Privacy
Policy

Who We Are

Brewst ("we", "us", "our") is a functional nutrition brand offering premium mycoprotein-infused instant coffee powder. Our website is located at drinkbrewst.com.

We are the data controller responsible for your personal data collected through our website, free sample sign-up forms, and influencer campaign landing pages.

Data We Collect

We may collect the following types of personal data when you interact with our website or sign up for a free sample:

• Identity data — your first and last name
• Contact data — email address, phone number, and delivery address
• Usage data — pages visited, time spent on site, browser type, and device information
• Marketing data — your preferences for receiving marketing communications from us
• Cookie data — as described in Section 5 below

We do not collect any special category data (such as health or biometric information) unless you voluntarily provide it.

How We Use Your Data

We use the personal data we collect for the following purposes:

• To process and fulfil free sample requests
• To send you marketing communications you have opted into
• To improve our website and user experience
• To analyse traffic and measure the effectiveness of our campaigns, including influencer partnerships
• To comply with legal obligations

Our lawful basis for processing your data is either your consent (for marketing) or our legitimate interests (for analytics and website improvement).

Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

• Service providers — such as email platforms, fulfilment partners, and analytics tools (e.g. Google Analytics)
• Legal authorities — if required by law or to protect our legal rights
• Business transfers — in the event of a merger or acquisition, your data may be transferred as part of that transaction

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

Cookies

Our website uses cookies to improve your browsing experience and to help us understand how visitors use our site. We use the following types of cookies:

• Essential cookies — required for the website to function properly
• Analytics cookies — help us understand traffic patterns and page performance (e.g. Google Analytics)
• Marketing cookies — used to track the effectiveness of our influencer and advertising campaigns

You can control or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect your experience on our site.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For free sample requests, we retain your data for up to 12 months after your sample has been dispatched. For marketing purposes, we retain your data until you withdraw your consent or unsubscribe.

Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a portable format
• Right to object — object to our processing of your data for marketing purposes
• Right to withdraw consent — withdraw consent at any time where we rely on it

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days.

Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please get in touch: