Privacy Policy

Privacy Policy for CognitiveTeaHub.com
Effective Date: April 12, 2025

Table of Contents

1. Introduction
2. Scope & Jurisdiction
3. Information We Collect
   • 3.1 Personal Information
   • 3.2 Automatically Collected Information
4. Cookies & Tracking Technologies
5. How We Use Your Information
6. Third‑Party Sharing & International Transfers
7. Analytics & Opt‑Out
8. Data Retention
9. Security & Breach Notification
10. Children’s Privacy
11. Your Rights
    • 11.1 GDPR Rights
    • 11.2 CCPA Rights
    • 11.3 How to Exercise Your Rights
12. Changes to This Privacy Policy
13. Contact Us

1. Introduction

Welcome to CognitiveTeaHub.com (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use any related mobile applications, widgets, or other services (collectively, the “Services”).

If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Scope & Jurisdiction

This policy applies globally to all users of our Services. To the extent you reside in the European Economic Area (EEA), United Kingdom, or California, additional rights and disclosures may apply under the GDPR or CCPA (see Section 11).

3. Information We Collect

3.1 Personal Information

We collect personal information you voluntarily provide when you:

• Subscribe to our newsletter
• Register for an account
• Make a purchase
• Participate in contests or surveys
• Send us feedback or questions

Types of Personal Information:

• Name (required for account creation)
• Email address (required for communications)
• Mailing address and phone number (required for order fulfillment)
• Payment information (processed securely by our payment processor)
• Any other information you choose to provide (optional)

3.2 Automatically Collected Information

When you access our Services, we automatically collect:

• IP address and device identifiers
• Browser type, version, and settings
• Pages you visit, time and date of your visit, and time spent on each page
• Referring website addresses
• Server log information (retained for up to 12 months)

4. Cookies & Tracking Technologies

We use cookies, web beacons, tracking pixels, and similar technologies to enhance your experience.

Most browsers allow you to refuse cookies via settings. Note that blocking cookies may degrade your experience.

Do Not Track: We do not honor DNT signals at this time.

5. How We Use Your Information

We use your information for the following purposes, with the corresponding legal bases under GDPR (if applicable):

• Account creation & management (Contract)
• Order processing & transactions (Contract)
• Policy updates & administrative notices (Legitimate Interest)
• Customer support & inquiries (Legitimate Interest)
• Marketing & promotional communications (Consent)
• Personalized content & recommendations (Legitimate Interest)
• Fraud detection & security (Legitimate Interest)

We do not make automated decisions that produce legal effects.

6. Third‑Party Sharing & International Transfers

We may share your data with:

• Service providers (email platforms, payment processors, hosting, analytics)
• Third parties you explicitly authorize

All vendors are contractually bound to use your data only for the services we engage them for.

International Transfers: If we transfer data outside your jurisdiction (e.g. EEA → U.S.), we rely on:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable

7. Analytics & Opt‑Out

We use Google Analytics to understand site usage. We have enabled IP anonymization. You can opt out via the Google Analytics Opt‑Out Browser Add‑On:
https://tools.google.com/dlpage/gaoptout

8. Data Retention

We retain personal information only as long as necessary:

• Account & order data: Until account deletion + 2 years
• Newsletter subscriptions: Until you unsubscribe + 1 year
• Server logs: 12 months
• Support inquiries: 3 years

You may request earlier deletion (see Section 11).

9. Security & Breach Notification

We implement reasonable measures—encryption in transit (TLS), encryption at rest, access controls, regular security audits.

If a breach affecting your personal data occurs, we will notify you and relevant authorities within 72 hours of discovery, per GDPR/CCPA requirements.

10. Children’s Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn we have inadvertently collected such data, we will delete it promptly.

11. Your Rights

11.1 GDPR Rights (EEA & UK)

• Access: Request a copy of your data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Delete your data (“right to be forgotten”)
• Restriction: Limit processing of your data
• Portability: Receive your data in a structured, machine‑readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: For marketing at any time

11.2 CCPA Rights (California)

• Right to Know: What personal data we collect, use, share
• Right to Delete: Request deletion of personal data
• Right to Opt‑Out: Of sale or sharing of personal data (we do not sell data)
• Non‑Discrimination: You will not be penalized for exercising these rights

11.3 How to Exercise Your Rights

Email us at mike@cognitiveteahub.com with “Privacy Request” in the subject. We may require verification. We respond within 30 days (GDPR) or 45 days (CCPA).

12. Changes to This Privacy Policy

We may update this policy. Material changes will be notified by email or site banner. The “Effective Date” at the top will be revised.

13. Contact Us

If you have questions or concerns, contact:

• Email: mike@cognitiveteahub.com

Thank you for trusting CognitiveTeaHub.com with your information. We’re committed to keeping it safe and transparent.