Effective Date: 26 October 2026
This Privacy Policy explains how AVANTCHA UK Limited collects, uses, stores, shares and protects personal data in connection with avantcha.co.uk and related customer and business activities.
AVANTCHA UK Limited is the data controller responsible for the processing described in this policy, except where another organisation acts as an independent controller.
AVANTCHA is a trademark owned by AVANTCHA Switzerland GmbH.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
Please read this policy to understand how we handle your information. Where your consent is required, we will request it separately.
This policy applies to personal data collected through:
Visits to and use of avantcha.co.uk
Online purchases, guest checkout and customer accounts
Business enquiries and purchases
Customer service communications
Newsletter subscriptions, promotions and surveys
Interactions with our advertising, social media and digital marketing
Other direct interactions with AVANTCHA UK Limited
Additional privacy information may be provided where a particular service or activity requires it.
We collect personal data through:
Direct interactions: Information you provide when placing an order, creating an account, making an enquiry, subscribing to marketing or contacting us.
Automated technologies: Information collected when you use our website, including through cookies, analytics and similar technologies, subject to applicable consent requirements.
Service providers and delivery partners: Information relating to payments, order fulfilment, delivery tracking, customer support and fraud prevention.
Third-party platforms: Information received when you interact with AVANTCHA through Google sign-in, advertising platforms or social media, subject to their settings and applicable law.
We may combine information from these sources where necessary for the purposes described in this policy.
Depending on how you interact with us, we may process:
Identity and contact information: Name, business name, billing and delivery address, email address and telephone number.
Account information: Account identifiers, authentication information, login records and account preferences.
Order and transaction information: Products purchased, order history, payment status, refunds, invoices and relevant transaction references.
Delivery information: Shipping addresses, delivery instructions, tracking information and proof of delivery.
Customer service information: Enquiries, correspondence, complaints, returns and other communications.
Technical information: IP address, browser and device information, operating system, diagnostic data and security logs.
Website usage information: Pages viewed, browsing activity, referral sources, session information and interactions with website features.
Marketing information: Subscription preferences, consent records, campaign interactions and advertising-related identifiers.
Social sign-in information: Account details made available through Google sign-in, depending on the permissions granted.
Location information: Approximate location inferred from technical information and locations provided for billing or delivery.
Payments are processed by authorised payment providers. We do not ordinarily receive or store complete payment-card details.
We do not intentionally request special category personal data, such as health information or religious beliefs. Please avoid including sensitive information in ordinary customer service communications unless necessary to resolve your enquiry.
Certain information, such as your delivery address and contact details, is necessary to fulfil an order. Without it, we may be unable to complete your purchase or provide the requested service.
We process personal data only where an appropriate legal basis applies.
| Purpose | Legal Basis |
|---|---|
| Processing payments, fulfilling orders and arranging delivery | Performance of a contract |
| Creating and managing customer accounts | Performance of a contract |
| Responding to enquiries, handling complaints and providing customer support | Contract performance or legitimate interests, as applicable |
| Maintaining transaction records and meeting tax, accounting and other legal requirements | Legal obligation |
| Protecting our website, accounts and systems against fraud, misuse and security threats | Legitimate interests or legal obligation, as applicable |
| Sending newsletters and promotional emails | Consent |
| Analysing website performance and improving customer experience | Legitimate interests, with separate cookie consent where required |
| Personalising content and measuring advertising effectiveness | Legitimate interests or consent, depending on the processing and applicable requirements |
| Establishing, exercising or defending legal claims | Legitimate interests or legal obligation, as applicable |
Where we rely on legitimate interests, these include operating our business, providing effective customer service, improving our products and website, preventing fraud and protecting our legal rights. We assess these interests against the rights and freedoms of affected individuals.
Where processing depends on consent, you may withdraw that consent at any time.
We may send you information about AVANTCHA products, collections, promotions and other relevant updates where you have explicitly subscribed or provided consent to receive marketing emails.
You may withdraw your consent at any time by using the unsubscribe link in our marketing emails or by contacting us at admin@avantcha.com.
We may retain a limited record of your opt-out to ensure that your marketing preferences continue to be respected.
Withdrawing consent will not affect essential communications relating to orders, accounts, deliveries or customer service.
We use cookies and similar technologies to operate our website, understand its performance and, where permitted, support personalised advertising.
These technologies include:
Strictly Necessary Technologies: Required for essential functions such as shopping carts, checkout, security and account authentication.
Analytics and Performance Technologies: Help us understand website activity, performance and usability.
Marketing and Advertising Technologies: Support relevant advertising, campaign measurement and remarketing.
Our website uses technologies from providers including Google Analytics 4, Google Ads, Meta, TikTok and Mouseflow.
We use Consentik to manage cookie consent and preferences. Non-essential analytics and advertising technologies are blocked until you provide the required consent.
You can accept or reject optional cookies through our cookie consent banner.
You can change your preferences or withdraw your consent at any time using the Cookie Preferences control available on avantcha.co.uk.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
You can also manage cookies through your browser settings, although disabling certain technologies may affect website functionality.
We do not sell personal data.
We share personal data where necessary for the purposes described in this policy, including with authorised service providers and AVANTCHA group personnel.
Depending on the service used, these recipients may include:
E-commerce platform: SHOPLINE, for website operation, customer accounts and order management.
Payment processing: Stripe and other authorised payment service providers.
Inventory and order management: Cin7.
Accounting and financial operations: Xero.
Fulfilment and delivery: Artisan Specialty Tea Trading LLC, DHL Express and Carriyo.
Marketing and customer engagement: SAP Engagement Cloud (Emarsys).
Analytics and advertising: Google Analytics 4, Google Ads, Meta, TikTok and Mouseflow.
Cookie preference management: Consentik.
Website infrastructure, security and technical services: Cloudflare, Loqate, Zapier and relevant website integration providers.
Professional advisers: Accountants, auditors, lawyers and other advisers where required.
Some providers act as data processors on our instructions, while others may act as independent controllers for particular activities.
We may also disclose information to competent public authorities where required by law, or in connection with a legitimate corporate transaction subject to appropriate protections.
AVANTCHA operates internationally, with affiliated businesses and authorised personnel in the United Kingdom, United Arab Emirates, Switzerland and Thailand.
Where necessary for order fulfilment, customer support, financial administration, IT, marketing or group operations, authorised personnel may access relevant customer or business information.
Access is restricted according to business responsibilities and operational requirements.
AVANTCHA UK Limited remains responsible for meeting its obligations under UK data protection law, including applicable requirements concerning disclosures and international transfers.
Our use of international fulfilment services, group operations and technology providers means that personal data may be accessed, stored or processed outside the United Kingdom.
Relevant destinations may include the United Arab Emirates, Switzerland, Thailand, the European Economic Area and the United States.
Where the United Kingdom has recognised a destination as providing an adequate level of protection, transfers may rely on the applicable UK adequacy regulations.
For restricted transfers to destinations not covered by an applicable adequacy arrangement, UK law requires a valid transfer mechanism. Depending on the circumstances, this may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another mechanism permitted under UK data protection law.
The appropriate transfer arrangements depend on the receiving organisation, destination and nature of the processing.
You may contact us at admin@avantcha.com for further information about international transfers of your personal data and the safeguards applicable to them.
We retain personal data only for as long as necessary for the purposes described in this policy, taking account of contractual requirements, legal obligations, operational needs and potential claims.
Our retention framework uses the following standard periods and review criteria:
| Data Category | Retention Period or Review Criteria |
|---|---|
| Customer accounts | Reviewed after approximately 3 years of inactivity, subject to outstanding orders, legal obligations and other legitimate retention needs |
| Orders, invoices and accounting records | Generally 6 years for UK records, or longer where legally required |
| Customer service correspondence | Generally 2 years after the enquiry or case is closed, unless further retention is justified |
| Marketing subscriptions and preferences | While marketing remains relevant and consent remains valid, with periodic reviews and removal or suppression following withdrawal |
| Marketing and cookie consent records | Generally 3 years, subject to legal or evidential requirements |
| Routine website and security logs | Generally 90 days, unless required for investigation, security or legal purposes |
| Privacy rights requests and related records | Generally 3 years after resolution, or longer where justified by legal requirements |
These periods may vary according to applicable legal retention requirements and the specific circumstances of the data.
If you request deletion of your account or personal data, we will review the information held in relevant systems and delete or anonymise eligible records where required. Certain information may need to be retained for accounting, legal, security or dispute-resolution purposes.
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.
These measures may include:
Encryption of information transmitted through secure connections
Access controls and authentication measures
Restrictions on access according to staff responsibilities
Security monitoring and technical protections
Secure payment processing through authorised payment providers
Internal procedures for investigating potential security incidents
No online service can guarantee absolute security. If you believe your account or personal information has been compromised, please contact us promptly.
Under UK data protection law, you may have the right to:
Access: Request confirmation of whether we process your personal data and obtain a copy.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of personal data in circumstances where the right applies.
Restriction: Request that we limit certain processing activities.
Portability: Receive eligible personal data in a structured, commonly used, machine-readable format.
Object: Object to processing based on legitimate interests in circumstances provided by law.
Withdraw Consent: Withdraw consent where processing is based on that consent.
Rights Relating to Automated Decisions: Exercise applicable rights where solely automated decisions have legal or similarly significant effects.
You have the right to object at any time to the use of your personal data for direct marketing, including related profiling. We will stop processing your personal data for those purposes following a valid objection.
To exercise your rights, please contact admin@avantcha.com. We may request information necessary to verify your identity or locate the relevant records.
We generally respond within one month, subject to permitted extensions, clarification procedures and other provisions of applicable law.
Not every right applies in every circumstance, and certain information may be retained where required by law.
Our website is intended for adult customers and is not directed towards children.
We do not knowingly seek personal data directly from children for marketing or account creation without an appropriate lawful basis.
If you believe a child has provided personal data to us in circumstances that require correction or deletion, please contact us.
If you have concerns about how we have handled your personal data, you may contact us at admin@avantcha.com to make a data protection enquiry or complaint.
We will acknowledge receipt of a data protection complaint within 30 days, take appropriate steps to investigate it without undue delay, keep you informed where appropriate and explain the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom's data protection supervisory authority.
ICO website: ico.org.uk
You may contact the ICO directly, although we encourage you to contact us first so we have an opportunity to address your concerns.
For privacy enquiries, requests relating to personal data or data protection complaints, please contact:
AVANTCHA UK LTD
Office 7, 35-37 Ludgate Hill
London, United Kingdom, EC4M 7JN
Company Registration No.: 12809517
Privacy Email: admin@avantcha.com
For general order and customer service enquiries, please contact customercare@avantcha.com.
We reserve the right to update this Privacy Policy to reflect changes in our services, data processing practices or legal requirements. Updated versions will be published on this page with a revised effective date.
All Rights Reserved. © AVANTCHA 2026
loading
