Cart

Your cart is empty

Privacy policy

Last updated: July 14, 2026

This Privacy Policy describes how Boba Tea Protein, LLC, doing business as Boba Tea Protein™ (“Boba Tea Protein,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information when you visit bobateaprotein.com, purchase our products, create or use an account, manage a subscription, communicate with us, or otherwise use our website and related services.

We refer to our website and related services collectively as the “Services.”

This Privacy Policy does not apply to information collected in connection with employment applications. Please review our Applicant and Candidate Privacy Policy for information about our recruitment practices.

PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us.

Information You Provide to Us

We may collect information that you provide directly, including:

  • Your name, email address, telephone number, billing address, and shipping address;

  • Customer-account information and account preferences;

  • Order information, including products purchased, products considered, order history, returns, refunds, discounts, and delivery information;

  • Subscription information, including selected products, quantities, delivery frequency, billing schedule, subscription status, and requests to skip, pause, change, or cancel a subscription;

  • Payment-related information needed to complete a transaction. Complete payment-card information is generally processed directly by Shopify or another payment provider and may not be stored directly by us;

  • Communications you send to us, including customer-service requests, product questions, accessibility requests, survey responses, and other messages;

  • Marketing preferences, including whether you have agreed to receive email or text-message communications;

  • Reviews, photographs, videos, social-media content, or other material you choose to submit;

  • Giveaway, promotion, survey, referral, or affiliate information; and

  • Business contact information submitted in connection with wholesale, retail, vendor, or other business inquiries.

Please do not provide passwords, complete payment-card numbers, health information, or other sensitive information through general contact forms, product reviews, or fields that are not specifically intended to receive that information.

Information Collected Automatically

When you use the Services, we and our service providers may automatically collect information such as:

  • Your IP address and approximate location derived from your IP address;

  • Browser type, device type, operating system, language, and device settings;

  • Cookie identifiers, advertising identifiers, and other online identifiers;

  • Referring and exit pages;

  • Pages, products, and content viewed;

  • Search terms entered on the website;

  • Links, advertisements, and buttons selected;

  • Shopping-cart, checkout, purchase, and subscription events;

  • Dates and times of access;

  • General website-navigation and interaction information;

  • Information about your interaction with marketing emails or text messages;

  • Advertising-attribution information;

  • Website performance and diagnostic information; and

  • Security and fraud-prevention information.

We may associate automatically collected information with your account, order, subscription, or marketing profile.

Information Received From Other Sources

We may receive personal information from other sources, including:

  • Shopify and other ecommerce providers;

  • Payment processors, financial institutions, and digital-wallet providers;

  • Subscription-management and customer-account providers, including Skio;

  • Fulfillment providers, carriers, customs brokers, and international shipping partners, including Passport;

  • Advertising, analytics, and marketing providers;

  • Email and text-message communications providers;

  • Social-media platforms;

  • Review, survey, referral, affiliate, and promotional providers;

  • Customer-service and accessibility providers;

  • Fraud-prevention, authentication, and security providers;

  • Tax-calculation and regulatory-compliance providers;

  • Publicly available sources; and

  • Other parties acting at your direction.

HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • Provide, operate, maintain, and improve the Services;

  • Process payments and complete purchases;

  • Fulfill, ship, track, return, replace, or refund orders;

  • Create and manage customer accounts and subscriptions;

  • Authenticate users and provide account-login codes;

  • Communicate with you about orders, accounts, subscriptions, products, and customer-service matters;

  • Respond to questions, feedback, complaints, reviews, and accessibility requests;

  • Personalize products, offers, content, and recommendations;

  • Send email or text-message marketing when permitted by law;

  • Measure and improve advertising and marketing campaigns;

  • Understand how customers and visitors use the Services;

  • Conduct internal research, analytics, testing, and product development;

  • Detect, investigate, and prevent fraud, misuse, security incidents, and prohibited activity;

  • Protect our customers, personnel, property, systems, and legal rights;

  • Maintain accounting, tax, transaction, and compliance records;

  • Enforce our policies and agreements;

  • Comply with legal, regulatory, and contractual requirements;

  • Conduct or evaluate a merger, acquisition, financing, reorganization, or sale; and

  • Carry out another purpose disclosed when the information is collected or with your permission.

We may create aggregated or deidentified information that cannot reasonably be used to identify you. We may use and disclose that information for lawful purposes and will not attempt to reidentify it except as permitted by law.

COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers may use cookies, pixels, tags, local-storage technologies, application programming interfaces, software development kits, and similar technologies.

Essential Technologies

Essential technologies support functions such as:

  • Website security;

  • Shopping-cart operation;

  • Checkout and payment;

  • Fraud prevention;

  • Customer accounts and subscriptions;

  • Remembering privacy selections;

  • Website performance; and

  • Basic website functionality.

These technologies may operate without separate consent where permitted by law because they are necessary to provide the Services.

Analytics and Performance Technologies

Analytics and performance technologies may collect information about pages viewed, products viewed, links selected, referral sources, device information, and general website navigation.

We use this information to understand website performance, diagnose problems, and improve the Services.

Advertising Technologies

Advertising technologies may collect or receive information such as:

  • Online and device identifiers;

  • IP address and approximate location;

  • Device and browser information;

  • Website and product-view activity;

  • Cart, checkout, subscription, and purchase events; and

  • Advertising interactions.

Advertising providers may use this information to measure advertising performance, attribute visits or purchases to advertisements, create or select audiences, limit advertisement frequency, or present advertisements based on activity over time and across different websites or services.

Some disclosures to advertising providers may be considered a “sale,” “sharing,” or use for targeted advertising under certain state privacy laws, even though we do not sell personal information in exchange for money.

Website Interaction Technologies

Certain providers may receive information about how visitors interact with the Services, including pages visited, links or buttons selected, products viewed, and shopping or checkout events.

We do not authorize advertising or analytics providers to collect passwords, complete payment-card numbers, or the contents of private customer-service communications through website tracking technologies.

Managing Cookies and Tracking

Where required by law, we seek consent before using nonessential analytics, advertising, or similar technologies.

You may use our cookie banner to accept or decline optional technologies. Where available, you may reopen your selections through the Cookie Settings or Your Privacy Choices link on the website.

You may also control cookies through your browser. Blocking essential cookies may prevent portions of the Services from functioning properly.

EMAIL AND TEXT MESSAGES

When you subscribe to marketing communications, we may use your contact information, preferences, purchase history, and prior interactions to send or personalize messages.

You may unsubscribe from marketing emails using the unsubscribe link contained in an email.

You may opt out of marketing text messages by replying STOP or following the instructions provided in the message. Message and data rates may apply. Consent to receive marketing text messages is not a condition of purchase.

Opting out of marketing does not prevent us from sending non-marketing communications concerning an order, transaction, account, subscription, security matter, or customer-service request.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here: Shopify Privacy Portal Link.

Ecommerce and Technology Providers

We use Shopify to host and operate our online store. Shopify and related providers may process information for checkout, payment, customer accounts, analytics, security, fraud prevention, and ecommerce functionality.

Subscription and Account Providers

We use subscription-management and customer-account providers, including Skio, to administer recurring purchases, subscription accounts, authentication, billing instructions, and related communications.

Payment and Financial Providers

Payment processors, financial institutions, digital-wallet providers, and fraud-prevention providers may process information needed to authorize payments, prevent fraud, and complete transactions.

Marketing and Communications Providers

We may use email, text-message, customer-communications, advertising, and marketing providers to manage subscriber lists, send communications, personalize messages, and measure engagement.

Customer-Service and Accessibility Providers

Customer-service and accessibility providers may process contact information, account information, order information, accessibility reports, and the contents of communications submitted to them.

Fulfillment and Shipping Providers

We may disclose contact and order information to warehouses, fulfillment providers, shipping carriers, customs brokers, and international shipping providers, including Passport and the carriers used to deliver your order.

Tax and Compliance Providers

We may disclose transaction, address, and order information to tax-calculation, accounting, regulatory, legal, and compliance providers.

Advertising and Analytics Providers

Depending on the technologies enabled and your privacy selections, we may disclose identifiers, internet activity, shopping activity, commercial information, and related information to advertising and analytics providers.

Some advertising or analytics providers may process information under their own privacy policies when acting as independent businesses.

Review, Survey, Referral, and Promotion Providers

We may disclose information needed to operate product reviews, surveys, affiliate or referral programs, giveaways, and promotions.

Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

  • Comply with a law, regulation, subpoena, court order, governmental request, or legal process;

  • Protect the rights, safety, security, or property of Boba Tea Protein, our customers, or others;

  • Investigate or prevent fraud, misuse, or illegal activity;

  • Establish, exercise, or defend legal claims; or

  • Enforce our agreements and policies.

Business Transactions

Information may be disclosed in connection with a merger, acquisition, financing, bankruptcy, reorganization, sale of assets, or similar transaction, including related due diligence.

At Your Direction

We may disclose information when you direct or authorize us to do so.

SALE, SHARING, AND TARGETED ADVERTISING

We do not sell personal information to third parties in exchange for money.

Our use of advertising, analytics, audience-matching, and similar technologies may involve disclosures that are considered a sale, sharing, or targeted advertising under certain state privacy laws.

Information involved may include:

  • Online and device identifiers;

  • IP address and approximate location;

  • Internet or electronic-network activity;

  • Product-view and shopping activity;

  • Commercial information;

  • Advertising and marketing interactions;

  • Inferences concerning interests or preferences; and

  • Contact information that has been hashed or otherwise transformed for audience matching, where enabled.

You may opt out through the Your Privacy Choices or Cookie Settings link on the website, where available.

Where required by applicable law and supported by our website configuration, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out for the browser or device transmitting the signal.

We do not knowingly sell or share the personal information of consumers under 16 years old.

U.S. STATE PRIVACY RIGHTS

Depending on where you live and which privacy laws apply, you may have the right to:

  • Confirm whether we process your personal information;

  • Access personal information associated with you;

  • Correct inaccurate personal information;

  • Delete certain personal information;

  • Obtain a portable copy of certain personal information;

  • Learn about the categories of information we collect and disclose;

  • Opt out of sale, sharing, or targeted advertising;

  • Opt out of certain profiling activities;

  • Limit certain uses of sensitive personal information;

  • Appeal a decision concerning a privacy request; and

  • Receive equal service without unlawful discrimination for exercising a privacy right.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

  • Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.

  • Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.

These rights are subject to applicable legal exceptions.

Submitting a Privacy Request

You may submit a privacy request by emailing hello@bobateaprotein.com or using the contact form on our website.

To opt out of sale, sharing, or targeted advertising, use the Your Privacy Choices or Cookie Settings link on the website, where available.

We may need to verify your identity before completing a request. Verification may involve confirming information associated with an account, order, subscription, or previous interaction.

An authorized agent may submit a request where permitted by law. We may request evidence of the agent’s authority and may verify your identity directly.

We may retain or decline to delete information where permitted by law, including information needed to complete a transaction, prevent fraud, maintain security, comply with legal obligations, maintain required records, or establish or defend legal claims.

Where applicable, you may appeal a decision by replying to our response and stating that you wish to appeal.

CALIFORNIA PRIVACY INFORMATION

This section applies to California residents to the extent required by applicable California privacy law.

During the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers;

  • Customer-record information;

  • Commercial and transaction information;

  • Internet and electronic-network activity;

  • Approximate geolocation information;

  • Electronic communications and submitted content;

  • Professional or business information;

  • Inferences concerning interests or preferences; and

  • Account-login and payment-related information used to provide requested services and protect transactions.

We collect this information from the sources described in this Privacy Policy and use it for the purposes described above.

We may disclose these categories for business purposes to ecommerce providers, payment processors, subscription providers, communications providers, fulfillment and shipping providers, customer-service providers, compliance providers, professional advisers, and security providers.

We may disclose identifiers, internet activity, commercial information, approximate location, advertising interactions, and related inferences to advertising and analytics providers in a manner that may be considered sale or sharing under California law.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about consumers.

California residents may have rights to know, access, correct, delete, and obtain information about our processing, and to opt out of sale or sharing. Instructions for exercising these rights are provided above.

California Shine the Light

California residents may request information concerning certain disclosures of personal information to third parties for those third parties’ own direct-marketing purposes.

Requests may be sent to hello@bobateaprotein.com with the subject line “California Shine the Light Request.”

DO NOT TRACK

Some browsers offer a Do Not Track setting. There is currently no universally accepted industry standard for responding to Do Not Track signals.

Where required by law, we respond to recognized opt-out preference signals, such as Global Privacy Control, as described in this Privacy Policy.

DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Factors considered in determining retention periods include:

  • The duration of an account, subscription, or customer relationship;

  • Order fulfillment and customer-service needs;

  • Tax, accounting, and regulatory obligations;

  • Return, refund, warranty, and chargeback periods;

  • Fraud-prevention and security requirements;

  • Applicable limitation periods;

  • Potential or actual disputes;

  • Contractual requirements; and

  • The need to document privacy and marketing selections.

When information is no longer reasonably necessary, we may delete, deidentify, or securely isolate it, subject to backup and legal-retention requirements.

DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

No internet transmission or electronic-storage system is completely secure. We cannot guarantee that information will never be accessed, used, or disclosed without authorization.

You are responsible for protecting your account credentials and notifying us if you believe your account or communications have been compromised.

INTERNATIONAL PROCESSING

Boba Tea Protein is based in the United States. We and our service providers may process personal information in the United States, Canada, and other countries.

Privacy laws in those locations may differ from the laws where you live. Where required, we use appropriate safeguards for international transfers.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

Residents of the European Economic Area, United Kingdom, or Switzerland may have rights to access, correct, erase, restrict, or object to certain processing, request data portability, withdraw consent, and submit a complaint to a supervisory authority.

Depending on the processing activity, our legal bases may include performance of a contract, compliance with law, legitimate interests, and consent.

CHILDREN’S PRIVACY

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Contact us if you believe a child has provided personal information so that we can review and, where appropriate, delete it.

THIRD-PARTY SERVICES

The Services may contain links to websites, applications, social-media platforms, and services that we do not control.

This Privacy Policy does not apply to the privacy practices of those third parties. Review their policies before providing information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to our practices, technologies, service providers, legal obligations, or Services.

The “Last updated” date identifies the most recent revision. We may provide additional notice when required by law.

CONTACT US

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call +1 469-208-0717, email us at hello@bobateaprotein.com, or contact us at:

Boba Tea Protein, LLC
ATTN: Privacy Compliance Officer
12895 North Josey Lane #124 PMB 1051
Dallas, TX 75234
United States