Privacy
A small shop, a short policy.
Who we are
Flint & Brew is a small loose leaf tea business based in Gloucestershire, run by founder Nic Coates as a sole trader. We're responsible for the personal information you share with us. If you have any questions, get in touch through our contact page.
What we collect
When you place an order, we collect your name, email address, delivery address and the details of what you bought. When you use our contact form, we collect your name, email address and message. That's it. We don't buy data, sell data or share lists with anyone.
Why we use it
We use your details to pack and deliver your order, to keep in touch about it, and to answer your questions. We also keep a record of which batch each pouch came from, so we can contact you if there's ever a problem with a blend. And we keep order records for our accounts, because the law requires it. We don't send marketing emails. If we ever start a newsletter, it'll be opt-in only, and we'll update this policy first.
Payments
Payments are handled securely by Stripe. We never see or store your full card details. Stripe's own privacy policy covers the information it holds.
Who else handles your data
We use a small number of trusted services to run the shop: Stripe for payments, Vercel to host the website, Neon to store orders securely, Resend to send order emails, and a delivery carrier to send your tea. They only use your information to provide their service to us.
How long we keep it
Order records are kept for as long as HMRC requires for tax purposes, which is at least five years. Contact form messages are deleted within 12 months of us dealing with them.
Your rights
You can ask to see the information we hold about you, ask us to correct it or delete it, or object to how we use it. Get in touch through our contact page and we'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated: 13 November 2026