Privacy Policy
At Fernleaf, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website and interact with our services. We believe in transparency and want you to understand your rights and our practices regarding your data.
Last Updated: December 1, 2025
Information We Collect
Personal Information You Provide
We collect information you voluntarily provide when you interact with our website or services, including when you fill out contact forms, create an account, or communicate with us. This may include:
- • Your name and contact information such as email address and phone number
- • Messages and correspondence you send to us
- • Information about your preferences and interests related to tea
- • Any other information you choose to provide
Automatically Collected Information
When you visit our website, we automatically collect certain technical information through cookies and similar technologies, including:
- • Browser type, operating system, and device information
- • IP address and general location information
- • Pages visited, time spent on pages, and navigation patterns
- • Referring website or source that led you to our site
Legal Basis for Processing
We process your personal information based on your consent, to fulfill contractual obligations, for our legitimate business interests in improving our services, and to comply with legal requirements. You have the right to withdraw consent at any time where we rely on consent as the legal basis for processing.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it. Retention periods vary depending on the type of information and purpose for collection.
How We Use Your Information
We use the information we collect for various purposes related to providing and improving our services. These purposes include:
Service Delivery and Communication
To respond to your inquiries, provide requested services, send confirmation messages, and communicate with you about our offerings, including tea experiences, tastings, and subscriptions.
Personalization and Improvement
To understand your preferences and interests, personalize your experience on our website, and improve our services, content, and user interface based on feedback and usage patterns.
Analytics and Research
To analyze website usage, measure the effectiveness of our content, conduct research to develop new offerings, and better understand how visitors interact with our site.
Marketing Communications
To send you information about our services, special offerings, and tea-related content that may interest you. You can opt out of marketing communications at any time.
Security and Legal Compliance
To protect our website and users from security threats, prevent fraud, comply with legal obligations, and enforce our terms and policies.
Information Sharing and Third Parties
Service Providers
We may share your information with trusted third-party service providers who assist us in operating our website, conducting business, and serving you. These providers are contractually obligated to protect your information and use it only for the purposes we specify. Examples include website hosting, email delivery, analytics services, and payment processing.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of such changes and provide information about any new privacy practices.
Legal Requirements
We may disclose your information when required by law, in response to legal process, to protect our rights and property, or when necessary to protect the safety and security of our users or the public.
Your Consent
We will not sell, rent, or share your personal information with third parties for their marketing purposes without your explicit consent. We respect your privacy and give you control over how your information is used.
How We Protect Your Information
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Encryption
We use secure encryption protocols to protect data transmission and storage
Access Controls
Limited access to personal information on a need-to-know basis
Monitoring
Regular security audits and monitoring for unauthorized activity
Breach Notification
Prompt notification procedures in the unlikely event of a data breach
While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we continuously work to maintain and improve our security measures.
Your Privacy Rights
Right to Access
You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used format within a reasonable timeframe.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that information. We will make reasonable efforts to update the information promptly.
Right to Erasure
You may request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Some information may need to be retained for legal or legitimate business purposes.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
Right to Object
You have the right to object to processing of your personal information for direct marketing purposes or when processing is based on legitimate interests. You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails.
How to Exercise Your Rights
To exercise any of these rights, please contact us through our contact page. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing certain requests to protect your privacy and security.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- • Avoid filling out contact forms, account registrations, or any data-submitting features
- • Disable cookies through your browser settings (see our Cookie Policy for more details)
- • Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us through our contact page. We will process your request promptly in accordance with applicable privacy laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.