Delivery within 3-5 business days – Free for orders of R500 or more
Heritage Month: Up to 30% off all Pure Rooibos Products
Heritage Month: Up to 30% off Pure Rooibos
Delivery within 3-5 business days – Free for orders of R500 or more
Heritage Month: Up to 30% off all Pure Rooibos Products
Heritage Month: Up to 30% off Pure Rooibos
Registration number: 1999/000082/07
Updated: August 2026
Carmién Tea is a producer and supplier of packaged retail Rooibos tea products in South Africa. The company is also a bulk tea exporter and private label packer to foreign distributors of Rooibos. Carmién Tea secures organic and conventional Rooibos from growing areas such as Piekenierskloof, Nieuwoudville, Wupperthal and Gifberg roughly 200km from Cape Town. The Carmién Rooibos range is produced on Fairtrade International principles. Carmién Tea offers products direct from the farm, to their customers whilst ensuring total food traceability in the food chain.
CARMIEN TEA as a company is obligated to comply with The Protection of Personal Information Act (4 of 2013) referred to as the POPIA. The POPIA requires the company to inform its contracting suppliers (“staff”, “vendors”, “customers”) as to the reason and the manner in which their personal information is collected, used, disclosed, stored and destroyed. The company guarantees its commitment to protecting its supplier’s privacy and ensuring that their personal information is used appropriately, transparently, securely and in accordance with applicable laws.
By contracting with us, you agree that your personal information will be handled as described in this Data Privacy Policy. Your use of our services, and any dispute over privacy, is subject to this Data Privacy Policy and our Terms of Contract (“SLA”, “contract”), including its applicable limitations on damages and the resolution of disputes. The Data Privacy Policy is made available on the company’s website www.carmientea.shop and by request from the company’s head office.
We may collect information about you (a) directly from you, (b) from third parties, and (c) automatically through your use of our services.
The information we collect from you depends on how you use our services. To contract with us, we collect:
We also may collect additional information from you, including an optional description of what we are trying to accomplish with the use of the services. If you contract with us, we will collect your payment information, such as your banking details, invoicing details and shipping address.
We only process, use or disclose Personal Information: (a) strictly for the purposes of (fulfilling our obligations and providing the services required) under this Policy; (b) with the data subject’s prior written consent; or (c) when required by law or an order of court, but shall notify the data subject as soon as practicable before complying with such law or order of court at its own costs.
We use your information, including your personal information, for the following purposes:
We may share your information, including personal information, as follows:
We also disclose information in the following circumstances:
We will protect Personal Information under our control or in our possession by making reasonable security arrangements (including, where appropriate, physical, administrative, procedural and information & communications technology measures) to prevent unauthorised or accidental access, collection, use, disclosure, copying, modification, disposal or destruction of Customer Personal Data, or other similar risks.
We have implemented commercially reasonable and acceptable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our best efforts, no data security measures can guarantee security.
You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
We work hard to find and introduce new people to our product as well as improve the quality of our service via any email communication, our website, any social media or digital content or physical interaction. We want to communicate clearly and directly with everyone that visits. To do this we need data. However, we practice privacy by design, privacy by default and data minimization so we’ll take the smallest amount of data we can while still providing our visitors an enjoyable experience.
We request processing of personal data of visitors, such as IP address, a cookie identifier and email address (but only in the case that visitors request information be sent by email). We also collect non-personal data to learn how visitors found our website, what kind of device they’re using, how long they stayed, which pages they visited, etc. This non-personal data is tied to a temporary identifier that is removed after the end of each browsing session.
Here’s how we use your data when you give us the following consents:
Purpose: improve website user interface, optimise promotional and marketing content.
Personal data used: browser cookie, browsing behaviour, IP address.
Out-contracted third parties data analytics are involved:
Purpose: send marketing materials relevant to customer interests
Personal data used: browser cookie, browsing behaviour on website, IP address.
Third parties involved:
When you use our e-Commerce platforms, your data privacy is also important to us. Under our Data Privacy Policy we will indicate:
Our site might be collecting any or even all of the following personal information (directly or indirectly in order to fulfil online orders) from you when you register on our platform:
We also acknowledge that as an online ecommerce platform that collects personally identifiable information, we must allow online customers the option
In both cases the guideline appear under ‘Annexure A’ in this Policy.
Where you provides Personal Information to us, you need to make reasonable effort to ensure that the Personal Information is accurate and complete before providing the same us. We will put in place adequate measures to ensure that the Personal Information in our possession or control remain or is otherwise accurate and complete. We will take reasonable steps to correct any errors in Personal Information, as soon as practicable upon the data subject’s written request.
We will provide the data subject with access to the Personal Information that we have in our possession or control, as soon as practicable upon written request from the data subject.
We shall, upon the request of the data subject: (a) return to the data subject, all Personal Information; or (b) delete all Personal Information in our possession, and, after returning or deleting all Personal Information, provide the data subject with written confirmation that we no longer possesses any Personal Information. Where applicable, we shall also instruct all third parties to whom it has disclosed Personal Information for the purposes of this Policy to return to the Contractor or delete, such Personal Information.
There are number of rights you can exercise:
You have the right to lodge a complaint with a supervisory authority (Information Regulator).
If you would like to exercise your individual rights, send us an email via the link provided on the website. The form collects cookies that identify you as a returning visitor so we know what data the request concerns. We will then adjust or remove data about you from our database. We require your email to communicate with you during processing of your request.
Please refer to the ‘Annexure B’ for the process to activate the PAIA policy of our company.
Select the type of data request and note any special requests. We’ll do our best to fulfill your request to the letter. We need your email address to contact you about your request. We won’t use this email address for any purpose other than the completion of your request.
Top of Form
Email: info@carmientea.shop
The recruitment process is shared between Bergendal-Maneberg and Carmien Tea. During recruitment we will gather and process personal data such as employment history, education and projects you’ve worked on etc. We get this information from your CV, the application form and from links or other information you provide us. To submit your application to us you must first agree to processing of your personal data (a check box on the application page) in accordance with POPIA. Sending us your job application means that you acknowledge our privacy policy. The provision of your personal data is neither a statutory nor a contractual requirement.
Only the team members who are directly involved in your recruitment process have access to your data. Each team member has been trained in data security and is formally obliged by their contract to keep it private.
We collect and use personal information you have provided only for the purposes of recruitment process. Data that we collect throughout recruitment is used only for the communication with candidates, to evaluate their qualifications and to make a final hiring decision. During the recruitment process we use software from external partners such as MS Suite and Dropbox/One Drive. The maximum time your data is held is 36 months.
You have a right to access your data, correct or remove it, or completely withdraw your consent for processing it at any time. Such requests should be sent to our Information Officer at info@carmientea.shop. The withdrawal of a consent does not affect the lawfulness of processing based on consent before its withdrawal.
Links from our site to external websites do not operate under this Data Privacy Policy. For example, if you click on a referrer website link on our site, you may be taken to a website that we do not control. These third-party websites may independently solicit and collect information from you, including personal and financial data. We recommend that you consult the privacy statements of all third-party websites you visit by clicking on the “privacy policy” link typically located at the bottom of the webpage you are visiting.
If you access our website, or any of our social media platforms, we may collect additional personal information about you in the form of your IP address or domain name. Our website may contain links to other websites. We are not responsible for the privacy practices of linked websites and any linked websites are not subject to our privacy policies and procedures.
We do not knowingly collect personal information from children under age 18. If you are under age 18, please do not submit any personal information through the website. If you have reason to believe that we may have accidentally received personal information from a child under age 18, please contact us immediately at info@carmientea.shop.
We, along with third parties described in this Policy, use persistent and session cookies, Web beacons and other technologies. These technologies are used for analytics, tracking, Site personalization and optimization and to personalize our and third-party interactions with you.
Cookies. Cookies are small bits of information that are transferred to and stored in separate files within your computer’s browser. You can instruct your browser to stop accepting cookies. But if you do not accept cookies, you may not be able to use all portions or all functionality of this Site.
Persistent cookies remain on the visitor’s computer after the browser has been closed. For example, we use persistent cookies to remember a visitor when the visitor returns to this Site after visiting another website.
Session cookies exist only during a visitor’s online session and disappear from the visitor’s computer when they close the browser software.
Web beacons. Web beacons are small strings of code that provide a method for delivering a graphic image on a Web page or in an email message for the purpose of transferring data. You can disable the ability of Web beacons to capture information by blocking cookies.
Third parties may collect personally identifiable information about an individual user’s online activities over time and across different websites when a user uses this Site.
Do not track. At this time, we do not respond to “Do Not Track” signals sent from Web browsers. Below are links to resources for opting out of different types of online tracking:
For the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout/.
See: http://www.google.com/policies/privacy/ and http://www.google.com/analytics/terms/us.html.
Carmien Tea warrants that it has policies and procedures reasonably designed to detect, prevent and respond to cyberattacks, including providing training to its employees with respect to cybersecurity and monitoring compliance with its cybersecurity policies and procedures. Further, Carmien Tea agrees that it will promptly notify the Information Regulator of any cybersecurity breach where this has been detected.
In the table below, we identify the categories of personal information we might disclose for a business purpose, as well as the categories of third parties to whom we may disclose such personal information. For more information about the business and commercial purposes for which we may disclose personal information, please see the “How We Use or Disclose Your Information” section above.
| Categories of Personal Information | Do we disclose for a Business Purpose? | Do we sell? | Categories of third parties to whom information is disclosed |
| Identifiers | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Customer Records | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Audio, Video and Electronic Data | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Employment Information | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Training and Education Information | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Protected Classifications | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Supplier Records | YES | NO | * Service providers
* affiliates and subsidiaries * data analytics providers |
| Financial and Auditing Information | YES | NO | * Service providers |
Carmine Tea may engage another organisation to provide services relating to the processing of personal data (such as hosting or storage of data, payroll processing etc). In this case Carmien Tea will be the “Customer” while the organisation providing services will be known as the “Contractor”. We will always enter into a SLA (‘Service level Agreement’) to set out the services provided and the parties’ obligations.
For purposes of this Policy, a BYOD is any electronic device or peripheral used for storing, accessing, or transmitting electronic data and includes, but is not limited to:
Connection of any of these devices to the company’s Wi-Fi or intranet will require compliance with the Policy.
Revolving Security Password Code: to protect personal information shared on our network, we will issue coupons to guests with a one-time code. This code will expire on termination of the session.
Carmien Tea will not retain Personal Data (or any electronic documents or records containing Personal Data, or otherwise) for any period of time longer than is necessary to serve the purposes of the contractual arrangement.
Carmien Tea will not retain Personal Data (or any hard-copy documents or records containing Personal Data, or otherwise) for any period of time longer than is necessary to serve the purposes of the contractual arrangement.
We will not transfer Personal Information to a place outside South Africa without the your prior written consent. If you provide consent, we will provide a written undertaking to you that the Personal Information transferred outside South Africa will be protected at a standard that is comparable to that under the POPIA. If we transfer Personal Information to any third party overseas, we will procure the same written undertaking from such third party.
Where we transfer personal information from any third-party service provider within South Africa, we will also make sure that the data is protected accordingly, and procure the same undertaking from such service provider.
Carmien Tea (Pty) Ltd is a registered company under law, based in the Republic of South Africa. All of our facilities, affiliates, vendors, and 3rd party providers are primarily located in South Africa.
Please note that if you are communicating electronically from the European Union (‘EU”), it is likely that your information will leave the EU for use in South Africa as described in this Data Privacy Policy. If personal data of EU residents is transferred outside the EU Area, we will take all necessary steps to maintain the security of such personal data.
This data privacy arrangement of individual personal information will also apply to all other regions the Company exports to or shares personal information with. The supplier and customer “SLA” will specifically or in common refer to these rights and obligations.
This Data Privacy Policy is current as of the Effective Date set forth on page #1. We may change this Data Privacy Policy from time to time, so please be sure to enquire periodically should this be of concern.
If we make any changes to this Data Privacy Policy that materially affect our operational, marketing and administrative practices with regard to the personal information we hold, or have previously collected from you, we will endeavour to provide you with notice in advance of such changes, or through email communications where possible and appropriate.
In general, users have the following rights with respect to their personal information:
Suppliers may submit PAIA requests through one of the following methods:
When you submit a request to know or a request to delete, we will take steps to verify your request by matching the information provided by you with the information we have in our records as well as verifying the context of the request with the data owner. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents may initiate a request on behalf of another individual by contacting us through methods described above; authorized agents will be required to provide proof of their authorization and we may also require that the relevant supplier directly verify their identity and the authority of the authorized agent.
Under POPIA, suppliers who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties (in providing services to us or for their own direct marketing use).
If you have questions about the privacy aspects of our services or would like to make a complaint, please contact our Information Officer at: info@carmientea.shop
Compiled in terms of Section 51 of the Promotion of Access to Information Act, 2 of 2000 (PAIA)
Responsible senior managers company: Melishia Hanekom (Information Officer) to deal with requests
Postal address: PO Box 405, Citrusdal, 7430
Street address: Bergendal Farm, Paleisheuwel Road, Citrusdal, 7430
Telephone number: 022-921 8900
E-mail address of authorised body: info@carmientea.shop
Website: www.carmientea.shop
Latest notice in terms of Section 52(2) regarding records that are automatically available (Section 51(1)(c))
Descriptions of categories of records have not been submitted to the Minister in terms of Section 52(1) and therefore no notice has been published in the Government Gazette.
Records held in terms of other applicable legislation (Section 51(1)(d)).
In addition to information available in terms of the above statutes, the company has such information as is required for the daily running of its business, including internal telephone and address lists, company policies, minutes of meetings, correspondence, directives, contracts, employee’s records, requisitions, applications, memoranda, project evaluations, approvals, consents and general administrative information.
Requests for access to records of this company must be made in the prescribed manner, i.e. must correspond substantially with Form C of Annexure B to Regulations R187 of 15 February 2002 published in the Government Gazette number 23119.
The IO of the company will notify the requester (other than a personal requester) by notice, requiring the requester to pay the prescribed fee (if any) before further processing the request. A personal requester does not pay such a fee.
Fees are set out in the Regulations R187 of 15 February 2002, in Government Gazette number 23119.
