Legal
Privacy Policy
What we collect, why we collect it, and what we never do with it. Short version: we need your address to post you matcha, and we don't sell your data.
What we collect
- Order details — your name, email address, phone number (if you give one) and shipping address. We need these to fulfil and deliver your order.
- Order records — which package you bought, the amount, and the payment reference, for accounting, support and refunds.
- Correspondence — emails you send our support team.
What we never see
Your card number. Payment is handled entirely by Stripe, a PCI-DSS Level 1 certified payment processor. Card details are entered into Stripe's own form and are never transmitted to or stored on our servers.
How we use it
- To process, pack and ship your order
- To send order confirmation and tracking emails
- To handle support requests, replacements and refunds
- To meet our tax and accounting obligations
We do not sell, rent or trade your personal information. We do not add you to marketing email without your consent, and any marketing email we do send has a working unsubscribe link.
Who we share it with
- Stripe — to process your payment.
- Shipping carriers — your name and address, so they can deliver the parcel.
- Our hosting and database provider — to store order records securely.
- Authorities — only where legally required.
Security
The site is served over encrypted HTTPS. Order records are stored in an access-controlled database that is not readable from the browser — only our own server-side systems can read or write them.
How long we keep it
Order and transaction records are retained for as long as required by tax and accounting law in our jurisdiction, then deleted. Support correspondence is kept for two years.
Your rights
You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it (subject to records we must legally retain). Email support@leantidematcha.com and we will respond within 30 days. If you are in the EU, UK or California, you have additional rights under GDPR, UK GDPR or the CCPA respectively, and this policy is intended to honour them.
Cookies
We use only the cookies and local storage necessary for the site and checkout to function, including cookies set by Stripe for fraud prevention during payment. We do not run third-party advertising trackers on this site without disclosing it here first.
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children.
Contact
support@leantidematcha.com · LeanTide, Austin, TX 78701, United States
