Last updated: March 2026
This Privacy Policy explains how Newby Teas GmbH collects, uses, and protects personal data when you visit our website newbyteas.com or interact with our services.
We are committed to protecting your personal data and ensuring that it is processed in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
By using our website, you agree to the practices described in this Privacy Policy.
1. Data Controller
The controller responsible for the processing of your personal data is:
Newby Teas GmbH
Private corporation (GmbH)
VAT Number: DE351423070
Email: care@newbyteas.com
For any questions regarding this Privacy Policy or your personal data, please contact us at the email address above.
2. What Personal Data We Collect
Personal data refers to any information relating to an identified or identifiable individual.
We may collect and process the following categories of personal data:
Identity Data
- Name
- Title (if provided)
Contact Data
- Billing address
- Delivery address
- Email address
- Telephone number
Transaction Data
- Details of purchases
- Order history
- Payment confirmations
Technical Data
- Internet protocol (IP) address
- Browser type and version
- Device information
- Operating system
- Website usage information
Marketing and Communication Data
- Preferences regarding marketing communications
- Correspondence with our customer care team
We do not intentionally collect sensitive personal data through our website.
3. How We Collect Your Data
We collect personal data in several ways:
Direct interactions
You may provide personal data when you:
- create an account
- place an order
- subscribe to our newsletter
- contact our customer support team
Automated technologies
When you use our website, certain technical data may be collected automatically through cookies and analytics technologies.
Further information is available in our Cookie Policy.
4. Legal Basis for Processing
Under Article 6 of the GDPR, we rely on the following legal bases to process your personal data:
Performance of a Contract (Art. 6(1)(b) GDPR)
To process and deliver orders placed on our website.
Legitimate Interests (Art. 6(1)(f) GDPR)
To operate, secure, and improve our website and services.
Consent (Art. 6(1)(a) GDPR)
For example, when you subscribe to marketing communications.
You may withdraw your consent at any time.
Legal Obligations (Art. 6(1)(c) GDPR)
Where processing is required for compliance with applicable laws such as tax or accounting regulations.
5. Order Processing
When placing an order or registering an account on newbyteas.com, we collect personal details including:
- name
- billing and delivery address
- email address
- contact telephone number
This information is required to process and fulfil your order.
Your name, delivery address and contact number may be shared with courier or postal service providers solely for the purpose of delivering your order.
We do not sell or rent personal data to third parties.
6. Payment Processing
Payments are processed securely through third-party payment providers.
We do not store full credit card information on our servers.
All payment processing providers comply with relevant data protection and security standards.
7. Newsletter and Marketing
If you subscribe to our newsletter, we may send you updates regarding:
- new tea collections
- product launches
- promotions
- events
You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting:
We may use email marketing platforms that process personal data on our behalf in accordance with GDPR.
8. Customer Support Communications
If you contact our customer care team by email or through our website, the information you provide will be used solely to respond to your enquiry.
Customer service communications may be stored securely for up to two years before deletion unless longer retention is required for legal purposes.
9. Data Security
We implement appropriate technical and organisational security measures to protect personal data from:
- unauthorised access
- accidental loss
- misuse or disclosure
These measures include secure servers, encryption technologies, and restricted access to personal data.
Users are responsible for maintaining the confidentiality of their account passwords and securing their devices.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
- fulfilling orders
- maintaining customer accounts
- complying with tax and accounting obligations under German law
When personal data is no longer required, it will be securely deleted or anonymised.
11. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience and analyse website traffic.
Cookies may be used to:
- remember user preferences
- improve website functionality
- analyse visitor behaviour
You can manage cookie preferences through your browser settings or via the cookie banner on our website.
Further details are available in our Cookie Policy.
12. International Data Transfers
In some cases, personal data may be processed outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, such as:
- European Commission Standard Contractual Clauses
- adequacy decisions recognised by the European Commission
13. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restrict processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
You may exercise these rights by contacting: care@newbyteas.com
14. Complaints
If you believe that your personal data has been processed in violation of data protection laws, you have the right to lodge a complaint with a data protection supervisory authority in Germany.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
Any updates will be published on this page with a revised date