Privacy & Cookie Policy — Folium Tea Co

1. Who we are

Folium Tea Co Ltd is the controller of your personal information. We are a company registered in England and Wales (company number 17467615), with our registered office at 66 Paul Street, London EC2A 4NA.

For any privacy question or request, contact us at customersupport@foliumtea.com, call 0203 488 8628, or write to us at the address above.

2. What we collect

Mailing list sign-ups: your email address when you join our list.
Enquiries: your name, email address, and optionally your phone number and company, the type of enquiry and your message when you use our contact form. We also keep what you send us by email, phone or WhatsApp.
Website usage (only with your consent): information about how you use our site, such as pages visited, time spent, the site that referred you, your browser and device type, and an approximate location derived from your IP address. This is collected by HubSpot if you accept analytics and marketing cookies.
Technical information: your IP address and browser details, which our hosting provider and font provider receive automatically so they can deliver the website to you.

We do not knowingly collect special category information, and we do not sell your personal information.

3. How and why we use it

Purpose	Lawful basis
Sending launch news, first-access offers and other updates you have signed up for	Consent. You can unsubscribe at any time using the link in every email or by contacting us.
Replying to your enquiries and managing trade and hospitality conversations	Legitimate interests (responding to people who contact us and developing our business), or steps you have asked us to take before entering into a contract.
Understanding how visitors use our website, and recognising returning visitors who have contacted us or joined our list	Consent, given through our cookie banner.
Keeping the website secure, preventing spam form submissions, and delivering pages and fonts	Legitimate interests (running a secure, working website).
Keeping business records and meeting legal or tax obligations	Legal obligation.

We do not use your information to make decisions about you based solely on automated processing.

4. Who we share it with

We share personal information only with service providers who process it on our behalf, under contract, and only for the purposes described here:

Netlify hosts our website and receives submissions from our sign-up and contact forms.
HubSpot is our customer relationship management, email and website analytics platform.
Google supplies the fonts on our website through Google Fonts. Your browser connects to Google's servers to load them, which shares your IP address with Google. Google Fonts does not set cookies.
WhatsApp (Meta) handles any message you send us through WhatsApp, under WhatsApp's own privacy terms.
Professional advisers, such as our accountants, where necessary.

We may also disclose information where the law requires it, or to protect our rights.

5. International transfers

Some of our providers, including Netlify, HubSpot and Google, may process data in the United States or elsewhere outside the UK. Where this happens, we rely on recognised safeguards, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework), the ICO's International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information.

6. How long we keep it

Mailing list: until you unsubscribe. We then keep a suppression record of your email address so that we do not contact you again.
Enquiries: up to 2 years after our last contact with you, unless a business relationship follows.
Customer and business records: 6 years after the end of the financial year they relate to, as required for tax and accounting purposes.
Cookies: for the periods shown in the cookie tables below.

7. Your rights

Under UK data protection law, you have the right to:

access the personal information we hold about you
have inaccurate information corrected
have your information erased in certain circumstances
restrict how we use your information in certain circumstances
object to processing based on legitimate interests, and object at any time to direct marketing
receive information you provided to us in a portable format, where processing is based on consent or contract
withdraw your consent at any time, without affecting anything we did before you withdrew it

To use any of these rights, email customersupport@foliumtea.com. We will respond within one month, and there is normally no charge.

8. Complaints

If you are unhappy with how we have handled your personal information, please tell us first at customersupport@foliumtea.com, with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

9. Cookies and similar technologies

Cookies are small files that a website stores on your device. Similar technologies, such as your browser's local storage, work in a comparable way. In this policy, "cookies" covers all of them.

When you first visit our site, a banner asks for your choice. Analytics and marketing cookies are only set if you select Accept, and Reject is just as easy to choose. Cookies that are strictly necessary, or that fall within the exceptions allowed under PECR as amended by the Data (Use and Access) Act 2025, do not need your consent. We still tell you about them below.

Strictly necessary

These remember your cookie choices and protect the site and its forms from abuse. They are set by HubSpot.

Name	Purpose	Expires
__hs_cookie_cat_pref	Records which cookie categories you have accepted	6 months
__hs_opt_out	Remembers that you rejected cookies, so we do not ask again	6 months
__hs_do_not_track	Stops the tracking code sending any information to HubSpot	6 months
__hs_initial_opt_in	Prevents the banner reappearing while you browse	7 days
__cf_bm, __cfruid, __cfuvid	Bot protection and rate limiting by HubSpot's content delivery network (Cloudflare)	30 minutes to end of session

Functionality

Our own site uses your browser's local storage to remember whether you have closed or completed the sign-up pop-up, so it does not keep reappearing. This adapts the site to your preference, and nothing is sent to us. You can remove it at any time by clearing your browser's site data for foliumtea.com.

Name	Purpose	Expires
folium-signup-dismissed	Remembers when you closed the sign-up pop-up, so it stays hidden for 7 days	Until you clear it
folium-signup-joined	Remembers that you have joined, so the pop-up is not shown again	Until you clear it

Analytics and marketing (only with your consent)

HubSpot sets these to measure visits and to recognise returning visitors. If you have joined our list or contacted us, your visits can be linked to your HubSpot contact record. Because this goes beyond simple statistics, we only set these cookies if you accept them.

Name	Purpose	Expires
__hstc	Main visitor-tracking cookie: first visit, latest visit and number of sessions	6 months
hubspotutk	Keeps track of a visitor's identity, and links visits to a contact record when a form is submitted	6 months
__hssc	Counts page views within a session	30 minutes
__hssrc	Detects when you have restarted your browser	End of session

Managing cookies

You can change your choice at any time with the Change cookie settings button above. You can also block or delete cookies through your browser settings, although parts of the site may then not work as intended. For more guidance, visit ico.org.uk.

10. Changes to this policy

We may update this policy from time to time, for example when we launch online ordering or add new services. The date at the top shows when it last changed. Where a change significantly affects you, we will tell you.