Privacy policy

Last updated: 5 October 2026

1. Who we are

EST8 is a brand of Lekhapani Tea Company Private Limited. In this policy, "EST8", "we", "us" and "our" refer to EST8 and Lekhapani Tea Company Private Limited. EST8 operates this website and online store, including all related information, content, features, tools, products and services (the "Services"). Our corporate office is at 238A AJC Bose Road, Unit 5A, 5th Floor, PS Plush Building, Kolkata 700020, West Bengal, India.

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit or use the Services, place an order, or otherwise contact us, including by email, phone or WhatsApp. It is published in accordance with the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies to the handling of your personal data.

By using the Services, you acknowledge that you have read this Privacy Policy.

2. Personal data we collect

Personal data means information that identifies you or can reasonably be linked to you. Depending on how you use the Services, we may collect:

  • Contact details: name, billing and shipping address, phone number and email address.

  • Order information: products you view, add to cart or wishlist, buy, cancel or ask to replace, and your order history.

  • Payment information: payment method, transaction reference and payment status. Card, UPI and net-banking payments are processed by our secure payment partners, which are PCI-DSS compliant. We do not store your full card number, CVV, UPI PIN or banking passwords. For COD refunds, we collect the UPI ID or bank details you choose to give us, only to make the refund.

  • Account information: login details, preferences and settings, if you create an account.

  • Communications: messages, calls, photos and videos you send us, for example when reporting a damaged order.

  • Reviews and feedback you submit.

  • Device and usage information: IP address, browser and device type, pages visited and how you interact with the Services, collected through cookies and similar technologies.

3. How we collect it

  • Directly from you, when you place an order, create an account, sign up for updates or contact us.

  • Automatically, through cookies, pixels and similar technologies when you use the Services.

  • From our service providers, such as Shopify, payment partners and courier partners, when they process data on our behalf.

  • From partners or platforms you choose to interact with, such as social media logins or advertising platforms.

4. How we use it

  • To process, confirm, ship and deliver your orders, including verifying COD orders.

  • To process payments, refunds and replacements.

  • To provide customer support and respond to your requests and complaints.

  • To create and manage your account and remember your preferences.

  • To send you order updates and service messages.

  • To send you marketing communications, only with your consent (see section 6).

  • To understand how the Services are used and to improve our products, website and customer experience.

  • To detect and prevent fraud, abuse and security incidents.

  • To comply with the law, including tax and invoicing requirements and food-safety obligations such as product recalls, and to respond to lawful requests from authorities.

  • To enforce our Terms of Service and protect our rights.

5. Consent

We process your personal data with your consent, or where the law permits us to do so without consent, for example to fulfil an order you have placed or to comply with a legal obligation. You may withdraw your consent at any time by contacting us. Withdrawing consent will not affect processing that has already taken place, but we may then be unable to provide some Services to you.

6. Marketing messages

With your consent, we may send you offers, new launches and tea content by email, SMS and WhatsApp. You can opt out at any time by clicking "unsubscribe" in our emails, replying STOP to SMS or WhatsApp messages, or contacting us. Even after you opt out, we will still send you messages about your orders.

7. Cookies and similar technologies

We use cookies and similar technologies that are needed for the store to work (for example, keeping items in your cart), to analyse traffic, and to measure and personalise advertising, including through tools provided by Shopify, Google and Meta. You can control or delete cookies through your browser settings. Blocking some cookies may affect how the store works.

8. Who we share it with

We do not sell your personal data. We share it only as needed with:

  • Shopify, which hosts our store (see section 9);

  • payment partners, to process payments and refunds;

  • courier and logistics partners, to deliver your orders;

  • customer support, messaging, analytics and IT service providers who work on our behalf;

  • advertising and marketing partners, to show you relevant ads, in line with your choices;

  • our group companies, to help operate the Services;

  • government authorities, courts or law enforcement, where required by law;

  • a buyer or successor, in connection with a merger, acquisition or sale of all or part of our business.

9. Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services in order to provide and improve the Services for you. Information you submit will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than India. To help protect, grow and improve our business, we use certain Shopify features that incorporate data from your interactions with our store, with other merchants and with Shopify. For these purposes, Shopify is responsible for processing your personal data and for responding to your requests about it. To learn more, see the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) and the Shopify Privacy Portal (https://privacy.shopify.com/en).

10. Where your data is stored

Your personal data may be stored and processed outside India, including on servers used by Shopify and our other service providers. Any such transfer is made in accordance with applicable Indian law.

11. How we protect it

We use reasonable security practices and procedures to protect your personal data, and we require our service providers to do the same. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you have an account, please keep your login details confidential. Please do not send us sensitive information, such as card details, by email or chat.

12. How long we keep it

We keep your personal data only as long as it is needed for the purposes described in this policy. Order and invoice records are kept for as long as tax and accounting laws require. Marketing data is kept until you withdraw your consent. After that, we delete or anonymise your data, unless the law requires us to keep it.

13. Your rights

Subject to applicable law, you have the right to:

  • obtain a summary of the personal data we hold about you and how we process it;

  • ask us to correct, complete or update your personal data;

  • ask us to erase your personal data, unless we must keep it by law;

  • withdraw your consent at any time;

  • have your grievances addressed by us; and

  • nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to our Grievance Officer (section 16). We may need to verify your identity before acting on your request. We will not treat you differently for exercising your rights.

14. Children

The Services are meant for people aged 18 and above. We do not knowingly collect personal data of anyone under 18. If you believe a child has shared personal data with us, please contact us and we will delete it.

15. Third-party websites

The Services may link to websites and platforms run by others. We are not responsible for their privacy practices, so please read their privacy policies before sharing information with them.

16. Grievance Officer

If you have any question, request or complaint about how we handle your personal data, please contact:

Bhavini Goyal, Grievance Officer (Director, EST8)

Email: reception@lekhapanitea.com | Phone: +91 98300 52001

Address: EST8, 238A AJC Bose Road, Unit 5A, 5th Floor, PS Plush Building, Kolkata 700020, West Bengal, India

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on this page and change the "Last updated" date, and will notify you of significant changes where the law requires.