Privacy Policy

Camelot Tea Company
camelottea.com
Effective date: September 23, 2026 · Last updated: September 23, 2026

This Privacy Policy describes how Camelot Tea Company (“Camelot Tea,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit camelottea.com (the “Site”), place an order, subscribe to a tea box, join our mailing list, or otherwise interact with us.

1. Who we are

Camelot Tea Company is an online retailer of loose-leaf teas, tea accessories, gift cards, and subscription boxes.

Business address: 6795 E Tennessee Ave, Suite 500, Denver, CO 80224, United States
Privacy and account questions: accounts@camelottea.com
Website: https://camelottea.com

The store is hosted by Shopify Inc. Shopify provides the e-commerce platform that allows us to sell our products to you.

2. Information we collect

Information you give us

Identity and contact details: name, email address, phone number, billing and shipping address.
Order details: products purchased, quantities, prices, gift messages, subscription plan (including auto-renew Mystery Tea of the Month boxes).
Account details if you create one: login email and password (stored by Shopify), order history, saved addresses.
Communications: messages you send through our contact form, email, or social media.
Marketing preferences: whether you join our Mailchimp list and which emails you open or click.
Gift cards: purchaser email, recipient email (for digital gift cards), and denomination.

Information collected automatically

Device and usage data: IP address, browser type, device type, referring URL, pages viewed, time on page, and approximate location derived from IP.
Cookies and similar technologies used by Shopify and our service providers for cart function, checkout, analytics, and security.
Payment metadata: last four digits of a card, card brand, and whether a payment succeeded. We do not store full credit card numbers. Payments are processed by Shopify Payments and its banking partners.

Information from service providers

Shopify may provide fraud signals, checkout status, and fulfillment tracking.
Shipping carriers provide tracking numbers and delivery status.
Mailchimp provides list membership, bounce, and engagement data if you subscribe to our emails.

3. How we use your information

Process, fulfill, and ship orders, including subscription boxes that auto-renew until you skip or cancel.
Send order confirmations, shipping notices, and customer-service replies.
Create and manage your customer account and gift cards.
Send marketing emails if you opt in (Mailchimp). You can unsubscribe in any email.
Improve the Site, products, and packaging.
Prevent fraud, abuse, and payment failures.
Comply with tax, accounting, consumer-protection, and other legal duties.
Defend our legal rights if a dispute arises.

4. Legal bases (EEA/UK visitors)

If you are in the European Economic Area or United Kingdom, we process personal data only where a lawful basis applies:

Contract: to take and fulfill your order or subscription.
Consent: marketing emails and non-essential cookies, where required.
Legitimate interests: store security, analytics that do not override your rights, and improving the shop.
Legal obligation: tax records, consumer law, and responding to lawful requests.

5. How we share information

We do not sell your personal information for money. We share it only with service providers who help us run the shop, and only as needed:

Shopify Inc. — store hosting, checkout, customer accounts, and order management. Shopify privacy policy
Payment processors used through Shopify Payments (and any wallets you choose at checkout, such as Shop Pay, Apple Pay, Google Pay, or PayPal if enabled).
Shipping and fulfillment partners and carriers who deliver your tea.
Mailchimp (The Rocket Science Group) — email marketing if you join our list. Mailchimp / Intuit privacy
Professional advisers (accountant, lawyer) under confidentiality.
Authorities when required by law, court order, or to protect our customers or the shop.

If we ever sell or merge the business, customer records would transfer to the new owner under this same policy or a successor policy.

6. Subscriptions and auto-renewal

Mystery Tea of the Month and other subscribe-and-save plans store the payment method and shipping address you provide so we can send the next box. You may skip or cancel anytime from your customer account or by emailing accounts@camelottea.com before the next renewal is charged. Canceling stops future charges; it does not automatically delete historical order records we must keep for tax and accounting.

7. Cookies and tracking

The Site uses cookies and similar technologies:

Essential: shopping cart, checkout, login, and fraud prevention.
Preferences: language, currency, and remembered cart items.
Analytics: Shopify analytics and, if enabled in our Shopify admin, Google Analytics.
Marketing: pixels or tags only if we later enable ads (for example Meta or Google Ads). We will update this policy if we turn those on.

Most browsers let you block or delete cookies. Blocking essential cookies may break checkout. Shopify cookie documentation.

Where required by law, we will present a cookie banner and honor Global Privacy Control (GPC) and similar browser opt-out signals for targeted advertising.

8. How long we keep information

Order, shipping, and payment records: generally at least 7 years to meet tax and accounting rules.
Customer accounts: until you ask us to close them, plus a short period to complete open orders.
Marketing list: until you unsubscribe or we delete inactive addresses.
Support emails: as long as needed to resolve your question and for a reasonable follow-up period.
Server logs: typically a short period unless needed for security.

When we no longer need information, we delete or de-identify it.

9. Security

Shopify provides HTTPS, PCI-compliant checkout, and access controls. We limit staff access to customer data to people who need it to pack orders or answer support. No method of transmission over the internet is perfectly secure. Please use a unique password if you create an account.

10. Children’s privacy

The Site is for adults buying tea and tea accessories. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, email accounts@camelottea.com and we will delete it.

11. Your choices and rights

You can update your address or payment method in your Shopify customer account; unsubscribe from marketing emails using the link in every Mailchimp message; and email us to request a copy, correction, or deletion of personal information we are not required to keep. We aim to respond within 45 days. Send requests to accounts@camelottea.com.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and share; to request deletion or correction; to opt out of “sale” or “sharing” for cross-context behavioral advertising; and not to be discriminated against for exercising those rights. We do not sell personal information for money. If we use advertising cookies that California treats as a “sale” or “share,” you may opt out by emailing us or using a recognized opt-out signal. We do not have actual knowledge that we sell or share the personal information of consumers under 16.

Colorado

Camelot Tea Company is based in Colorado. The Colorado Privacy Act applies only if a business meets certain volume thresholds (generally 100,000 Colorado consumers in a year, or 25,000 plus revenue from selling personal data). Even if those thresholds do not apply to us, Colorado customers may still email us to access, correct, delete, or opt out of targeted advertising related to their information. We will honor those requests in good faith.

EEA / United Kingdom

You may also lodge a complaint with your local data protection authority. Shopify processes and stores data in multiple countries, including Canada and the United States. See Shopify’s GDPR materials.

12. International visitors

If you order from outside the United States, your information will be processed in the United States and in countries where Shopify and our other providers operate.

13. Third-party sites

The Site may link to social media, payment wallets, or carrier tracking pages. Those sites have their own privacy policies. We are not responsible for them.

14. Changes to this policy

We may update this Privacy Policy when our practices or the law change. The “Last updated” date at the top will change. Material changes will be posted on this page.

15. How to contact us

Camelot Tea Company
6795 E Tennessee Ave, Suite 500
Denver, CO 80224
United States
Email: accounts@camelottea.com
Website: https://camelottea.com