1. Who we are

This website, qtmatcha.com, and the qt matcha brand are operated by First Harvest Matcha LLC, a Kentucky limited liability company doing business as "qt matcha" ("qt matcha," "we," "us," or "our"). We are the business responsible for the personal information described in this policy.

You can reach us about anything in this policy at sipqtmatcha@gmail.com.

2. What this policy covers

This policy explains what personal information we collect through qtmatcha.com (including our waitlist and landing pages), through our online store, and through our marketing emails; how we use and share it; and what choices you have. It does not cover websites or services operated by other companies that we link to, which have their own policies.

3. Information we collect

Information you give us

• Email address: when you join the waitlist, sign up through the discount pop-up, or subscribe to our newsletter.
• Order and delivery information: name, shipping address, billing address, email, and phone number, if and when you place an order.
• Payment information: handled by our payment processors through Shopify. We do not receive or store your full card number.
• Anything you send us: the contents of emails or messages you send us, including support questions.

Information collected automatically

• Device and usage data: IP address, browser type, operating system, screen size, referring website, pages viewed, links clicked, and the dates and times of your visits.
• Cookies and similar technologies: small files and identifiers placed by us and by our analytics and advertising partners. See Section 6.
• Email engagement: whether you opened an email we sent and which links you clicked, measured by our email provider.

Information from other sources

Advertising platforms may tell us, in aggregate, that a group of people who saw an ad later visited our site or signed up. We may also receive fraud-prevention signals from Shopify and our payment processors.

4. Why we use your information

• To add you to our waitlist and send launch updates, discount codes, and marketing emails you asked for.
• To process, fulfill, and deliver orders, and to handle returns, refunds, and customer service.
• To operate, secure, and improve the website, and to understand which pages and products people actually use.
• To advertise, including showing our ads to you on other platforms, and building audiences of people similar to our existing customers.
• To prevent fraud, abuse, and spam signups, and to protect our legal rights.
• To comply with tax, accounting, consumer-protection, and other legal obligations.

If you are in a jurisdiction that requires a legal basis for processing, ours are: your consent (marketing emails, non-essential cookies), performance of a contract (fulfilling your order), our legitimate interests (site security, analytics, and direct marketing to existing customers), and compliance with legal obligations.

5. Who we share it with

We do not sell your personal information for money. We share it with the service providers and partners we need to run the business:

Who	What for
Klaviyo	Storing our waitlist and sending marketing emails
Shopify	Store, checkout, order records, and payment processing
Cloudflare	Website hosting, DNS, and security
Meta, TikTok, and Google	Advertising, ad measurement, and audience building
Shipping carriers and fulfillment partners	Delivering orders
Accountants, lawyers, and similar advisors	Running the business and meeting legal obligations

We may also disclose information if we are required to by law, subpoena, or valid legal process; where we believe it is necessary to protect our rights, safety, or property, or that of others; or in connection with a merger, acquisition, financing, or sale of all or part of our business, in which case we will take reasonable steps to see that this policy continues to apply.

6. Cookies, pixels, and advertising

We use cookies and similar technologies that are strictly necessary to make the site work, plus analytics and advertising tools including the Meta pixel, the TikTok pixel, and Google advertising tags. These allow us and those platforms to recognize your browser across websites and to show you our ads elsewhere.

Under the California Consumer Privacy Act and several other state privacy laws, disclosing information to advertising platforms in this way is treated as "sharing" for cross-context behavioral advertising, and in some states as "targeted advertising." You have the right to opt out. You can:

• Email sipqtmatcha@gmail.com with the subject line "opt out of ad sharing," and we will apply it to your email address.
• Turn on Global Privacy Control in your browser. Where required by law, we treat a GPC signal as a valid opt-out request.
• Adjust your ad settings directly with Meta, TikTok, and Google.
• Block or delete cookies in your browser settings. Some parts of the site may not work correctly if you block all cookies.

7. Marketing emails

If you join the waitlist or sign up through the pop-up, you are asking us to email you about our launch, products, and offers. Every marketing email includes an unsubscribe link, and you can also email us to be removed. We will honor the request promptly. We may still send you transactional messages about an order you placed.

8. Your privacy rights

Depending on where you live, you may have the right to:

• Know what personal information we have collected about you and how we use and disclose it.
• Get a copy of that information, in a portable format.
• Correct information that is inaccurate.
• Delete your personal information.
• Opt out of the sale or sharing of your personal information and of targeted advertising.
• Not be discriminated against. We will not charge you a different price or give you a worse experience for exercising any of these rights.

To make a request, email sipqtmatcha@gmail.com from the address you signed up with, or tell us which address to look up. We will confirm your identity by verifying control of that email address, respond within the time your state's law requires (generally 45 days, extendable once where permitted), and tell you if we cannot fulfill the request and why. An authorized agent may submit a request on your behalf with written proof of authorization.

If you are in the EU or UK, you also have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority. We currently sell and ship only within the United States, and our services are directed to US residents.

9. How long we keep it

We keep waitlist and marketing contacts until you unsubscribe or ask us to delete you, and for a short period afterward so that we can honor your opt-out. We keep order, tax, and accounting records for as long as required by law, which is generally at least seven years. Device and usage logs are kept for a shorter period, typically no more than two years.

10. Security

We use reputable providers (Shopify, Klaviyo, and Cloudflare) and rely on their encryption and access controls, and we limit who on our side can access personal information. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulators as required by law.

11. Children

Our website and products are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email sipqtmatcha@gmail.com and we will delete it. We do not knowingly sell or share the personal information of consumers under 16.

12. Third-party links

Our site and emails may link to other websites, including social media. We do not control those sites and are not responsible for their privacy practices. Read their policies before giving them your information.

13. Changes to this policy

We may update this policy as our business changes, for example, when we launch, add new tools, or begin shipping outside the United States. We will post the revised version here and change the "last updated" date above. If the changes are significant, we will tell you by email or with a notice on the site. Continuing to use the site after a change means you accept the updated policy.

14. Contact us

First Harvest Matcha LLC, d/b/a qt matcha
Kentucky, United States
sipqtmatcha@gmail.com