Privacy statement

Tea Unlimited V.O.F. trading as De Theefabriek
Hoofdstraat 15–25
9973 PD Houwerzijl
The Netherlands

Email address:
Telephone: 0595 – 47 0000 / +31 595 547 0000

De Theefabriek is responsible for the processing of personal data as set out in this privacy statement.

1. Personal data that we process

We process personal data because you use our tea wholesaler webshop and/or because you provide this data to us yourself. This is exclusively for business purposes.

We process the following data:

  • First and last name
  • Company name
  • Address and billing details
  • Telephone number
  • Email address
  • VAT number
  • Chamber of Commerce number
  • Login details (user account)
  • Order and invoicing history
  • Payment status (not the full account number for online payment providers)
  • IP address
  • Technical data about your visit (via anonymised analytics)

We do not process any special personal data.

We process data exclusively for business and administrative purposes:

✔ Execution of the agreement (necessary)

  • processing orders
  • delivery of goods
  • creating a business account
  • Communicate about orders, deliveries and product information.
  • customer service
  • administrative obligation (Tax and Customs Administration)
  • Retention obligation for invoices and transaction data.
  • Sending business newsletters (opt-in)

✔ Legitimate interest

  • Securing and optimising our website
  • Analyse anonymised website usage to improve services
    (based on anonymised GA4 analytics).

We do not use personal data for profiling, advertising purposes or remarketing.

3. Newsletter (opt-in)

We only send newsletters if you have given your explicit consent. You
can unsubscribe at any time via the link in the newsletter.

4. Automated decision-making

We do not make decisions based on automated processing that could have significant consequences for individuals. All orders and business reviews are checked by employees.

5. Retention periods

We do not retain personal data longer than necessary:

  • Account details: as long as the account is active or until you request deletion.
  • Order and invoice details: 7 years (statutory retention obligation)
  • Email correspondence: maximum 2 years, unless necessary for administration purposes.
  • Analytics data: anonymised and without traceable IP addresses.

6. Sharing personal data with third parties

We only share personal data with parties who need it for our services or because we are legally obliged to do so.

We work with, among others:

  • Hosting provider (web hosting & server management)
  • Payment providers (e.g. iDEAL providers)
  • Logistics partners (carriers)
  • IT and maintenance companies
  • Administrative office / accountant
  • Email service (for order confirmations/opt-in newsletters)

We have concluded processing agreements with all these parties.
We never sell your data to third parties.

7. Cookies and similar techniques

✔ Functional cookies

We use functional cookies that are necessary for the functioning of the online shop, such as:

  • Login functionality
  • shopping trolley
  • security
  • Caching (faster loading times)

✔ Analytical cookies (anonymised)

We use Google Analytics 4 with:

  • IP anonymisation
  • No advertising links.
  • No user ID.
  • No remarketing.

These cookies do not infringe on your privacy. Therefore, no cookie banner is required.

✘ No tracking/marketing cookies.

We do not use:

  • Google Ads remarketing
  • Facebook Pixel
  • LinkedIn Insight Tag
  • tracking pixels
  • Heatmap or session recording tools.
  • YouTube/Maps embeds that place cookies.

8. Rights of data subjects

You have the right to:

  • view your details
  • Have your details corrected
  • Have your data removed (to the extent permitted by law)
  • object to processing
  • withdraw your consent (e.g. newsletter)
  • Request data portability

Requests can be sent to:

We will respond within a maximum of 4 weeks.

9. Security of personal data

We take appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification.

Our measures include:

  • Secure SSL connection (HTTPS)
  • Up-to-date servers and security software.
  • Limited access to administrative systems.
  • Two-step verification on internal accounts.
  • Regular updates of plugins, themes and systems.
  • firewall and anti-malware protection

10. Complaints

Do you have concerns about how we handle your data?

You can submit a complaint to the Data Protection Authority: https://autoriteitpersoonsgegevens.nl/

But of course, we would prefer to help you directly. Email us at .