to you. We may collect or process the following categories of information, depending on your interactions with the Services:

• Contact Details: Including your name, address, billing address, shipping address, phone number, and email address.
• Financial Information: Including payment card information (credit/debit cards), financial account numbers, transaction details, and payment confirmations.
• Account Information: Including your username, password, security questions, and saved preferences.
• Transaction Information: Including items viewed, cart activity, wishlists, purchases, returns, exchanges, or cancellations.
• Communications: Any information you provide when contacting us, such as customer support inquiries.
• Device & Usage Information: Including IP address, browser type, network connection details, and data on how/when you interact with or navigate our Services.

2. Personal Information Sources

We collect information from the following sources:

• Directly from You: When you create an account, place an order, or communicate with us.
• Automatically: Through cookies and similar technologies when you visit our website or use our Services.
• Service Providers: From third parties (like Shopify or payment processors) who collect information on our behalf to enable technology.
• Partners: From other third-party marketing or logistics partners.

3. How We Use Your Personal Information

We use your personal information for the following specific purposes:

---

4. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate business purposes, including:

• Service Providers: We share data with Shopify and other vendors who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, and shipping).
• Business and Marketing Partners: We work with partners to provide personalized advertising based on your online activity. You may have the right to opt-out of targeted marketing depending on your jurisdiction.
• Your Consent: When you direct or request us to share information, such as through social media widgets or login integrations.
• Corporate Affiliates: Within our corporate group to ensure service consistency.
• Legal Obligations & Business Transfers: In connection with a merger, bankruptcy, or to comply with legal requests (such as subpoenas), and to protect the rights and safety of Orient Cha and our users.

5. Relationship with Shopify

Our Services are hosted by Shopify. Shopify collects and processes your personal information to provide and improve the Services. Please note:

• Data Transmission: Information you submit will be transmitted to and shared with Shopify and may be stored in countries other than your own.
• Enhanced Features: We use Shopify’s enhanced features to grow our business. Shopify may use personal information from your interactions with our store and other merchants to provide these features.
• Privacy Rights: Shopify is responsible for processing data for these specific purposes. To learn more or exercise your rights, please visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

6. Third-Party Websites and Links

The Services may contain links to websites operated by third parties. If you follow these links:

• We are not responsible for the privacy or security of third-party sites. Please review their individual policies.
• Information shared on public venues (like social media) may be viewable by other users without limitation.
• The inclusion of a link does not imply endorsement of the third-party content or owners.

7. Children's Data

The Services are not intended for children. We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request its deletion. As of the effective date, we do not knowingly "sell" or "share" personal information of individuals under 16 years of age.

8. Security and Retention

Security: While we implement safeguards, please be aware that no security measures are "perfect" or "impenetrable." We cannot guarantee the security of information during transit. We recommend avoiding unsecure channels for sensitive data.

Retention: We retain your personal information only as long as necessary to maintain your account, provide Services, comply with legal obligations, resolve disputes, or enforce our contracts and policies.

---

9. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights may not be absolute, but we respect your choices.

• Right to Access / Know: You may request access to the personal information we hold about you.
• Right to Delete: You may request that we delete personal information we maintain about you.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right of Portability: You may request a copy of your data and ask us to transfer it to a third party in certain circumstances.
• Right to Opt-out of Targeted Advertising/Sale: You may have the right to opt out of the "sale" or "share" of your data for targeted advertising. You can exercise this right [Insert Opt-Out Link Here].

Global Privacy Control (GPC): If you visit our website with the GPC signal enabled in your browser, we automatically treat this as an opt-out request for that device/browser. Learn more at https://globalprivacycontrol.org/.

Managing Communication Preferences

You may opt out of receiving promotional emails at any time using the unsubscribe link provided in our emails. We may still send you essential non-promotional emails regarding your account or orders.

UK & EEA Residents (Additional Rights)

If you reside in the UK or European Economic Area, you may have the right to object to processing, restrict processing, and withdraw consent where applicable.

You may exercise any of these rights by contacting us using the details below. We will not discriminate against you for exercising your rights.

---

10. Complaints

If you have complaints about how we process your personal information, please contact us first. You may have the right to appeal our decision or lodge your complaint with your local data protection authority.

11. International Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in (e.g., to Shopify servers, as mentioned above). We use recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, to ensure adequate protection for your data during international transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this website and update the "Last updated" date at the top of the page. We encourage you to review this policy periodically.

---

13. Contact Information

Should you have any questions about our privacy practices, this Privacy Policy, or wish to exercise any of your rights, please contact us. We are the data controller of your personal information.