Privacy statement
How Socialitea handles your personal data.
Last updated: 23 October 2026
Who are we?
Socialitea is a trading name of Back2Basic Lifestyle BV, Zuivelstraat 45, 1445 MJ Purmerend, the Netherlands (Chamber of Commerce 56626916). We are the controller of your personal data on socialitea.com. Questions or requests about privacy? Email info@socialitea.com.
What data do we process, and why?
Account. Your email address, your password (stored encrypted), your name, your 'About me' text and your settings. Needed to make your account work (performance of the contract).
What you share. Notes, photos, taste tags, favourites, who you follow and who you block. Notes and photos are publicly visible. Your name, 'About me' and your number of notes and followers are visible to signed-in members. Your favourites only if you switch that on.
Chat messages. Only visible to the participants of the conversation. We don't read chats. If someone reports a message, we only see that reported message.
Reports. When you report something, we store what you reported, the reason and your account, so we can handle the report (legitimate interest: a safe community).
Herbal Tea Finder (health data). What you write about your complaints and your answers about pregnancy, breastfeeding and medication are health data. We only use them with your explicit consent, once, to find a matching recipe. For this they are sent to our AI service and then not stored by us. We only keep which recipe it was and when you gave consent. Your consent applies per search; without consent you can't use the finder.
AI pairing. What you type (a dish or a tea) is sent to our AI service to create a suggestion. We don't store your question, only that you used the feature (for your credit).
Payments. Payments are handled by Mollie; we don't see or store bank or card details. We keep the payment reference, product, amount, status, and the time and text of your consent to immediate delivery. By law we must keep payment records for 7 years (tax retention obligation).
Tastings. If you register for a tasting, we store which tasting, the status, your language and, for paid tastings, the payment reference. If you join the waiting list, we keep that until the tasting is over. We use your name and email address for the confirmation, the reminder, a message when a place becomes free and any changes.
Gift cards and discount codes. If you buy a gift card, we store the amount, the code, the recipient's name, your own name and your personal message as you enter them, and if it is sent by email, the recipient's email address and the sending date. We use that email address only to send the gift card. If you redeem a gift card, we store that your account redeemed it, the balance and what you paid with it. If you use a discount code, we store which code and how much discount you received. This is needed to deliver the gift card and your order (performance of the contract). We keep this data while the gift card is valid and afterwards as payment records.
Newsletter. Your email address, language, status and when you confirmed your subscription. This includes invitations to new tastings. Only with your consent; you can unsubscribe at any time via the link in every email.
Push notifications. If you turn on notifications, we store the address your browser creates for this. For a new chat message we send the sender's name and the start of the message, encrypted, through the notification service of your browser or phone (such as Google, Apple or Mozilla). You can turn them off at any time in the chat or in your browser.
Technical data. Our hosting and database temporarily log technical data for security, such as your IP address and browser.
What do we store on your device?
We don't use tracking or advertising cookies and no visitor analytics. In your browser we only store what's needed: your sign-in session, your language and, if you're not signed in, your favourites. No consent is required for this.
Who do we share data with?
We never sell your data. We work with these processors, who only process your data on our behalf:
Supabase: database, sign-in, photo storage and server functions (servers in Frankfurt, EU). Hostinger: website hosting. Mollie: payments (the Netherlands). Resend: sending emails. Anthropic: the AI behind the pairing, pairing recipes, the Herbal Tea Finder and the newsletter. According to Anthropic's terms, data received through their API is not used to train AI models.
Resend and Anthropic are US companies, so data may be processed outside the EU. This happens with appropriate safeguards, such as the European Commission's standard contractual clauses.
For fonts and a software library, the site loads files from Google Fonts and jsDelivr. They see your IP address when this happens.
How long do we keep your data?
Account data, notes, photos, favourites and chats: as long as your account exists. If you delete your account, we erase this data immediately. Payment records: 7 years (legal obligation). Newsletter: until you unsubscribe; proof of your subscription is kept as long as needed to demonstrate your consent. Reports: up to 12 months after handling. Health data from the Herbal Tea Finder: not stored.
Your rights
You have the right to access, correct and erase your data, to restrict and object to processing, and to data portability. You can withdraw your consent at any time. Send your request to info@socialitea.com; we respond within one month. You can delete your account yourself: My profile → Edit profile → Delete account. This immediately erases your profile, notes, photos, favourites, chats, followers, purchased recipes, reports and newsletter subscription. Payment records are kept for 7 years without a link to your account. If you use the same login for another Back2Basic Lifestyle BV service, only that login remains.
If you're not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or the authority in your own country.
Age
Socialitea is intended for people aged 16 and over.
Security
All connections are encrypted (https). For each piece of data it is defined who may see it, so that, for example, only the participants of a chat can read its messages.
Changes
We may update this privacy statement. The date at the top shows when it was last changed. We'll let you know about major changes.