Privacy Policy

Last updated: November 3, 2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service. It also informs You about Your privacy rights and how the law protects You.

By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation
Words with initial capital letters have meanings defined below. These definitions apply in singular and plural forms.

Definitions

• Account: A unique account created for You to access our Service or parts of it.

• Affiliate: An entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares or equity interest.

• Business (CCPA/CPRA): The Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of processing.

• CCPA/CPRA: California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020.

• Company (We/Us/Our): SJT Albuquerque LLLP, 320 Osuna Rd NE, Suite D. For GDPR purposes, We are the Data Controller.

• Consumer (CCPA/CPRA): A natural person who is a California resident.

• Cookies: Small files placed on Your device containing information about Your browsing history.

• Country: New Mexico, United States.

• Data Controller (GDPR): The entity which determines purposes and means of processing Personal Data.

• Device: Any device that can access the Service, e.g., computer, smartphone, tablet.

• Do Not Track (DNT): A signal to websites that You do not want to be tracked.

• GDPR: EU General Data Protection Regulation.

• Personal Data: Any information relating to an identified or identifiable individual.

• Service: The Website.

• Service Provider: Any person or company that processes data on behalf of the Company.

• Third-party Social Media Service: Any website or social network through which a User can log in to use the Service.

• Usage Data: Automatically collected data generated by the use of the Service.

• Website: The St. James Tearoom, accessible from www.stjamestearoom.com

• You: The individual or entity accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data
You may provide personal information including:

• Email address

• First and last name

• Phone number

• Address, city, state, ZIP/Postal code

Usage Data
Collected automatically and may include IP address, browser type, pages visited, time/date of visit, unique device identifiers, and diagnostic data.

Third-Party Social Media Services
If You log in via Google, Facebook, Instagram, Twitter, or LinkedIn, We may collect information from Your account including name, email, activity, and contacts.

Tracking Technologies and Cookies
We use cookies, beacons, tags, and scripts to track activity on Our Service. Types include:

• Necessary / Essential Cookies: Authenticate users and prevent fraud.

• Cookies Policy / Notice Acceptance Cookies: Track acceptance of cookies.

• Functionality Cookies: Remember preferences.

• Tracking and Performance Cookies: Analyze traffic and user behavior.

You can manage cookies via browser settings.

Use of Your Personal Data

We use Your data to:

• Provide and maintain the Service

• Manage Your account

• Fulfill contracts for products or services

• Contact You regarding updates, promotions, or support

• Analyze trends, improve products, and marketing campaigns

• Conduct business transfers (mergers, sales, or restructuring)

• Comply with legal obligations

Sharing Your Personal Data may occur with:

• Service Providers

• Affiliates

• Business partners

• Other users (when You voluntarily share)

• With Your consent

Retention of Personal Data

We retain Personal Data only as long as necessary for the purposes outlined:

• Account info: While active + 2 years after deletion

• Transaction data: 7 years (tax/compliance)

• Marketing preferences: Until consent withdrawn

• Usage Data & cookies: Up to 24 months

Data is securely deleted or anonymized after retention periods.

Transfer of Personal Data

Your data may be processed outside Your state or country where laws differ. We ensure adequate security controls are in place.

Data Breach Notification

In the event of a data breach affecting Your Personal Data:

1. We will notify affected users promptly.

2. We will describe the breach, data affected, and mitigation measures.

3. We will notify regulatory authorities as required.

Deleting Your Personal Data

You can request deletion of Your Personal Data at any time. Exceptions may apply if retention is required by law or for ongoing contracts.

Disclosure of Your Personal Data

• Business Transactions: Data may be transferred in mergers or acquisitions.

• Law Enforcement: Disclosure may occur as required by law or valid authority requests.

• Other Legal Requirements: To protect rights, prevent fraud, or ensure safety.

Detailed Information on Processing

Analytics: Google Analytics tracks website traffic; You can opt-out via Google’s opt-out add-on.

Email Marketing: We use Constant Contact to manage campaigns. You can opt out via unsubscribe links.

Payments: We use third-party processors (PayPal, USAePAY) for transactions. We do not store payment card details.

GDPR Privacy

Legal Basis for Processing: Consent, performance of a contract, legal obligation, vital interests, legitimate interests.

Your Rights:

• Access, correct, erase, or port Your Personal Data

• Object to processing or withdraw consent

• Complain to a Data Protection Authority

Automated Decision-Making & Profiling: We do not make decisions based solely on automated processing.

Children’s Privacy (EU/EEA): Parental consent required for users under 16.

GDPR Contact: shipping@stjamestearoom.com

CCPA/CPRA Privacy Notice (California Residents)

Rights:

• Notice, access, correction, deletion

• Opt-out of sale/sharing of Personal Data

• Limit use of sensitive data

• Not to be discriminated against for exercising rights

Minors: We do not knowingly collect information from children under 16 without opt-in consent.

Exercising Your Rights: Contact Us at shipping@stjamestearoom.com

Do Not Sell My Personal Information: You may opt-out via service buttons, browser, or industry opt-out platforms.

Links to Other Websites

We are not responsible for third-party website privacy policies.

Changes to this Privacy Policy

We may update this Privacy Policy and will notify You via email or website notice.

Contact Us

For questions or to exercise rights:
Email: shipping@stjamestearoom.com