Privacy Policy

Plain English. What we collect, why we collect it, and what you can do about it.

Who we are

Blink & Brew is a small, home-based fruit infusion business in Nottinghamshire, UK (postcode NG20 8XF). For anything to do with your data, email BlinkandBrew@gmail.com.

Under UK GDPR, we're the "data controller" for the information we hold about you. That just means we're the ones responsible for it.

What we collect and why

When you place an order:

• Your name and delivery address — so we can post your tin to the right person.
• Your email address — so we can send you order confirmations and updates on dispatch.
• Payment information — handled entirely by Stripe. We never see or store your card details.

If you sign up to our newsletter:

• Your email address — so we can send occasional updates about new flavours, behind-the-scenes stories, and the odd offer. Nothing pushy.
• You can unsubscribe any time using the link at the bottom of any email.

If you email us:

• Your email address and whatever you write in your message — kept so we can have a sensible conversation with you.

When you browse the site:

• We log that visits happen — which pages get viewed, how you arrived (e.g. a link or a search), and rough details like your country and device type — but never who you are. It's anonymous, cookieless analytics via Umami (see "Cookies & analytics" below).

Who we share it with

We only share your data with the services we need to actually run the shop:

• Stripe — handles all payments. They process your card details under their own privacy policy.
• Royal Mail or another postal courier — gets your delivery address so they can deliver your order.
• Our email provider (e.g. Gmail, and a newsletter tool if you sign up) — needed to email you.
• Umami — our privacy-friendly analytics tool. It records anonymous visit statistics only and never sees anything that identifies you.

We don't sell your data to anyone. Ever.

How long we keep it

• Order records — kept for 6 years. UK tax law (HMRC) requires this.
• Newsletter signups — kept until you unsubscribe.
• Email conversations — kept for as long as it's useful, then deleted.
• Website visit stats — anonymous and aggregate only, with no way to trace them back to you.

Your rights

Under UK GDPR, you can ask us at any time to:

• See a copy of the information we hold about you.
• Correct anything that's wrong.
• Delete your details (within reason — we still have to keep order records for HMRC).
• Stop using your details for marketing.
• Take your data and move it somewhere else.

Email BlinkandBrew@gmail.com and we'll sort it within 30 days.

Cookies & analytics

This website doesn't use any advertising or tracking cookies. We do log that visits happen — which pages get viewed, how people arrived, and rough details like country and device — so we can see which flavours people are interested in. What we can't see is who you are. We use Umami, a privacy-friendly analytics tool, to do this: it doesn't set cookies, doesn't collect anything that identifies you, and doesn't track you across other websites. The only other thing we load from outside is Google Fonts. If we ever start collecting anything that could identify you, we'll update this page and ask for your consent first.

Social media

We're on Instagram and TikTok. If you follow us or interact with our posts, those platforms have their own privacy policies that apply — we don't control what they do with your data.

How to complain

If you're not happy with how we've handled your information, please email us first — we'll do our best to put it right. If you're still not satisfied, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

If we change how we handle your data, we'll update this page and note the new date below. For anything significant, we'll email subscribers too.

Last updated: June 2026