Effective date: April 23, 2026
Last updated: April 23, 2026
This Privacy Policy explains how KF Tea Franchising LLC, doing business as Kung Fu Tea (“Kung Fu Tea,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit www.kungfutea.com, use our mobile application, purchase products or services from us, or otherwise interact with us (collectively, the “Services”).
We wrote this policy to be clear and complete. If anything is unclear, email us at privacy@kfteausa.com and we will answer.
KF Tea Franchising LLC is the “controller” of personal information collected through the Services. Our address is:
KF Tea Franchising LLC
589 8th Avenue, 17th Floor
New York, NY 10018
United States
For privacy matters, contact us at privacy@kfteausa.com. For legal matters, legal@kfteausa.com.
We collect the following categories of personal information, depending on how you interact with us:
We collect personal information (a) directly from you when you create an account, place an order, or contact us; (b) automatically when you use the Services, via cookies and similar technologies; and (c) from third parties such as our analytics, advertising, payment, shipping, and social-platform partners.
We use personal information for the following purposes:
We share personal information with the following categories of recipients. This list is comprehensive for current Services; historical sharing with advertising partners is disclosed in Section 6.
| Recipient category | Purpose | Examples |
|---|---|---|
| Payment processors | Process payments, detect fraud | Stripe |
| Shipping and fulfillment | Ship orders and provide tracking | AfterShip, carrier networks |
| Analytics providers | Measure site performance and usage | Google Analytics 4, Google Tag Manager, Meow Analytics |
| Advertising platforms | Serve and measure ads (historically; all third-party ad pixels were paused on 2026-04-21 and any re-enablement will occur only with consent) | Historically: Meta (Facebook) Pixel, Snapchat Pixel, AdRoll, Google DoubleClick/Floodlight, TikTok Pixel, Programmatic Mechanics |
| Advertising and commerce integrations | Product-catalog syndication and shopping features | Google Listings and Ads, TikTok Shop |
| Consent-management platform | Capture and honor cookie preferences | CookieYes |
| Customer-support and communications tools | Reply to you, route emails, send transactional SMS/email | WP Mail SMTP provider, SMS gateway, email marketing provider |
| AI service providers | Power AI features on the Services | OpenAI |
| Security and anti-abuse | Bot detection and abuse prevention | Google reCAPTCHA |
| Location and mapping | Display store locations and directions | Google Maps Platform |
| Cloud hosting and backup | Host the Services and back up data | Our hosting provider; UpdraftPlus backup destinations |
| Professional advisors | Legal, accounting, auditing | Outside counsel, auditors, insurers |
| Affiliates and franchisees | Fulfill orders at your chosen location, operate loyalty program | Kung Fu Tea franchisees |
| Government and law enforcement | Comply with law, protect rights and safety | When required by valid legal process |
| Business transfers | In connection with a merger, acquisition, or sale | Acquirer, successor, due-diligence counterparties |
We do not sell personal information in exchange for money. We may “share” or have “shared” personal information for cross-context behavioral advertising purposes as those terms are defined under California law; see Section 12 and Section 13 to opt out.
We use cookies, web beacons, pixels, and similar technologies to operate the Services, remember your preferences, measure performance, and — historically and subject to your consent going forward — deliver and measure advertising.
| Category | Examples | Purpose | Current status |
|---|---|---|---|
| Strictly necessary | WooCommerce session cookies, Stripe fraud signals, Google reCAPTCHA, CookieYes consent record | Operate shopping cart, process payments, prevent bot abuse, record your consent choices | Active |
| Analytics | Google Analytics 4 (measurement ID G-3QQXKX215B), Google Tag Manager (container GTM-NNTSFLN), Meow Analytics | Understand site usage, measure performance | Active |
| Advertising / targeting | Meta (Facebook) Pixel ID 1766701293594605, Snapchat Pixel, AdRoll, Google DoubleClick/Floodlight, TikTok Pixel, Programmatic Mechanics (“ProgMxs”) pixel | Measure ad effectiveness, build audiences, retarget visitors | Paused on 2026-04-21. We will only re-enable these pixels after integrating our cookie banner with tag-firing controls so that they fire only where consent is obtained. |
| Commerce integrations | Google Listings and Ads, TikTok Shop feed | Syndicate our product catalog to shopping surfaces | Active |
When you first visit our Services you are presented with a cookie-preferences banner managed by CookieYes, where you can record your preferences. You can change your choices at any time by clicking the cookie-preferences link in our site footer. As of the effective date of this policy, our third-party advertising pixels are paused site-wide regardless of banner choices; when re-enabled, they will be gated on your recorded preferences.
Your browser also provides cookie controls (blocking, deleting, or limiting third-party cookies). When our advertising technologies are active, if your browser sends a Global Privacy Control (GPC) signal, we will treat it as an opt-out request in jurisdictions that require us to recognize GPC. As of the effective date of this policy, all third-party advertising pixels are paused, so no “sale” or “sharing” is currently occurring from our website.
Some features of the Services are powered by artificial-intelligence models operated by third-party providers (currently OpenAI). When you interact with an AI feature, the text you submit and the response you receive may be transmitted to the provider to generate the response. We do not use your personal information to train third-party AI models, and we instruct our providers not to retain your inputs for model training. Do not enter sensitive personal information into AI features.
We keep personal information only as long as we need it for the purposes described in this policy, unless a longer retention period is required or permitted by law.
We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, access controls, least-privilege user roles, regular patching, and encrypted backups. No system is 100% secure. If a breach affecting your personal information occurs, we will notify you as required by applicable law.
Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@kfteausa.com and we will delete it.
Depending on where you live, you may have some or all of the following rights:
Send a written request to privacy@kfteausa.com that includes (a) your full name, (b) the email address associated with your account, (c) the specific right you wish to exercise, and (d) enough detail for us to verify your identity. We will respond within 45 days (extendable once by 45 days if reasonably necessary, with notice to you).
You may designate an authorized agent to submit a request on your behalf. The agent must provide written permission signed by you and sufficient information for us to verify the agent’s authority.
This section provides additional disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
| Category | Examples | Collected? |
|---|---|---|
| A. Identifiers | Name, email address, phone number, postal address, IP address, account ID, device identifier | Yes |
| B. California Customer Records Act categories | Name, address, phone number, credit/debit card number (tokenized at processor), payment history | Yes |
| C. Protected classification characteristics | Age, date of birth (optional, to verify age for loyalty program) | Yes (limited) |
| D. Commercial information | Order history, product preferences, rewards balance, coupons redeemed | Yes |
| E. Biometric information | Not collected | No |
| F. Internet or other electronic network activity | Browsing history on our Services, search history on our Services, interactions with our advertisements and emails, clickstream data | Yes |
| G. Geolocation data | Approximate location from IP; precise location only with mobile-app permission | Yes (limited) |
| H. Sensory data | Not collected from Services; CCTV may operate in physical stores under separate notice | No (online) |
| I. Professional or employment information | Only if you apply for a job | Yes (limited) |
| J. Non-public education information | Not collected | No |
| K. Inferences | Preferences and characteristics derived from the above categories | Yes |
| L. Sensitive personal information | Precise geolocation (mobile-app only, with permission); account login credentials | Yes (limited) |
See Section 3 for sources, Section 4 for business purposes, and Section 5 for categories of recipients. Personal information in each category above may be shared with the recipient categories listed in Section 5 for the purposes listed in Section 4.
We do not sell personal information for money. As those terms are defined under California law, we may “share” personal information for cross-context behavioral advertising when advertising pixels are active. All third-party advertising pixels were paused on 2026-04-21. If we re-enable them, we will do so only with your consent captured through our cookie banner, and you can opt out at any time (see Section 13).
We do not use sensitive personal information for purposes other than those permitted without a right to limit under Cal. Civ. Code § 1798.121(d).
California residents may request, once per year and free of charge, information about categories of personal information (if any) we disclosed to third parties for their direct marketing purposes in the prior calendar year. Send your request to privacy@kfteausa.com.
California and certain other state residents have the right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.
To exercise this right:
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this policy indicates when it was last revised. If we make material changes, we will provide additional notice (for example, by email, in-app banner, or a prominent site notice). Your continued use of the Services after we post an updated policy constitutes your acceptance of the changes.
Privacy questions or requests:
privacy@kfteausa.com
Legal matters:
legal@kfteausa.com
Mail:
KF Tea Franchising LLC
Attn: Privacy
589 8th Avenue, 17th Floor
New York, NY 10018
United States
This Privacy Policy was rewritten on April 23, 2026 as part of a comprehensive review of our data-sharing disclosures. Prior versions may have described our practices in less detail. If you have questions about any prior version or want a copy, please contact privacy@kfteausa.com.