Shan Steep
42/A Inya Road
Kamayut Township
Yangon, Myanmar
Phone: +95 1 523 847
Email: [email protected]

At Shan Steep, we are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website or use our services.

We believe in your right to understand exactly how your data is handled, and we strive to be clear and straightforward in our practices.

Last updated: November 30, 2025

Information We Collect

How We Use Your Information

We use the information we collect for the following purposes:

• • Service Provision: To respond to your inquiries, provide the services you request, and facilitate tea sourcing connections
• • Communication: To communicate with you about our services, respond to questions, and provide updates relevant to your interests
• • Website Improvement: To analyze website usage patterns, improve functionality, and enhance user experience
• • Marketing: To send you information about our services that may interest you, subject to your consent where required
• • Legal Compliance: To comply with legal obligations, protect our rights, and ensure the security of our services
• • Research and Development: To develop new services and improve our understanding of tea sourcing needs

Legal Basis for Data Processing

We process your personal data based on one or more of the following legal grounds:

• • Consent: When you have given explicit consent for specific data processing activities
• • Contract Performance: When processing is necessary to fulfill services you have requested
• • Legitimate Interests: When we have a legitimate business interest that does not override your privacy rights
• • Legal Obligation: When we are required by law to process your information

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• • Service Providers: With trusted third-party service providers who assist us in operating our website and providing services, subject to confidentiality obligations
• • Business Partners: With tea producers and industry partners when facilitating sourcing connections, with your consent
• • Legal Requirements: When required by law, court order, or governmental authority, or to protect our legal rights
• • Business Transfers: In connection with any merger, sale of assets, or acquisition, subject to continued protection of your information

We ensure that any third parties we share data with are committed to protecting your privacy and comply with applicable data protection regulations.

How We Protect Your Information

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• • Encryption: We use encryption for data transmission and storage where appropriate
• • Access Controls: We limit access to personal information to authorized personnel only
• • Regular Monitoring: We monitor our systems for potential vulnerabilities and security incidents
• • Secure Storage: We maintain secure data storage systems with regular backups

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining robust protection measures.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

When we no longer need your personal information, we will securely delete or anonymize it. Retention periods vary depending on the type of information and the purpose for which it was collected, typically ranging from one to seven years for business records and communications.

Your Privacy Rights

You have important rights regarding your personal information. Depending on your location, these may include:

• • Right to Access: You can request a copy of the personal information we hold about you
• • Right to Rectification: You can request that we correct inaccurate or incomplete information
• • Right to Erasure: You can request that we delete your personal information in certain circumstances
• • Right to Data Portability: You can request a copy of your data in a commonly used, machine-readable format
• • Right to Object: You can object to certain types of data processing, including direct marketing
• • Right to Restrict Processing: You can request that we limit how we use your information
• • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• • Avoid filling out contact forms, account registrations, or any data-submitting features
• • Disable cookies through your browser settings (see our Cookie Policy for more details)
• • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided at the top of this page. We will process your request promptly in accordance with applicable data protection laws.

International Data Transfers

Our services are operated from Myanmar, and your information may be transferred to, stored, and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information when it is transferred internationally, in compliance with applicable data protection laws.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate parental consent, we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting a notice on our website or by other appropriate means. We encourage you to review this Privacy Policy periodically. The date at the top of this policy indicates when it was last updated.