Privacy Policy
What we collect, why we collect it, how long we keep it and what you can ask us to do about it — written in plain English.
We are a one-room tea shop, not a data business. We collect the minimum needed to send you tea and answer your questions, and this page sets out exactly what that means.
1. Who we are
Wildwood Steep Co. ("we", "us", "our") is a sole proprietorship owned and operated by David Asbury, trading from 2632 Wildwood Street, Boardman, OH 44512, United States. We operate the website at alliceteaspot.com and are the data controller responsible for the personal information described in this policy.
Questions about this policy, or any request relating to your personal information, should go to media@alliceteaspot.com or 330-717-1432.
2. What this policy covers
This policy explains what personal information we collect through this website, by telephone and at our counter, why we collect it, how long we keep it, who we share it with, and the choices you have. It applies to visitors to this website and to our customers. It does not apply to any third-party website we link to.
3. Information we collect
Information you give us
- Order information: your name, delivery address, telephone number and email address when you place an order by phone or email.
- Correspondence: the content of emails, voicemails and messages sent through the contact form on this site.
- Newsletter: your email address, if you choose to subscribe to Steep Notes.
Information collected automatically
- Server logs: our hosting provider records IP address, browser user-agent, requested page, referring page and timestamp for every request. These logs exist for security and troubleshooting.
- Cookies: a small number of cookies and equivalent local-storage entries, described in our Cookie Policy.
- Analytics: if, and only if, you consent to analytics cookies, aggregated statistics about which pages are visited and for how long.
What we never collect here
This website has no checkout, no user accounts and no payment processing. We do not collect card numbers, passwords or financial data through this site. Card payments are taken over the telephone or at the counter through our merchant terminal, and full card numbers are never written down or stored by us.
4. Why we use it and our legal basis
| Purpose | Information used | Basis |
|---|---|---|
| Fulfilling and delivering your order | Name, address, phone, email | Performance of a contract |
| Answering questions and correspondence | Contact details, message content | Legitimate interest |
| Sending the newsletter | Email address | Consent |
| Keeping the site secure | Server log data | Legitimate interest |
| Understanding site usage | Analytics cookie data | Consent |
| Tax and accounting records | Order and invoice records | Legal obligation |
5. Who we share it with
We do not sell, rent or trade personal information. We share it only with the following categories of recipient, and only to the extent necessary:
- Shipping carriers (USPS) — name and delivery address, in order to deliver your parcel.
- Our web host — which processes server logs on our behalf.
- Our payment processor — which handles card authorisation for telephone and counter transactions.
- Our accountant — order and invoice records, for tax filing.
- Analytics provider — only where you have consented to analytics cookies.
- Law enforcement or regulators — where we are legally required to disclose information.
Where an advertising platform such as Microsoft Advertising or a search engine is used to bring visitors to this site, it may set its own cookies subject to your consent choice. See the Cookie Policy for the current list.
6. How long we keep it
- Order and invoice records: seven years, to meet tax record-keeping obligations.
- Correspondence: up to 24 months from the last message.
- Newsletter subscriptions: until you unsubscribe, plus 30 days.
- Server logs: typically 30 days.
- Analytics data: up to 14 months in aggregated form.
7. Your rights and choices
Wherever you live, you may ask us to:
- tell you what personal information we hold about you;
- provide a copy of it;
- correct anything that is inaccurate;
- delete it, where we are not legally required to keep it;
- stop using it for marketing.
If you are a California resident, the CCPA/CPRA gives you the rights to know, delete, correct and opt out of "sale" or "sharing" of personal information, and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined, and we do not knowingly collect information from anyone under 16.
To exercise any right, email media@alliceteaspot.com or call 330-717-1432. We respond within 30 days and will not charge you for a reasonable request. We may ask a question or two to confirm your identity before releasing information.
8. Security
This site is served over HTTPS. Order records are kept on a password-protected computer and in a locked cabinet at the shop premises. Access is limited to the owner. No system is perfect, but we keep the amount of information we hold deliberately small, which is the most effective protection available to a business of our size.
9. Children
Our products and this website are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.
10. Third-party links
This site links to a mapping service and may link to other external sites. Once you leave alliceteaspot.com, this policy no longer applies, and we are not responsible for the privacy practices of other operators.
11. Changes to this policy
If we change how we handle personal information we will update this page and change the date at the top. Material changes will also be noted on the home page for at least 30 days. This version was published on March 4, 2026.
12. How to complain
Please contact us first — most problems are a misunderstanding we can fix the same day. If you are not satisfied, you may complain to the Ohio Attorney General's Consumer Protection Section, or, if you are a California resident, to the California Privacy Protection Agency.
Postal address for privacy correspondence:
David Asbury, Wildwood Steep Co.
2632 Wildwood Street, Boardman, OH 44512
United States