Skip to content
Complimentary UK delivery.United Kingdom · GBP £
PRIVACY POLICY

Privacy Policy

Last updated: 24 October 2026

About this policy

This Privacy Policy explains how Teber (the "Store", "we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website teber.co.uk, place an order, or otherwise interact with our online shop. Teber is an e-commerce brand operating exclusively in the United Kingdom.

We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner. This policy is designed to comply with both the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the European Union General Data Protection Regulation (EU GDPR), as our operating entity is established in France.

By using our website or purchasing from us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use our website or services.

Who is the data controller

The data controller responsible for your personal data under UK GDPR and EU GDPR is:

  • Brand: Teber
  • Company: HISOKA SAS
  • SIRET: 989 850 680 00012
  • Registered office: 1 Rue Marguerin, 75014 Paris, France
  • Share capital: 10 000 €
  • APE code: 47.91A
  • Tax status: Franchise en base, art. 293 B du CGI
  • Contact email: contact@teber.co.uk

HISOKA SAS is the legal entity that determines the purposes and means of processing your personal data and is therefore the data controller within the meaning of Article 4(7) of UK GDPR and EU GDPR.

What personal data we collect

We collect the following categories of personal data when you browse our website or place an order with us:

  • Identity data: first name and last name.
  • Billing address: street, city, postcode, country.
  • Shipping address: street, city, postcode, country (if different from billing address).
  • Contact data: email address.
  • Phone number: optional, used only for delivery-related communications.
  • Order data: products purchased, order amount, payment status, order date, order history.
  • Technical data: IP address, browser type and version, operating system, device type, screen resolution, time zone, referring URLs.
  • Usage data: pages visited, time spent on pages, clicks, navigation paths.

We do not knowingly collect or process special categories of personal data (such as health data, political opinions, religious beliefs, or biometric data). Payment card details are never stored on our servers and are handled directly by our PCI-DSS compliant payment processor.

How we collect it

We collect personal data in the following ways:

  • Directly from you: when you create an account, fill in a checkout form, contact our customer support, or request customer support.
  • Automatically: through essential cookies and first-party shop statistics when you browse our website, subject to the controls described below.
  • From third parties: from our payment processor (to confirm payment status) and our shipping carriers (to track delivery).

How we use your data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including taking payment and arranging delivery.
  • To communicate with you about your order, including order confirmations, shipping notifications, and delivery updates.
  • To provide customer support and respond to your enquiries.
  • To process returns, refunds, and exchanges.
  • To comply with our legal and accounting obligations, including invoicing and bookkeeping under French law.
  • To detect, prevent, and investigate fraudulent transactions or other unlawful activity.
  • To improve our website, products, and services through analytics and aggregated usage data.
  • To monitor and analyse traffic to our website in order to optimise the user experience.
  • To send you marketing communications, where you have given your consent.

Legal basis for processing (UK/EU GDPR)

Under Article 6 of UK GDPR and EU GDPR, we process your personal data on the following legal bases:

  • Performance of a contract (Article 6(1)(b)): to process your order, take payment, deliver your products, and provide post-sale customer service. Without this data, we cannot fulfil our contract with you.
  • Legitimate interest (Article 6(1)(f)): to detect and prevent fraud, secure our website, analyse aggregated traffic for improvement, and ensure the smooth operation of our store. We balance our legitimate interests against your rights and freedoms.
  • Consent (Article 6(1)(a)): for non-essential cookies, analytics, advertising, and marketing emails. You can withdraw your consent at any time.
  • Legal obligation (Article 6(1)(c)): to comply with our accounting, tax, and consumer protection obligations under French and UK law.

Who we share your data with

We share only the information needed to run the store with the following service providers:

  • Scaleway: hosting our store and its database in France. The storefront and order system use self-hosted Medusa software.
  • Stripe: secure payment processing and fraud prevention.
  • Fulfilment partners in China and UPS: the name, address and contact details necessary to prepare, dispatch and deliver your order.
  • Google Merchant Center: product catalogue and offer data for Shopping listings. Our product feed does not contain customer order or account data.

With your permission, Google Ads measures visits from advertisements, successful additions to the bag, checkout starts and purchases, including the order reference, currency and order amount. Google receives technical information such as your network address, browser details and advertising click identifiers. We do not send names, email addresses, postal addresses or payment card data to Google Ads, and enhanced conversions and personalised advertising are disabled. Google may process data internationally under its applicable data-protection terms and safeguards. We do not use Google Analytics on this storefront. We never sell, rent or trade personal data for third-party marketing. Providers act as processors or independent controllers for their respective purposes. We may also disclose data when required by law.

International transfers

Our store and order database are hosted in France. Preparing and delivering orders may require us to share necessary delivery information with fulfilment partners in China, UPS and payment providers operating outside the UK or EEA.

Where required for an international transfer, we use safeguards recognised under the UK GDPR and EU GDPR, such as applicable adequacy decisions, standard contractual clauses and the UK transfer addendum or agreement. Contact us for information about the safeguards relevant to your data.

How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

  • Customer account data: retained for as long as your account remains active, plus a reasonable period thereafter.
  • Order and invoice data: retained for 10 years from the end of the financial year, in accordance with French accounting obligations (Code de commerce, article L123-22).
  • Marketing data: retained until you withdraw your consent or after three years of inactivity.
  • Shop statistics: aggregate counters are retained for up to 400 days; temporary presence and deduplication records expire as described below.
  • Customer support correspondence: retained for up to three years after the last contact.

Once retention periods expire, your personal data is securely deleted or anonymised.

Your rights under UK GDPR and EU GDPR

You have the following rights in relation to your personal data:

  • Right of access: to obtain a copy of the personal data we hold about you.
  • Right to rectification: to correct inaccurate or incomplete personal data.
  • Right to erasure ("right to be forgotten"): to request the deletion of your personal data where there is no compelling reason for us to continue processing it.
  • Right to restriction of processing: to ask us to suspend the processing of your personal data in certain circumstances.
  • Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to object: to object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw consent: at any time, where processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint: with a supervisory authority.

How to exercise your rights

To exercise any of these rights, please contact us by email at contact@teber.co.uk. We will respond to your request within one month, as required by UK GDPR and EU GDPR. In some cases, we may need to verify your identity before processing your request, in order to protect your data.

Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests, where we may charge a reasonable fee or refuse to act on the request.

Cookies

Essential cookies keep your shopping bag, account session and storefront preferences working. Optional Google Ads measurement is blocked until you choose “Allow advertising measurement”. “Reject optional cookies” leaves it off. You can change your choice or withdraw permission using Cookie settings in the footer, including at checkout. We respect Do Not Track and Global Privacy Control. Advertising measurement is not required to buy from Teber.

Google Ads may use advertising click cookies such as _gcl_aw for up to 90 days. We remember your consent choice and use browser storage to prevent duplicate checkout and purchase conversions. Order references used for this deduplication are retained for up to 90 days. We do not use Google Analytics, enhanced conversions or personalised advertising. The first-party shop statistics described below are separate from Google Ads measurement.

We use first-party shop statistics on our own server to count visits, pages viewed, successful additions to the bag and checkout visits. We do not store IP addresses in these statistics, build advertising profiles or share the statistics with advertising partners. A random visit identifier stays in page memory. Presence records expire after 30 minutes of inactivity; deduplication records expire after one hour. Aggregate counters are retained for up to 400 days.

You can turn shop statistics off at any time using the control below or in the footer. Do Not Track and Global Privacy Control signals are respected. Only your on/off choice is saved in browser storage.

Saved bags and checkout reminders

When you enter a valid email at checkout, we save it with your bag and checkout progress for up to 90 days after your last checkout activity so you can continue your purchase. This does not create an order or take a payment. This checkout record is available only to our authorised shop team.

The optional reminder checkbox lets you ask for an email reminder about this bag. It is not selected by default, and we record your choice and its date. You can withdraw this choice by unticking the box at checkout or by contacting contact@teber.co.uk. Completing your order removes the checkout from the reminder queue. These records do not contain card numbers or security codes.

Welcome offers and style emails

If you request a welcome code, we save your email address, code, expiry date and any style you choose to administer the offer and prevent duplicate codes. One code is issued per email, for one use within 30 days, with 10% off items and delivery excluded. We automatically email the requested code to the address you enter and also show it on the website. No email-verification link is required. We record when sending succeeds or fails and limit repeat requests to prevent unwanted duplicates. Requesting a code does not automatically subscribe you to marketing.

You can separately choose to receive Teber style updates and offers using an optional, unticked box. We record that choice, its time and the wording version. To withdraw your choice or request access or deletion, contact contact@teber.co.uk. The requested welcome-code email is sent automatically; these pop-ups do not trigger an ongoing marketing campaign. Limited browser storage remembers your style, code and dismissal so the offer does not keep interrupting your visit. A keyed network-address hash is used for rate limiting; raw network addresses are not saved with the contact.

Security

Our store is hosted on Scaleway infrastructure and uses HTTPS/TLS. Payments are processed by Stripe; full card details and security codes are not stored in our store database. We restrict access to customer information and use technical and organisational measures to protect it.

No internet transmission or storage system can guarantee absolute security.

Children's privacy

Our website and products are not directed at children. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent. If you are under 16, please do not provide us with any personal data.

If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, please contact us at contact@teber.co.uk.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. The updated version will always be available on this page with a revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Where changes are material, we will provide a more prominent notice or, where required by law, request your renewed consent.

Contact

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us at:

You also have the right to lodge a complaint with a data protection supervisory authority. The relevant authorities are:

  • United Kingdom: Information Commissioner's Office (ICO), Information Commissioner's Office (ICO) — www.ico.org.uk
  • France: Commission Nationale de l'Informatique et des Libertés (CNIL), Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr

We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority, so please consider contacting us first.

Contact

  • Company name (legal entity): HISOKA SAS — French Société par Actions Simplifiée
  • Trading as: Teber (teber.co.uk)
  • Registered office: 1 Rue Marguerin, 75014 Paris, France
  • Company registration number: 989 850 680 (SIREN, France)
  • VAT status: VAT not applicable — art. 293 B French General Tax Code
  • Phone (UK customer service): +44 20 8040 5007
  • Email: contact@teber.co.uk
  • Opening hours: Monday–Saturday · 9 am – 7 pm UK time
  • Service promise: We aim to reply within one working day