Last updated: March 2026
This Privacy Policy explains how Geralt ME LLC, the exclusive distributor of Newby Teas London in the United Arab Emirates (“we”, “us”, “our”), collects, uses, stores and protects personal data when you access or use www.newbyteas.ae (the “Website”).
We are committed to handling personal data responsibly, transparently and securely, in accordance with applicable UAE data protection legislation, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
By using this Website, you acknowledge that you have read and understood this Privacy Policy.
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we recommend reviewing it periodically to stay informed.
1. Who We Are
The entity responsible for the processing of personal data is:
Geralt ME LLC
Exclusive Distributor of Newby Teas London in the UAE
Trade Licence No.: 582518
VAT No.: 100243416300003
Address: 2001 Vision Tower, Business Bay, Burj Khalifa District, Dubai, UAE
P.O. Box 124678
Email: e-boutique@newbyteas.ae
Contact Form: https://www.newbyteas.ae/pages/contact
2. Scope of this Privacy Policy
This Privacy Policy applies to personal data collected through:
- Your use of the Website and its features
- Orders placed online whether as a guest or registered user
- Communications with our Customer Care team
- Subscription to newsletters or promotional communications
- Interactions connected to the operation and security of the Website
Additional privacy notices may apply to specific services or promotions and will be provided where relevant.
3. What Personal Data We Collect
Personal data means any information that identifies, or can reasonably be linked to, an identifiable individual.
Depending on how you interact with us, we may collect:
- Name and contact details (including email address and phone number)
- Billing and delivery addresses
- Order and purchase information
- Account login credentials (where applicable)
- Communications sent to our Customer Care team
- Newsletter subscription details
- Technical and usage information related to Website access
We do not intentionally collect sensitive personal data (such as health, religious beliefs, biometric or genetic data) and kindly ask that such information is not submitted through our Website or communication channels.
4. How We Collect Personal Data
We collect personal data through:
- Information you provide directly when placing an order, creating an account or contacting us
- Automated technologies such as cookies and similar tools when you browse our Website
- Service providers acting on our behalf in connection with payments, deliveries or communications
5. Purposes and Legal Basis Processing
We process personal data only where permitted under UAE law, for the following purposes:
Order Fulfilment and Account Administration
To process payments, fulfil orders, arrange delivery and manage customer accounts.
Legal basis: Performance of a contract.
Customer Support
To respond to enquiries, requests and after-sales service communications.
Legal basis: Legitimate business interests.
Marketing Communications
To send newsletters and promotional communications where you have chosen to receive them.
Legal basis: Your consent.
You may withdraw your consent at any time.
Website Functionality and Security
To operate, maintain and secure the Website, prevent misuse and detect fraudulent activity.
Legal basis: Legitimate business interests.
Legal and Regulatory Compliance
To comply with applicable legal, tax and regulatory obligations.
Legal basis: Legal obligation.
6. Payment Information
Payments made on www.newbyteas.ae are processed through authorised payment service providers.
- We do not store full payment card details
- Payment information is handled securely by our payment processors in accordance with industry standards
7. Sharing of Personal Data
We do not sell or commercially exploit personal data.
Personal data may be shared only where necessary, including with:
- Courier and delivery partners for order fulfilment
- Payment service providers for transaction processing
- Email marketing platforms where you have opted to receive communications
- Technical and IT service providers supporting Website operations
All such parties are required to process personal data securely and only for specified purposes.
In limited circumstances, personal data may also be disclosed where required by law, regulation or a lawful request from a competent authority, or in connection with the protection of our legal rights.
8. International Transfers
Some service providers used in connection with our Website or communications may process personal data outside the United Arab Emirates.
Where international transfers occur, we take appropriate measures to ensure that personal data remains protected in accordance with UAE data protection requirements.
9. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including compliance with legal and accounting requirements.
- Order and transaction records are retained in accordance with UAE law
- Customer service communications are retained for up to two (2) years
- Marketing data is retained until you withdraw your consent
You may request deletion of personal data where legally permissible.
10. Data Security
We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse or disclosure.
While we take reasonable steps to protect information transmitted through the Website, no online system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and device security.
11. Cookies and Similar Technologies
We use cookies and similar technologies to support Website functionality, analyse usage and improve user experience.
Cookies do not provide access to your device or personal information beyond what you choose to share. You may manage or disable cookies through your browser settings. Please note that restricting cookies may affect certain Website features.
Additional information may be provided through a cookie consent banner displayed on the Website.
12. Children's Privacy
The Website and our products are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will take steps to delete it promptly.
13. Your Rights Under UAE Law
In accordance with the UAE Personal Data Protection Law, you may have the right to:
- Request access to personal data we hold about you
- Request correction or updating of inaccurate information
- Request deletion of personal data where applicable
- Withdraw consent for processing based on consent
- Object to or restrict certain processing activities
- Request information about how your personal data is used
Requests can be submitted by contacting e-boutique@newbyteas.ae. We will respond within a reasonable timeframe and in accordance with applicable law.
14. Updated to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Any updates will be published on this page with a revised effective date.
15. Contact Us
If you have any questions or concerns about this Privacy Policy or our handling of personal data, please contact:
Geralt ME LLC
Email: e-boutique@newbyteas.ae
Website Contact Form: https://www.newbyteas.ae/pages/contact