Privacy Policy – Infusea

This Privacy Policy explains how Infusea by Linden Nexa (“we”, “us”, “our”) collects, uses, discloses, and safeguards personal information when you visit our website and purchase our loose-leaf teas and herbal infusions (the “Site” or the “Services”). Please read it carefully. If you do not agree with our policies and practices, do not use the Site. By using the Site, you accept the practices described in this policy.

1. Who We Are

Brand name: Infusea;
Company Name: Linden Nexa;
Contact email: sales@lindennexa.com

2. Information We Collect

We collect information you provide directly and information collected automatically when you use the Site.

Account and contact information: name, email address, billing and shipping address, phone number.

Order and payment data: products ordered, order history, payment card information processed by our payment processors (we do not store full card numbers).

Customer service and communications: messages you send us, support tickets, reviews, and survey responses.

Technical information: IP address, device identifiers, browser, operating system, pages visited, referral URL, and diagnostic data collected via cookies and similar technologies.

Marketing preferences: whether you opt in to receive newsletters, promotions, and transactional emails.

3. How We Use Your Information

We use personal information for the following purposes:

To process and fulfill orders, handle returns, exchanges, refunds, and send order confirmations and shipping updates.
To communicate with you about products, promotions (if you opt in), and customer support issues.
To provide, maintain, and improve the Site, analyze usage, and develop new features.
To detect, investigate, and prevent fraudulent or illegal activity and to protect our rights and property.
To comply with legal obligations and respond to lawful requests by public authorities.

4. Legal Bases for Processing (Indian users)

We process your personal data only when permitted under applicable Indian law, primarily the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

The main legal bases we rely on are:

Consent
We process your personal data when you give us clear, informed, and voluntary consent (for example, when you create an account, place an order, subscribe to newsletters, or opt in to marketing communications). You can withdraw consent at any time.
Performance of a Contract
We process your data to fulfil our contract with you — such as processing and delivering your orders, managing payments, and providing customer support.
Compliance with Legal Obligations
We process data when required by law, including tax, accounting, consumer protection, or regulatory requirements.
Legitimate Use
We may process data for purposes permitted under the DPDPA as “legitimate use,” including:
- Employment-related purposes (if applicable)
- Medical emergencies or public health
- Credit scoring or fraud prevention
- Any other purpose expressly allowed under the Act
Protection of Vital Interests
We may process data to protect your life or the life of another person in an emergency.
Public Interest or Official Functions
Where processing is necessary for any function of the State or in the public interest as permitted by law.

If you are in India and would like more details on how we rely on these bases for specific processing activities, or if you wish to exercise your rights, please contact us at sales@lindennexa.com

5. Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

6. Cookies and Similar Technologies

We and our third-party partners use cookies, web beacons, and similar technologies to collect technical and usage information to operate and improve the Site, provide relevant advertising, and analyze traffic. You can control cookies via your browser settings and opt out of certain tracking through cookie banners or privacy controls.

7. Sharing Your Information

We may share information with:

Service providers who perform services on our behalf (payment processors like Stripe or PayPal, shipping carriers, email and marketing platforms, and analytics providers).

Courts, law enforcement, or government authorities when required by law or to protect our rights.

Third parties involved in a corporate transaction (merger, sale, asset transfer) with notice to you where required.

Other users when you post product reviews or other content publicly on the Site.

8. International Transfers

If we transfer personal data across borders (for example, to vendors located in the United States), we will protect it in accordance with this Privacy Policy and applicable law. For transfers from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms as required.

9. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

Order and transaction records: 6 years (or as required by local tax and accounting laws).

Account information for active customers: as long as the account is active and for a reasonable period after closure to handle disputes.

Marketing consents and preferences: until you unsubscribe or withdraw consent.

10. Your Rights and Choices

Subject to local law, you may have rights including:

Access: Request a copy of personal data we hold about you.

Rectification: Request correction of inaccurate or incomplete data.

Deletion: Request deletion of your personal data (subject to legal/contractual exceptions).

Restriction or objection: Object to or request restriction of certain processing (e.g., marketing).

Withdraw consent: Where processing is based on consent, withdraw consent at any time.

To exercise these rights, contact us at the email address listed above. We may ask you to verify your identity before responding. You may also lodge a complaint with your local data protection authority if you believe we have violated applicable law.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data. While we strive to protect your information, no security measure is perfect or impenetrable; we cannot guarantee absolute security. We will notify you and regulators of data breaches when required by law.

12. Children’s Privacy

Our Site is not directed to children under 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe we collected information from a child, contact us and we will take steps to remove the data.

13. Third-Party Links and Services

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. When we make material changes, we will post a notice on the Site and update the “Effective Date” at the top of this policy. Your continued use of the Site after changes indicates acceptance of the updated policy.

15. Contact Us

If you have questions, requests, or complaints about this Privacy Policy, contact:

Email: infusea@lindennexa.com

Effective Date: June 2026