Eilip Limited (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently and securely.

This Privacy Policy explains how we collect and use personal data when you visit our website, complete our questionnaire(s), register interest, or interact with our ads and communications.

Effective date: 10/02/2026

Last updated: 10/02/2026

Website Eilip Brews

1) If you have questions about this policy or want to exercise your rights, contact us using the details above.

2) What personal data we collect

We may collect the following categories of personal data:

A) Details you provide to us

Identity & contact data: name, email address, phone number, location (e.g., city), company/organisation (if relevant).

Questionnaire data: your answers about tea preferences, usage habits, interest in trials, budgets, workplace/home context, and feedback.

Communication data: messages you send, and our correspondence with you.

B) Data we receive from advertising/lead platforms

If you respond to one of our adverts (for example on social media) or submit a “lead form” on a third-party platform, we may receive:

your name, email address, phone number (depending on what you provided to that platform); and

lead context such as the platform/source, campaign or advert identifier/name, and the time/date you responded.

Third-party platforms (e.g., social media networks) process personal data under their own privacy policies and may act as separate controllers for their own purposes.

C) Data collected automatically when you use our website

Technical data: IP address, device type, browser type/version, operating system, time zone and general location (approx.), and other technology identifiers.

Usage data: pages visited, clickstream information, and how you interact with our site and forms.

3) Sensitive data

We do not intend to collect “special category” data (e.g., health information) through our landing pages or questionnaires. Please do not provide sensitive personal information unless we explicitly request it and explain why.

4) How we use your personal data (purposes and lawful bases)

We use your personal data for the purposes below. UK data protection law requires us to have a “lawful basis” for each use.

A) To respond to you and manage enquiries

Purpose: responding to questions, arranging a call, providing requested information, managing your request (e.g., a product trial).

Lawful basis: our legitimate interests (running our business and responding to requests) and/or steps before entering a contract (where you request something like a trial or commercial discussion).

B) Product research and development (questionnaire insights)

Purpose: understanding preferences, improving product features, planning pilots/trials, and internal analysis.

Lawful basis: our legitimate interests in developing and improving our products and services.

C) Follow-up contact by email and phone

We may contact you:

to respond to your request or discuss a trial you asked about (non-marketing follow-ups); and/or

to send marketing (product updates, launch info, offers) where permitted (see section 6).

Lawful basis:

legitimate interests / steps before contract for non-marketing follow-ups; and

consent (or another permitted basis under e-marketing rules) for marketing messages where required.

D) Measuring advert effectiveness and improving campaigns

Purpose: understanding which campaigns generate interest, improving targeting, and measuring performance.

Lawful basis: our legitimate interests (to market our business effectively).

Where this involves non-essential cookies or ad pixels, we rely on cookie consent (see section 10).

E) Security, fraud prevention, and protecting our website

Purpose: keeping our website safe, preventing abuse, maintaining logs for troubleshooting.

Lawful basis: our legitimate interests and, where applicable, legal obligations.

F) Legal claims and compliance

Purpose: responding to legal requests, establishing/exercising/defending legal claims, and meeting regulatory requirements (where applicable).

Lawful basis: legal obligation and/or legitimate interests.

5) Legitimate interests

Where we rely on legitimate interests, we consider and balance our interests against your rights and expectations. You can ask us for more information about this balancing test by contacting us.

6) Marketing preferences (email, SMS, phone)

Marketing emails/texts

We will only send you marketing emails/texts when permitted by law.

Where required, we will ask for your opt-in consent (e.g., a tick box).

You can unsubscribe at any time using the link in our emails or by contacting us at privacy@eilipbrews.com.

Marketing phone calls

If we carry out marketing calls, we will do so in line with applicable e-marketing rules and respect opt-outs/preferences.

You can tell us at any time that you do not want marketing calls.

Suppression lists

If you opt out of marketing, we may keep a minimal record of your details on a suppression list so we can ensure we don’t contact you again for marketing.

7) Publishing results (anonymised/aggregated insights)

We may publish or share anonymised and/or aggregated insights from questionnaire responses (for example, statistics and trends). We do not publish personal identifiers (like your name, email, or phone number).

We take steps to avoid publishing results that could reasonably identify individuals (including by combining data points). If we ever want to publish an identifiable quote, testimonial, or case study, we will ask for your permission first.

8) Who we share personal data with

We may share your personal data with trusted third parties who help us operate our website and manage leads, for example:

website hosting and infrastructure providers;

form/questionnaire tools;

CRM and database tools;

email sending/marketing platforms;

analytics and advertising partners (only where applicable and usually subject to cookie choices);

professional advisers (legal, accounting);

law enforcement or regulators where we are required to do so.

We require service providers to protect your data and only process it on our instructions.

9) International transfers

Some of our service providers may store or process data outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

transfers to countries recognised as providing adequate protection; or

contractual safeguards approved for UK use (e.g., UK IDTA or the UK Addendum to EU Standard Contractual Clauses), plus additional measures where needed.

10) Cookies and similar technologies

We use cookies and similar technologies:

We do not currently use cookies for tracking/advertising.

Some essential cookies may be set by our hosting/provider or embedded tools (e.g., video, forms).

If we introduce cookies in the future, we’ll update this policy and (where required) ask for consent.

11) How long we keep your data (retention)

We keep personal data only as long as necessary for the purposes described above.

Typical retention periods (adjust to suit your reality):

Enquiries and questionnaire leads (not converted to customers/trials): up to 36 months after last interaction, then deleted or anonymised.

Trial/pilot discussions: up to 5 years after last contact, to manage follow-ups and maintain records.

Marketing subscription data: until you unsubscribe/withdraw consent, plus suppression list records as needed.

Analytics data: up to e.g., 36 months depending on your analytics settings.

We may retain data longer where required for legal, accounting, or dispute-resolution purposes.

12) Your rights

You have rights over your personal data, including:

Access (request a copy),

Rectification (correct inaccurate data),

Erasure (delete data in certain circumstances),

Restriction (limit processing),

Objection (especially to direct marketing and some legitimate-interest processing),

Data portability (in certain cases), and

Withdraw consent (where we rely on consent).

To exercise your rights, contact us at [privacy@eilipbrews.com]. We may need to verify your identity.

13) Complaints

If you have concerns, please contact us first and we’ll try to resolve them.

You can also complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Telephone: 0303 123 1113

14) Security

We use appropriate technical and organisational measures to protect personal data, such as access controls, encryption where appropriate, and least-privilege access. No method of transmission over the internet is completely secure, but we work to protect your information.

15) Children

Our website and questionnaires are not intended for children. If you believe a child has provided personal data to us, please contact us and we will take appropriate steps.

16) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and change the “Last updated” date above.