The data controller for personal data is ORIENTIS GOURMET, a simplified joint-stock company with a share capital of 11,494,590.79 euros, having its registered office at 89 avenue Niel 75017 Paris, registered with the Paris Trade and Companies Register under number 350 283 057.

2.1 General information

This section aims to inform you about what we do with the data you provide to us directly or that is collected indirectly in connection with the use of our Site, and why we do so.

Identification data

By registering for the KUSMIKLUB loyalty programme and/or by using our Site, you may provide us with information, some of which may identify you, specifically your title, surname, first name, date of birth, email address, postal address, postcode, and telephone number.

The mandatory nature of the data is indicated to you at the time of collection by an asterisk (*). If you do not fill in these fields, we will unfortunately be unable to process your request. Other data is optional and is collected solely for statistical purposes and to personalise services. You are therefore free to provide it or not, without any obligation or disadvantage to you.

This is particularly the case when you (i) create your online customer account, (ii) sign up for a newsletter or other alert service, (iii) complete your online purchase, (iv) join the KUSMIKLUB loyalty programme, (v) contact our customer service, (vi) participate in competitions, or (vii) place a Click & Collect order.

Your email address may also be collected via a third party in the context of the purchase of an e-gift card for your benefit. The customisable e-gift card is sent exclusively by email to the recipient's email address provided by the purchaser at the time of purchase. It is a unique code that can be printed and used immediately. This data is collected and processed solely for the purpose of sending the e-gift card, for informational purposes, and will under no circumstances be used for commercial or advertising purposes. In this context, your email address will only be retained for the period necessary to process this offer, namely until the day the unique code is used on the Site and at the latest one (1) year from its date of purchase.

Why?

The processing of this data is necessary for us to achieve the following purposes:

• Creation and management of your online customer account and shopping basket;
• Management and monitoring of your commercial relations with the ORIENTIS GOURMET Group (primarily operations relating to orders, deliveries and returns, transactions, payments and invoices, complaints, etc.);
• Sending marketing communications from us and managing your subscription to the KUSMI TEA and/or KUSMIKLUB newsletters (subscriptions and unsubscriptions), subject to your consent if you are not an existing customer.
• Management and monitoring of your membership in the KUSMIKLUB loyalty programme specific to the KUSMI TEA Site (registration and unsubscription);
• Entry into competitions, subject to your consent;
• Conducting statistical and marketing studies;
• Personalised customer service;
• Conducting customer satisfaction surveys;
• In the context of your participation in competitions or other promotional activities;
• Management of unpaid orders and disputes;
• Management of the exercise of your rights in accordance with Article 7.

Data relating to online orders

When placing any product order on our Site, we may collect, in addition to identification data, information relating to your transaction such as order number and purchase details, billing data, and payment methods and incidents.

We do not collect any information regarding your banking details (payment card numbers and details). These data are collected and processed solely by our external payment system SHOPIFY PAYMENTS. We do not store any payment card numbers. We receive from our payment system only information regarding the payment transaction. For more information about our payment service provider, please refer to our section on "Recipients" in Article 5.

Why?

The processing of this data is necessary for us to achieve the following purposes:

• Performance of the sales contract;
• Management and monitoring of your commercial relations with the ORIENTIS GOURMET Group and third-party companies operating KUSMI TEA branded stores (primarily operations relating to orders, deliveries and returns, transactions, payments and invoices, complaints, etc.);
• Conducting statistical and marketing studies;
• Personalised customer support;
• Management of your reviews on products, services or content;
• Evidence in compliance with legal and regulatory obligations (payment, warranty, disputes, etc.);
• Management of unpaid orders and disputes;
• Detection of potential abusive or fraudulent activities;
• Management of the exercise of your rights in accordance with Article 7.

Data relating to the tracking of our commercial relationship

As part of tracking our commercial relationship, we may retain all or part of the following information: documentation requests, product purchased, service or subscription taken out, quantity, amount, frequency, delivery address, history of purchases and services provided, product returns, origin of the sale (salesperson, representative, partner, affiliate) or order, correspondence with you and after-sales service, communications and comments.

Why?

The processing of this data is necessary for us to achieve the following purposes:

• Personalised customer follow-up;
• Management of your reviews on products, services or content;
• Improvement of our offers, services, and products;
• Conducting customer satisfaction surveys;
• Conducting statistical, marketing and behavioural studies (profiling);
• Management of the exercise of your rights in accordance with Article 7.

Browsing data

During each of your visits to our Site, we may indirectly and automatically collect information relating to the devices on which you use our Site or the networks from which you access our Site, such as your IP addresses, connection data, types and versions of internet browsers used, operating systems and platforms, data regarding your browsing journey on our Site, notably your path through the various URL pages of our Site, the content you access or view, the search terms used, the viewing duration of certain pages, your device's advertising identifier, and your interactions with the page. Among the technologies used to collect this information, we specifically use cookies. To learn more about this, please refer to our paragraph on "Cookies" in Article 6.

Why?

The processing of this data is necessary for us to achieve the following purposes:

• Providing customers with a personalised experience on our Site, in particular by facilitating their browsing or personalising advertisements;
• Optimisation of the operation of our Site;
• Conducting statistical, marketing and behavioural studies (profiling);
• Management of the exercise of your rights in accordance with Article 7.

Usage data for social media features

Should you choose to use the social media features available on our Site (“Facebook Connect” and “Google +”), the ORIENTIS GOURMET Group will have access to certain data (in particular, your first and last name, email address, contacts) from your account on that social network in accordance with the terms of use of the relevant platform. We may also collect certain data when you interact with features of these social networks, such as “Facebook Messenger” or via the Facebook analytics tool (the “Facebook pixel”) used to track your activity while browsing our Site. For more information on how your data is used by these social networks, please refer to our section on “Recipients” in Section 5.

Why?

The processing of this data is necessary for us to achieve the following purposes:

• Providing the customer with a personalised experience on our Site, in particular by facilitating their navigation;
• Sending targeted advertising tailored to your interests;
• Conducting statistical, marketing, and behavioural studies;
• Management of the exercise of your rights in accordance with Article 7.

2.2 Specific information regarding targeted advertising, newsletter distribution, and SMS

Subject to your express consent, the ORIENTIS GOURMET Group uses certain data to send you newsletters, communications about news and promotional offers for our KUSMI TEA brands and products that may be of interest to you, notably by email, SMS, or mobile notification, as well as targeted advertisements directly on social media platforms or third-party sites for marketing purposes.

By way of exception to the foregoing and in accordance with applicable personal data regulations in force, the ORIENTIS GOURMET Group may send you marketing communications by electronic means without your prior consent provided that you are already an existing customer, that you did not object to receiving marketing communications at the time of completing your purchase (online and/or in store), and that the marketing relates to products or services similar to those already provided by the ORIENTIS GOURMET Group.

Regarding promotional emails: You can subscribe to the KUSMI TEA newsletter to receive information on brand news and events, our products, the Site and its partners in one of the following ways:

• by entering your email address in the dedicated field under the heading "Sign up to our newsletter to receive your exclusive code" from the Site's homepage or in the designated areas on the "Advice" page
• by entering your email address in the dedicated field in the Site footer under the heading “Sign up and enjoy all our offers and new products.”
• by ticking the box "I subscribe to the Newsletter to receive exclusive offers and the latest news." when registering for the "KusmiKlub" loyalty programme

You may withdraw your consent at any time and unsubscribe from the KUSMI TEA newsletter by clicking on the unsubscribe link located at the bottom of each newsletter and entering your email address.

Regarding promotional SMS: You can subscribe to KUSMI TEA SMS campaigns to receive information on KUSMI TEA news and events by ticking the box "I wish to receive offers by SMS." when registering for the "KusmiKlub" loyalty programme

You may opt out at any time by sending the words "Stop SMS" to the number indicated in each SMS sent by ORIENTIS GOURMET.

Furthermore, after browsing our Site, you may receive an email even though you did not directly provide your email address to the ORIENTIS GOURMET Group. This is only possible subject to your express consent. Indeed, we use service providers to identify, using cookie technology, Internet users who have visited our Site and to send them personalised emails. These service providers have undertaken to obtain, under their own responsibility, your email address via their partners who have already lawfully collected your address and to whom you have expressly consented to receiving advertising from third parties. Your data is collected only in encrypted, unreadable form. If you no longer wish to receive emails, you can unsubscribe at any time by clicking the unsubscribe link provided in each of these communications or by contacting us as set out in Section 7 below.

Finally, we also use service providers to send emails in the event of an abandoned shopping basket. These providers use cookie technology to capture the email address you entered, with your consent, when creating your account on our Site. For more information, please refer to Section 6 on “Cookies”.

Regarding targeted advertising:

• On social media platforms: subject to your express consent, your email address may be shared in hashed form with Facebook for the purpose of communicating promotional offers via the Facebook Custom Audiences service ("Facebook Custom Audiences"). This service allows us to collect anonymised information, including age, gender, device platform, and interests, and to create customer lists to serve them targeted advertising, including on their Facebook page. The hashed information does not allow Facebook to use it for any purpose other than identifying an existing customer on Facebook and sending them targeted advertisements. You can object to this processing at any time by configuring the advertising settings of your account or by contacting us according to the procedures described in Article 7 below.
• On third-party websites: through the use of cookies, we may send you targeted advertising on partner third-party websites.

To find out more, and in particular how to manage your consent, please refer to Section 6 on “Cookies”.

2.3 Specific information regarding data concerning minors

The offers available on our Site are not targeted at and are not intended for children within the meaning of Article 8 of Regulation 2016/679. By using our Site, you therefore certify that you are of legal age to consent on your own to the processing of personal data; otherwise, please do not use our Site without prior parental authorisation.

Consequently, the ORIENTIS GOURMET Group declines all liability in the absence of such authorisation.

The ORIENTIS GOURMET Group needs to process certain data concerning you to the extent that it is, depending on the case:

• necessary for the performance of a sales contract or provision of services, or pre-contractual measures taken at your request (for example, to process your order),
• necessary for compliance with legal or regulatory obligations (for instance for billing purposes),
• necessary for the purposes of the legitimate interests pursued by the ORIENTIS GOURMET Group or a third party, provided that your interests do not override them (for example, for transaction security purposes or for the analysis, optimisation, and personalisation of our online offers),
• collected with your prior consent (for example, to send you a newsletter to which you have subscribed).

Regardless of the processing involved, the ORIENTIS GOURMET Group only processes your data within the limits laid down by applicable regulations.

Your data are retained for the period during which you use our services, and deleted no later than three (3) years from our last contact (such as your last purchase, or your last click on a hyperlink contained in an email), unless such data are anonymised, in particular for statistical purposes, or unless you have given your consent for a longer retention period.

By way of exception, data enabling the proof of a right or a contract to be established, or retained to comply with a legal obligation, may be subject to an intermediate archiving policy for a period not exceeding that necessary for the purposes for which they are retained, in accordance with applicable provisions (including, but not limited to, those provided for by the French Commercial Code, Civil Code, and Consumer Code).

If you exercise your rights under the conditions provided for in Article 7 of this Policy, and in accordance with applicable regulations, identity document data may be retained for one (1) year and other relevant data collected in this context may be archived for three (3) years.

Finally, the information stored in your device (e.g. cookies) or any other element used to identify you and enable your tracking, as well as raw traffic data associated with an identifier, will only be kept for a maximum period of thirteen (13) months. Beyond this period, your data is either deleted or anonymised.

Your data may only be disclosed to the following recipients or categories of recipients, within the limits of their respective responsibilities and to the extent that such transmission is strictly necessary to fulfil the purposes set out in Article 2 of this Policy:

• Authorised personnel within the accounting, marketing, customer service, sales, administrative, logistics, and IT departments of the ORIENTIS GOURMET Group, as well as their line managers;
• Third-party companies operating stores under the KUSMI TEA banner;
• Persons responsible for internal and external audit missions;
• Hosting and maintenance providers for customer/prospect database(s);
• Subcontractors, service providers, and external companies involved in performing sales contracts, CRM activities, personalising Site content and producing advertising content, executing financial transactions, dispatching orders, providing the chat service, and conducting statistical, marketing, and behavioural studies. These entities are required, to the same extent as the ORIENTIS GOURMET Group itself, to ensure data protection.

All persons under our responsibility and companies authorised to access your personal data are bound by a duty of confidentiality.

You are informed that your personal data may be transferred outside the European Union to the US subsidiary ORIENTIS DISTRIBUTION Inc. and its sub-subsidiaries, all located in the United States. In order to ensure your personal data receives a level of protection equivalent to that provided by applicable European regulations, ORIENTIS GOURMET has entered into an agreement with its US subsidiary ORIENTIS DISTRIBUTION Inc. in accordance with standard contractual clauses approved by the European Commission and the CNIL.

We may also disclose your data in order to comply with legal or regulatory requests, court decisions, subpoenas or legal proceedings, if required by applicable regulations, as well as in the event that the ORIENTIS GOURMET Group or one or more of its subsidiaries transfers all or part of its assets to a third party.

Under no circumstances does the ORIENTIS GOURMET Group sell or rent your personal data to third parties for marketing purposes relating to their own activities.

Social media: With regard to information collected during the use of social media features (in particular Facebook and Google+), please be advised that such use may lead to data exchanges between the ORIENTIS GOURMET Group and the said social networks. Certain information about you may be transferred to a country other than your country of residence, including outside the European Union. We invite you to consult their privacy policies to learn about the purposes of use, particularly advertising, of the browsing data these social networks may collect through their features. If you do not wish these social networks to collect information about you while browsing the Site, we advise you to log out of these social networks before visiting our Site. You may also manage your privacy preferences directly within the social media tools.

Payment Service Providers:

SHOPIFY PAYMENTS: All payment stages are carried out via our payment system SHOPIFY PAYMENTS, a PCI-DSS Level 1 certified service provider (confirmed by the appearance of "https" in your browser's address bar), to ensure payment security. This system is fully encrypted and protected. SHOPIFY PAYMENTS does not store card numbers after transmitting the payment transaction to ORIENTIS GOURMET. 

The processing and storage of banking data are carried out by the payment processor appointed by Shopify Payments, namely STRIPE PAYMENTS EUROPE, LTD. (a company governed by Irish law). This data is stored in encrypted form for the period strictly necessary for customer relationship management, which may not under any circumstances exceed three (3) years from your last order, in accordance with applicable regulations.

ORIENTIS GOURMET only receives information regarding the payment transaction. For more information, please consult SHOPIFY INTERNATIONAL LIMITED’s Terms of Use and Privacy Policy.

ALMA: Secure payment system allowing you to pay in three (3) instalments free of charge. Alma may collect the following personal data from us: first name and surname, email address, delivery and billing address(es), delivery method (carrier used), bank details, telephone number, date of birth, shopping cart contents, and purchase history at Kusmi Tea. For more information, please consult the ALMA Privacy and Data Management Policy.

The Service Provider for our customer service: Regarding information collected during the use of our customer service, we inform you that our service provider, WE CALL, may collect conversational data and, where applicable, disclose this data to third parties in the event of a legal obligation or where these third parties process data on behalf of WE CALL. You can disable the use of cookies by selecting the appropriate settings in your browser. However, doing so may prevent the use of certain features on the Site. By using our Site, you expressly consent to the processing of your personal data by WE CALL under the conditions and for the purposes described in this Privacy Policy.

               The Service Provider for the delivery of your order: As part of managing the delivery of your order, our partner SHIPUP is required to process your data (surname, first name, telephone number, email address, postal address (street and number, postal code, city, country), ordered product(s), and order date) for the following purposes: a) sending notifications by email, text message (SMS), or other appropriate communication methods regarding the status of your order as well as the availability and/or shipping of your order; b) accessing a tracking page for your order; c) sending optional satisfaction surveys by email and/or text message (SMS) or other appropriate communication methods. For more information, please consult the SHIPUP Privacy Policy.

The Service Provider for sending emails: In the context of sending our email campaigns, our partner KLAVIYO may process your personal data (first name, surname, email, address, telephone number) and connection data (IP address; login; cookies) for the purposes of executing and managing lead acquisition campaigns. For more information, please consult the Klaviyo Privacy Policy.

6.1 Use of cookies

Definition of the term "cookie"

Cookies are used to facilitate browsing on our Site and to streamline registration or audience measurement procedures. Cookies are text files placed on your device (your computer's hard drive, tablet, or smartphone) by a web page server. Your computer is likely configured to accept cookies. You may, however, change this setting so that it rejects them, and we suggest doing so if the use of cookies concerns you.

When you visit our Site to search for, read or download information, the ORIENTIS GOURMET Group collects and stores certain “visitor information” about you, such as the domain name and host computer from which you access the Internet, its Internet Protocol (IP) address, the date and time of your visit to our Site, as well as the URLs from which you arrived at the Site. You must consent to this in order to select your country of purchase, place an order and save your selection in the shopping basket. The ORIENTIS GOURMET Group also uses this information to analyse and measure traffic on our Site and to target advertisements matching your interests.

If you do not want the ORIENTIS GOURMET Group to collect this type of information, we recommend that you do not browse our Site.

The different types of cookies we use 

Here are the different types of cookies used on our Site:

• Necessary Cookies: these cookies are strictly necessary for the operation of our Site and are therefore mandatory. They help make the Site usable by enabling basic functions such as page navigation and access to secure areas of the Site. The Site cannot function properly without these cookies.

• Preference Cookies: these cookies are also mandatory. They allow the Site to remember information that changes the way the site behaves or looks. They are linked to the inherent functionalities of the Site and allow you to browse our Site, simplify navigation, use its features, and save your preferences (such as how the shopping cart works, management of the purchasing process, logging into your personal account, or your language choices and the region in which you are located).

• Statistical cookies: they allow for the collection of anonymous statistical data relating to traffic on our Site. This service is provided on our behalf by GOOGLE ANALYTICS 4. The information generated by this type of cookie is generally transmitted to a Google server in the United States, where it is stored. For more information on Google's use of your data, settings, and opt-out options, please refer to Google's terms of service.

• Marketing and advertising cookies: these cookies are used to track visitors across the Site. They are used to send you targeted and personalised advertisements. They allow us to measure the effectiveness of our advertising campaigns and to adjust our communications according to your needs and interests. Social Media cookies are also collected and allow you to connect to your social networks and share content from our website. When a user accesses our Site via a social network user account (including Facebook or Google+), the social network transmits the public data relating to the user's profile to the ORIENTIS GOURMET Group via its cookies. For more information on the use of your data by these social networks or to manage your privacy preferences, please refer directly to their privacy policies. Information collected and processed in this context may be shared with other sources. The ORIENTIS GOURMET Group uses the services of the following providers:

- GOOGLE ADWORDS. To find out more, click here.

- GOOGLE ANALYTICS 4. To find out more, click here.

- CRITEO. To find out more, please click here.

Cookie management by the user

You may modify your preferences at any time via the Cookie consent tool on our Site, accessible by clicking on this link.

You may also exercise your choices across different browsers by consulting the following pages:

• Internet Explorer™: http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies
• Safari™: http://www.apple.com/support/mac-apps/safari/
• Chrome™: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
• Firefox™: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
• Opera™: http://help.opera.com/Windows/10.20/fr/cookies.html

You may also set your browser to send a code indicating to websites that you do not wish to be tracked ("Do Not Track" option). For:

• Internet Explorer™: http://windows.microsoft.com/fr-fr/internet-explorer/use-tracking-protection#ie=ie-11
• Safari™: http://support.apple.com/kb/PH11952
• Chrome™: https://support.google.com/chrome/answer/114836?
• Firefox™: https://support.mozilla.org/fr/kb/comment-activer-option-ne-pas-pister
• Opera™: http://help.opera.com/Windows/12.10/en/notrack.html

You can also connect to the Youronlinechoices website. This European platform is shared by hundreds of online advertising professionals and provides a centralised interface allowing you to express your rejection or acceptance of cookies that may be used to adapt advertisements that may be displayed on your device to your browsing: http://www.youronlinechoices.com/uk/your-ad-choices.

The ORIENTIS GOURMET Group informs you that this procedure will not prevent advertisements from being displayed on the websites you visit. It will only block technologies that allow advertisements to be tailored to your interests.

The settings you choose may alter your internet browsing and your conditions of access to our Site. The ORIENTIS GOURMET Group accepts no liability for consequences related to the degraded operation of our Site resulting from the ORIENTIS GOURMET Group being unable to record or access the collected data necessary for the operation of our Site that you have rejected or deleted.

6.2 Use of web beacons

A web beacon is an invisible image file that tracks your browsing on our Site or across a series of websites. Some web pages on our Site may contain web beacons. We use these beacons primarily to count the number of visitors to our Site and to provide the ORIENTIS GOURMET Group with a number of metrics.

These web beacons may be used with certain service providers, in particular to measure and improve the effectiveness of our Site.

In any event, the information obtained via these tags is strictly anonymous and simply allows us to gather statistics on visits to certain pages of our Site, in order to better serve our Site customers.

Under the conditions and limits provided for by applicable regulations, you have several rights regarding the processing of your data:

• The right to be informed about our use of your personal data.
• The right to access the personal information we hold about you.
• The right to request the correction of inaccurate personal information we hold about you (which you can also do directly in the "my account" section where available).
• The right to request that we delete your data, or that we stop processing or collecting them, under certain circumstances.
• The right to withdraw your consent, where applicable, to receive updates from us and to object to the processing of your data (in particular for sending direct marketing messages).
• The right to request that we provide your data to you or transfer it to another service provider (right to "portability").
• The right to lodge a complaint with the national supervisory authority responsible for personal data protection (in France, this is the CNIL, Commission nationale de l'informatique et des libertés, whose website can be accessed here).

To exercise your rights, please submit your request via the rights exercise form available here.

Please specify your first name and surname, physical and/or electronic contact details, as well as, where applicable, your customer reference on our Site.

To stop receiving marketing messages from the ORIENTIS GOURMET Group, you may also click on the unsubscribe link included in each of our messages.

The ORIENTIS GOURMET Group reserves the right to request proof of identity where appropriate.

The ORIENTIS GOURMET Group undertakes to reply to you as soon as possible, and in any event within one (1) month from receipt of your request.

If necessary, this period may be extended by two (2) months, depending on the complexity and number of requests addressed to us. In this case, you will be informed of this extension and the reasons for the postponement.

If your request is submitted electronically, the information will also be provided to you electronically where possible, unless you expressly request otherwise.

If we are unable to process your request, we will inform you of the reasons, and you will have the option to lodge a complaint with a supervisory authority and/or seek a judicial remedy.

All of your personal data is stored on the servers of the hosting provider SHOPIFY INTERNATIONAL LIMITED located within the European Union.

The ORIENTIS GOURMET Group has implemented technical and organisational measures to preserve the confidentiality and security of your data and, in particular, to prevent it from being altered, damaged, destroyed, or accessed by unauthorised third parties.

However, you will readily understand that the ORIENTIS GOURMET Group does not control all the risks associated with the operation of the Internet and that no technology is 100% secure. You are therefore informed of the existence of potential risks inherent to the use and operation of our Site, which are beyond our control and efforts.  

If you choose to create an account on our Site, you must ensure that your password remains strictly confidential. You undertake to notify the ORIENTIS GOURMET Group of any unauthorised use of your username and password, and of your wish, where applicable, to delete your account. The ORIENTIS GOURMET Group cannot be held liable for any consequences resulting from unauthorised use of your account.

The Data Protection Officer for the ORIENTIS GOURMET Group is the law firm SIMON ASSOCIES, who can be contacted at the following email address: dpo@orientis.fr – for any query other than requests to exercise your data protection rights, which must be submitted via the dedicated form (see Section 7 above).

The ORIENTIS GOURMET Group reserves the right to amend or update this Privacy Policy at any time. Any change or update will take effect immediately upon being published on our Site.

In the event that these changes appear significant to us, we will not fail to keep you informed and seek your consent if required by applicable regulations.

ORIENTIS GOURMET is subject to the applicable rules regarding personal data protection, and, in particular, the European General Data Protection Regulation No. 2016/679 of 27 April 2016 (known as "GDPR"), as well as all national legal rules enacted in application thereof, on a subsidiary basis.

In the event of a dispute and where an amicable settlement cannot be reached, the competent court shall be determined in accordance with the applicable rules of procedure.

ORIENTIS GOURMET SAS - 89 avenue Niel 75017 Paris (France) - RCS Paris 350 283 057

Date of last update: 23/03/2026.