Customer information

Privacy policy

How information connected with enquiries and orders is handled.

Draft for review · 25 September 2026

Who handles your information

Chaora Ltd is responsible for the personal information it uses to handle enquiries and customer relationships. For privacy questions or requests, email hi.matcha@chaora.co.uk or call +44 7529269724.

Before publication: confirm the controller’s postal address, service-provider list, retention schedule and any international transfer arrangements.

Information and purposes

When you contact us, you may provide your name, business, email address, phone number, delivery address and message or order details. We use this information to answer questions, prepare quotations, arrange orders and delivery, provide support and meet record-keeping obligations.

Hosting infrastructure may process technical information such as IP addresses, request times and security logs to deliver and protect the website. This version has no enquiry form, customer account or online payment fields.

Lawful bases

We rely on steps requested before a contract and performance of a contract for relevant consumer enquiries and orders; legal obligations for required records; and legitimate interests for proportionate business communications, security and handling disputes. Where consent is required, including for particular marketing or optional tracking, we obtain it and provide a way to withdraw it.

Sharing and third-party links

Relevant information may be shared with hosting and communications providers, delivery providers, payment providers used for an agreed order, professional advisers or authorities where required. We limit sharing to the purpose involved. Clicking WhatsApp opens a separate service; its provider processes information under its own privacy terms. Do not send card details or unnecessary sensitive information by message.

Retention, security and overseas processing

We keep information only for as long as needed for its purpose, contractual issues and applicable legal record-keeping requirements, then delete or anonymise it. Access should be limited to those who need the information. Where a provider processes personal data outside the UK, applicable transfer protections must be established before that processing is used.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or transfer of your information, and object to certain processing. You may withdraw consent at any time without affecting earlier lawful processing. We may need to verify your identity and normally respond within one month; statutory extensions may apply.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. Please contact us if you would like us to address a concern first.