Privacy Policy

Last updated: July 2026

This policy explains how Village Tea processes the personal data of those who visit the site and place orders, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. What data we process

• Order and contact data: name, shipping address, email and phone.
• Payment data: payments are processed by Stripe. Village Tea does not store your card details; these are handled directly by Stripe under PCI-DSS security standards.
• Browsing data: only what is strictly necessary for the shopping cart to work (see Cookie Policy).

3. Purposes and legal basis

• Managing and delivering your orders — performance of the sales contract.
• Invoicing and legal obligations — compliance with legal obligations.
• Customer service — legitimate interest / your consent.
• Sending news, only if you subscribe — your consent, revocable at any time.

4. Retention

We keep data for as long as necessary for the purpose for which it was collected and, afterwards, for the periods legally required (for example, tax and commercial regulations).

5. Recipients

Your data may be shared with: Stripe Payments Europe, Ltd. (payment processing), the courier company handling delivery, and public authorities where legally required. Data is not shared with third parties for advertising purposes.

6. International transfers

Some providers (such as Stripe) may process data outside the European Economic Area. In such cases, the safeguards provided for in the GDPR apply (standard contractual clauses or others).

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw your consent, by writing to ivan@bromdel.es. If you believe your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The site runs over an encrypted connection (HTTPS).

9. Changes

We may update this policy to adapt it to legal or service changes. The version in force will always be the one published on this page.