Privacy Policy
At Island Tepache, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website (the "Website"), purchase our 3-pack (£9) or 6-pack (£16) fermented pineapple beverages, or interact with us in the UK. By using our Website, you consent to the practices described below. This policy complies with UK data protection laws, including the UK GDPR and Data Protection Act 2018.
Last Updated: September 25, 2025
1. Information We Collect
We collect the following types of information:
-
Personal Information: When you place an order, create an account, or contact us, we may collect:
-
Name
-
Email address
-
Billing and shipping address
-
Phone number
-
Payment details (processed securely via third-party providers)
-
-
Usage Data: Automatically collected when you use the Website, including:
-
IP address
-
Browser type and version
-
Device information
-
Pages visited and time spent
-
Referral sources (e.g., how you found our Website)
-
-
Cookies and Tracking: We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. See Section 5 for details.
-
Communication Data: Information you provide via emails, Contact Us forms, or customer support interactions.
2. How We Use Your Information
We use your data to:
-
Process Orders: Fulfill and deliver your 3-pack or 6-pack purchases, including managing payments and shipping (via Royal Mail).
-
Communicate: Send order confirmations, shipping updates, and respond to inquiries via email or phone.
-
Improve Our Services: Analyze usage data to enhance Website functionality, product offerings, and customer experience.
-
Marketing: With your consent, send promotional emails about new products, recipes, or offers (e.g., discounts). You can opt out at any time via the unsubscribe link.
-
Legal Compliance: Meet obligations under UK law, such as tax reporting or fraud prevention.
3. Legal Basis for Processing
We process your data under the following legal bases (per UK GDPR):
-
Contract: To fulfill orders and deliver services (e.g., processing your purchase).
-
Consent: For marketing emails or non-essential cookies (you can withdraw consent anytime).
-
Legitimate Interests: For improving the Website, analyzing usage, or preventing fraud, where our interests don’t override your rights.
-
Legal Obligation: To comply with UK laws (e.g., tax or consumer protection regulations).
4. Sharing Your Information
We only share your data when necessary:
-
Third-Party Service Providers: With trusted partners who assist with:
-
Payment processing (e.g., Stripe, PayPal; we don’t store payment details)
-
Shipping (e.g., Royal Mail, Parcelforce)
-
Website analytics (e.g., Google Analytics)
-
Email marketing (e.g., Mailchimp, with your consent)
-
-
Legal Requirements: If required by UK law, courts, or authorities to prevent fraud, protect safety, or comply with regulations.
-
Business Transfers: In the event of a merger, acquisition, or sale, your data may be transferred, with notice provided.
All third parties are contractually obligated to protect your data and comply with UK GDPR.
5. Cookies and Tracking Technologies
We use cookies to:
-
Ensure Website functionality (e.g., cart management).
-
Analyze traffic and user behavior.
-
Personalize content (e.g., recommending tepache recipes).
-
Types:
-
Essential Cookies: Required for Website operation (no consent needed).
-
Non-Essential Cookies: For analytics/marketing (requires consent via our cookie banner).
-
-
Management: You can accept, reject, or manage cookies via our cookie banner or browser settings. Rejecting non-essential cookies won’t affect core Website functionality.
6. Data Storage and Security
-
Storage: Your data is stored on secure servers in the UK or EU, compliant with UK GDPR. Payment details are encrypted by third-party processors.
-
Security: We use industry-standard measures (e.g., SSL encryption, firewalls) to protect your data from unauthorized access, loss, or misuse.
-
Retention: We keep personal data only as long as necessary:
-
Order data: 6 years for tax purposes.
-
Account data: Until you request deletion or account closure.
-
Usage data: Up to 2 years for analytics.
-
Marketing data: Until you unsubscribe.
-
7. Your Rights
Under UK GDPR, you have the right to:
-
Access: Request a copy of your personal data.
-
Rectification: Correct inaccurate data.
-
Erasure: Request deletion of your data (subject to legal obligations).
-
Restriction: Limit how we process your data.
-
Portability: Receive your data in a structured, machine-readable format.
-
Object: Opt out of marketing or processing based on legitimate interests.
-
Withdraw Consent: For marketing or non-essential cookies at any time.
To exercise these rights, contact us at support@islandtepache.co.uk. We’ll respond within 30 days. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
8. International Transfers
As a UK-based business, most data is processed within the UK. If we transfer data to third parties outside the UK/EU (e.g., for analytics), we ensure adequate protection via UK GDPR-compliant agreements or safeguards (e.g., Standard Contractual Clauses).
9. Third-Party Links
Our Website may contain links to third-party sites (e.g., payment processors, social media). We are not responsible for their privacy practices. Please review their policies before sharing data.
10. Children’s Privacy
Our Website and products are not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have such data, contact us to request deletion.
11. Contact Us
For questions, concerns, or to exercise your data rights, reach out to:
-
Email: support@islandtepache.co.uk
-
Website: [Contact Us form]
-
Address: [Insert UK business address]
We aim to respond within 2 business days.
12. Changes to This Policy
We may update this Privacy Policy to reflect legal or operational changes. Updates will be posted here with a revised “Last Updated” date. Continued use of the Website constitutes acceptance of changes.
Last Updated: September 25, 2025