Privacy policy

Last updated: 7 September 2026

Ikiru Tea respects your privacy and handles your personal data with care. This Privacy Policy explains what personal data we collect, why we process it, with whom we may share it, how long we retain it, and what rights you have.

This Privacy Policy applies when you visit ikirutea.com, place an order, contact us, subscribe to marketing communications, or otherwise interact with our online store.

Ikiru Tea is the controller responsible for the processing of personal data described in this Privacy Policy.

1. About Ikiru Tea

Ikiru Tea is a Netherlands-based tea company specialising in Japanese tea and matcha.

Our online store is powered by Shopify.

Our contact details are:

Ikiru Tea
Pinksterbloemlaan 35
8245 LA Lelystad
The Netherlands

Email: info@ikirutea.com
KVK: 98476017
VAT: NL868511766B01

2. Personal Data We Process

Depending on how you interact with us, we may process the following categories of personal data:

name;
billing and shipping address;
email address;
telephone number, where provided;
order and transaction information;
payment-related information;
account information, if you create a customer account;
communications you send to us;
IP address;
browser, device and technical information;
website usage and interaction information;
marketing preferences and consent information; and
other information you voluntarily provide to us.

We do not generally receive or store complete payment card details ourselves. Payments are processed through Shopify and the payment providers made available during checkout.

3. How We Collect Personal Data

We may collect personal data:

directly from you, for example when you place an order, contact us or create an account;
automatically when you visit or interact with our website, including through cookies and similar technologies;
from Shopify and service providers involved in operating our online store;
from payment, shipping, analytics and marketing providers where applicable; and
from other parties where this is permitted by law.

4. Why We Process Your Personal Data

We only process personal data where we have a lawful basis to do so.

Processing and fulfilling orders

We process information such as your name, contact details, delivery address, order information and payment-related information to:

process your order;
receive payment;
deliver your products;
provide order and shipping updates;
process returns and refunds; and
provide customer service relating to your purchase.

The legal basis for this processing is generally that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Customer service and communication

When you contact us, we process the information you provide so that we can answer questions, resolve issues and provide support.

Depending on the nature of your request, this processing is based on performance of our contract with you or our legitimate interest in providing effective customer service and operating our business.

Legal and administrative obligations

We process and retain certain information where necessary to comply with legal obligations, including tax, accounting, consumer protection and other applicable regulatory requirements.

The legal basis for this processing is compliance with our legal obligations.

Security and fraud prevention

We may process information to protect our website, customers and business against fraud, misuse, security incidents and other unlawful activity.

This processing is based on our legitimate interest in protecting our business, customers and services, and where applicable on compliance with legal obligations.

Analytics and improvement

Where permitted, we may use analytics technologies to understand how visitors use our website, measure website performance and improve our online store.

Where consent is legally required for the use of analytics cookies or similar technologies, we process the relevant information on the basis of your consent.

Where processing does not require consent, we rely on our legitimate interests where applicable.

Marketing

If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may use your contact details to send you news, product information and other marketing communications from Ikiru Tea.

Where required by law, this processing is based on your consent.

You can unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Shopify

Our online store is hosted and operated using ⁠Shopify.

Shopify processes certain personal data in order to provide the ecommerce infrastructure that enables us to operate our online store, including functionality relating to checkout, orders, payments, security and customer interactions.

Information you provide through our online store may therefore be processed by Shopify and its service providers.

Shopify may also process certain information for its own purposes where it acts as an independent controller. More information about Shopify’s processing of personal data can be found in ⁠Shopify's Consumer Privacy Policy.

6. Payments

Payments are processed using the payment methods and payment providers available during checkout.

Payment providers may process information required to complete the transaction, prevent fraud and comply with financial and legal obligations.

The exact payment information processed depends on the payment method you select.

We do not generally receive or store your complete payment card details.

7. Shipping and Order Fulfilment

We share the personal data necessary to deliver your order with shipping and logistics providers.

This may include your:

name;
delivery address;
email address;
telephone number, where required or provided; and
relevant shipment and order information.

We currently use DHL Parcel for order delivery where applicable.

Shipping providers process this information for purposes including shipment handling, delivery, tracking and delivery notifications.

8. Analytics, Google Services and Advertising

We may use services provided by ⁠Google, including Google Analytics and Google & YouTube services.

Depending on your consent choices and the services enabled on our website, these services may process information about your device and interaction with our website, such as:

IP address;
device and browser information;
pages viewed;
interactions with our website;
referral information; and
technical identifiers.

We use this information, where applicable, to understand website performance, measure traffic, improve our services and measure or support marketing activities.

Where the placement or reading of cookies or similar technologies requires consent, these technologies are used only in accordance with your consent preferences.

You can change your cookie preferences through the cookie controls available on our website where applicable.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies for purposes including:

enabling essential website and checkout functionality;
remembering preferences;
maintaining security;
measuring website usage and performance; and
supporting marketing and advertising where applicable.

Some cookies are necessary for the website to function and do not require consent where permitted by law.

Non-essential cookies, such as certain analytics or advertising cookies, are used only where permitted and, where required, after you have provided consent.

You can manage your preferences through the cookie controls available on our website.

10. Who We Share Personal Data With

We only share personal data where necessary for the purposes described in this Privacy Policy or where required by law.

Recipients may include:

Shopify;
payment service providers;
shipping and logistics providers;
IT, hosting and technical service providers;
analytics providers;
marketing and advertising service providers, where applicable;
professional advisers such as accountants or legal advisers where necessary; and
government authorities or other parties where disclosure is legally required.

These parties receive only the information reasonably necessary for the relevant purpose.

Some service providers act as processors on our behalf, while others may process personal data as independent controllers under their own privacy policies.

11. International Transfers

Some of our service providers, including Shopify and Google, operate internationally. As a result, personal data may in certain circumstances be processed outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used where required by applicable law.

These safeguards may include the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

12. How Long We Retain Personal Data

We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

In particular:

order, invoice and transaction information may be retained for the period required under applicable tax and accounting legislation;
customer service correspondence is retained for as long as reasonably necessary to handle your request and any related claims or obligations;
customer account information is retained while the account remains active and thereafter only where necessary;
marketing information is retained until you unsubscribe, withdraw your consent or the information is otherwise no longer necessary for the relevant marketing purpose;
cookie and analytics information is retained according to the applicable cookie settings and the retention periods of the relevant services.

Where information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

13. Your Privacy Rights

Under the GDPR and other applicable data protection legislation, you may have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing, including processing based on legitimate interests;
object to the use of your personal data for direct marketing;
receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another controller;
withdraw your consent at any time where processing is based on consent; and
lodge a complaint with a competent data protection authority.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, contact us at info@ikirutea.com.

We may ask you to provide information reasonably necessary to verify your identity before processing your request.

14. Complaints

If you have concerns about how we process your personal data, please contact us first at info@ikirutea.com so that we can investigate your concern.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or another competent supervisory authority where applicable.

⁠Autoriteit Persoonsgegevens

15. Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

16. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of websites that we do not control. We recommend reviewing the privacy policy of any third-party service you use.

17. Children’s Privacy

Our online store is not specifically directed at children.

We do not knowingly seek to collect personal data from children in circumstances where parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal data to us improperly, please contact us at info@ikirutea.com.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or applicable legal requirements.

The most current version will be published on this page and the “Last updated” date will be updated accordingly.

19. Contact

If you have questions about this Privacy Policy, our processing of personal data or your privacy rights, please contact: