Privacy & Cookie Policy
We collect as little as we can, we tell you plainly what we hold, and we never sell your data. This page explains what we gather when you shop with us or join as a member, why, and the choices you have.
01 Who we are
Cultever ("we", "us", "our") is an organic botanical tea brand based in Surrey, United Kingdom. We are the data controller for the personal information described in this policy. For any privacy question, contact hello@cultever.com.
02 What we collect
Depending on how you use the site, we may collect:
- Your name and email address — to create your account, confirm orders and send delivery updates.
- Delivery address and phone number — to ship your order and let the carrier reach you.
- Order and subscription history — what you bought, renewal dates, and your Protocol Credits balance.
- Payment confirmation — we never see or store your full card details; these go directly to our payment providers.
- Referral data — your referral code and the code of whoever referred you, so we can credit referrals.
- Quiz responses (if you take the ritual quiz) — to recommend a blend.
- Reviews and photos you choose to submit about a product.
- Basic usage data — pages viewed, what you added to your basket, and how you arrived, via the cookies described in section 5.
- A one-way hash of your email address — if, and only if, you have accepted advertising cookies. This is an irreversible scramble sent to Meta, TikTok or Google so they can recognise an existing customer without us ever handing over your actual email.
03 Why we use it & our legal basis
Under the UK GDPR, we rely on the following bases:
- Contract — to take payment, fulfil your order, manage your subscription and handle returns.
- Consent — to send you marketing emails and to set advertising cookies. You can withdraw consent at any time.
- Legitimate interests — to operate the referral and credits programme, prevent fraud, and improve the experience, balanced against your rights.
- Legal obligation — to keep order and tax records for the period UK law requires.
04 Who we share it with
We never sell your data. We share it only with the service providers that help us run the shop, each acting under contract and appropriate safeguards:
- WooPayments / Stripe and PayPal — to take payment securely. They receive your payment and billing details directly.
- Huboo — our fulfilment partner, who receives your name and delivery address to pack and ship your parcel.
- Royal Mail / carrier — to deliver and provide tracking.
- Klaviyo — email delivery and list management (data may be processed in the US under standard contractual clauses).
- Ideal Postcodes — UK address lookup when you use the address finder at checkout.
- ReviewX / CusRev — to invite and publish product reviews, if you opt in.
- Cloudflare and Hostinger — hosting, content delivery and security.
- Meta (Facebook and Instagram), TikTok and Google (Analytics and Ads) — to measure which content and adverts bring people to us, and only if you accept advertising cookies (see section 5). Where these providers process data outside the UK, they do so under standard contractual clauses.
05 Cookies & tracking
Until you choose Accept all, only essential and functional cookies are set. Here is what each does:
| Source | Purpose | Set when |
|---|---|---|
| WooCommerce | Remembers your cart and keeps checkout secure (essential). | Always |
| Your browser storage | Stores your cart, member session, referral progress and consent choice on your device. | Always |
| Klaviyo | Delivers the emails you asked for (functional / first-party). | Always |
| Meta Pixel | Measures which Facebook and Instagram content leads to a visit or an order, so we can advertise to people likely to enjoy the tea rather than everyone. | Only after you Accept all |
| TikTok Pixel | The same measurement for TikTok content and adverts. | Only after you Accept all |
| Google Analytics 4 | Tells us which pages people actually read and where the journey breaks down, so we can improve the shop. IP addresses are anonymised. | Only after you Accept all |
| Google Ads | Records that a visit or order followed a Google advert, so we know what is worth running. | Only after you Accept all |
Nothing loads before you say yes. The Meta, TikTok and Google scripts are not on the page at all until you choose Accept all — they are injected only at that moment. Choose Essential only and they are never downloaded, so no advertising cookie is ever set.
Changing your mind. To withdraw consent, clear this site's data in your browser settings and reload — the banner returns and you can choose Essential only. Advertising preferences can also be managed directly in your Meta, TikTok and Google account settings.
06 How long we keep it
Order and payment records are kept for six years, as UK tax law requires. Your account, subscription and Protocol Credits data is kept while your account is open, and for a reasonable period afterwards so we can honour member benefits. Marketing data is kept until you unsubscribe or ask us to delete it. Aggregated, anonymous analytics may be kept longer.
07 Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your data ("right to be forgotten"), where we are not required to keep it.
- Object to or restrict how we use it.
- Withdraw consent at any time, including by unsubscribing from any email.
- Request a copy of your data in a portable format.
To exercise any of these, email hello@cultever.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
08 Contact
Questions about this policy or your data? We'd genuinely rather hear from you than not.
Email hello@cultever.com
Cultever · Surrey, United Kingdom