Home / Privacy policy

Privacy policy

This privacy policy explains how Cup Of Tea Co, operated by Astros Marketing (Pty) Ltd, collects, uses and protects personal information in line with the Protection of Personal Information Act, 4 of 2013. It applies to enquiries, orders, subscription services and any other interaction with us through our contact form or related service channels.

Who is responsible for your information

Cup Of Tea Co is based in Stellenbosch Central, Western Cape, and operates as a South African tea supplier serving customers in Stellenbosch, Cape Town, Somerset West, Paarl, Johannesburg, Pretoria, Durban and Bloemfontein. The operator of this service is Astros Marketing (Pty) Ltd, which is responsible for the lawful handling of personal information collected through our enquiry process and customer services.

We collect and process personal information only for clear business purposes. This includes handling product enquiries, managing custom tea blending requests, arranging courier fulfilment, preparing subscription tea boxes, and supporting gifting, hospitality and bulk orders. We do not collect more information than is needed for these purposes.

Information we collect and why we collect it

When you submit an enquiry or place an order, we may collect your name, delivery details, contact information, company details where relevant, and any notes you choose to share about your tea preferences or service requirements. If you request a corporate or hospitality service, we may also record event dates, delivery instructions, dietary notes, and packaging preferences.

  • To respond to enquiries and provide quotations
  • To prepare orders, gifts and subscription deliveries
  • To manage courier fulfilment across South Africa
  • To keep records for accounting, tax and business administration
  • To improve our tea offering and customer support

We may also collect technical information from our contact systems such as the time of submission and basic device data, used for security and service administration. This information is not used to identify you unless needed to resolve a support issue.

How we use and share personal information

We use personal information to provide the service requested, to communicate with you about your order, and to meet legal and operational requirements. Access is limited to staff and service providers who need the information to carry out their duties, such as fulfilment, delivery, bookkeeping and customer support.

Where a courier, payment processor or other external service provider is used, they may receive only the information required to complete their function. They are expected to handle that information securely and only for the purpose instructed by us. We do not sell personal information and we do not disclose it for unrelated marketing purposes.

Storage, security and retention

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse or disclosure. Records may be stored electronically and, where needed, in secure business files. Because we serve customers nationwide, including areas affected by load-shedding and variable connectivity, we may use backup procedures to keep essential service records available.

  • Access is restricted to authorised personnel only
  • Records are kept for as long as required for business and legal purposes
  • Information no longer needed is deleted or anonymised where appropriate
  • We review procedures periodically to maintain security and accuracy

While no system is completely risk-free, we work to reduce the chance of improper access and to act promptly if a security matter arises.

Your rights under POPIA

You have rights in relation to your personal information, including the right to ask what information we hold, to request correction of inaccurate details, and to object to certain processing where the law allows. You may also request that we stop using your information for a particular purpose, subject to legal and contractual obligations.

To make a request, please use the enquiry form on our contact page. We may need to verify your identity before actioning a request, especially where the request concerns account details, delivery records or previous orders. We will respond within a reasonable time, and where applicable in line with POPIA requirements.

Marketing, cookies and updates to this policy

We only send promotional messages where there is a lawful basis to do so, and you may ask us to stop receiving such messages at any time. If our enquiry systems use cookies or similar tools, they are generally used for basic functionality, security and session management rather than intrusive profiling. You can manage browser settings if you wish to limit cookies, though this may affect form use.

We may update this privacy policy from time to time to reflect changes in law, operations or service delivery. The latest version will apply from the date it is published. Please review it periodically if you continue to use our services.