Privacy policy
Your privacy
Last updated: October 28, 2026
The short version: we collect only what we need to send you the emails you ask for, answer your questions and fill your orders. We don’t sell your information, and we don’t track you around the internet.
Who we are
Thicket is a trade name of The Thicket Co, LLC, a small tea company in Clovis, California. In this policy, “Thicket,” “we,” “us” and “our” mean The Thicket Co, LLC. “You” means anyone who visits thethicketco.com (the “site”), signs up for our emails, contacts us, or buys from us.
This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It covers the site and the ways we communicate with you from it. It doesn’t cover other companies’ websites or apps, even when we link to them.
Information we collect
Information you give us
- Email sign-up. Your email address, when you join our email list.
- “Notify me” requests. Your email address and the blend you asked about, when you ask us to tell you when online ordering opens.
- Mobile tea bar interest form. Your name, email address, and anything you choose to tell us about your event, such as the kind of event, where and when it is, roughly how many guests, and any notes.
- Messages. Whatever you include when you email us or message us on social media.
- Purchases. When you buy from us in person or, once it’s available, online: your name, email address, phone number, shipping and billing address, what you bought, and when.
Payment card details are entered directly with our payment processor. We do not see or store your full card number. We may receive limited payment information from the processor, such as the card type, the last four digits and the transaction result.
Information collected automatically
- Server logs. Like nearly every website, our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type, the page you asked for, the referring page, and the date and time. This is used to deliver the site, keep it secure and fix problems.
- Fonts. The site loads its typeface from Google Fonts. When your browser requests the font, Google receives your IP address and basic browser information. Google describes how it handles this information in its own privacy policy.
- Market calendar. Our Find Us page shows upcoming market days from a Google Calendar. When that page loads, Google receives your IP address and basic browser information, as with the fonts above.
The site does not currently use analytics, advertising pixels, or tracking cookies. If that changes, we will update this policy first.
Information from others
If you interact with us on social media, such as Instagram, we may see your public profile and the content of your messages or comments, according to that platform’s settings and policies.
How we use your information
- To send the emails you signed up for, and to let you know when online ordering opens if you asked us to.
- To reply to your messages and to follow up about mobile tea bar interest.
- To take, fulfill, ship and support your orders, including order confirmations, delivery updates, returns and refunds.
- To run, maintain, secure and improve the site, and to prevent spam, fraud and abuse.
- To keep business, tax and accounting records, and to meet our legal obligations.
- To enforce our terms and protect the rights, property and safety of Thicket, our customers and others.
We do not use your information to make automated decisions that have legal or similarly significant effects on you.
Email from us
We send marketing emails only to people who sign up for them. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing hello@thethicketco.com. Unsubscribing from marketing won’t stop emails about an order you’ve placed, such as receipts and shipping updates.
How long we keep it
- Email list and “notify me” addresses: until you unsubscribe or ask us to delete them.
- Messages and tea bar interest forms: as long as needed to respond and follow up, and generally no longer than two years after our last contact with you.
- Order and payment records: as long as needed to support your order and as long as tax and accounting laws require.
- Server logs: kept by our hosting provider for a limited period under its own retention practices.
When we no longer need information, we delete it or make it so it can no longer identify you.
How we protect it
We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted (HTTPS) connections to the site, limiting access to the people who need it, and choosing reputable service providers. No method of transmission or storage is completely secure, so we can’t guarantee absolute security. If we learn of a security breach that affects your personal information, we will notify you as the law requires.
Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we have about you, and give you a copy of it;
- correct information that is wrong;
- delete your information, unless we need to keep it for a legal or legitimate business reason, such as tax records for a purchase;
- stop sending you marketing email.
To make a request, email hello@thethicketco.com or write to us at the address below. We may need to confirm your identity before acting on a request, usually by asking you to reply from the email address we have on file. You may use an authorized agent to make a request for you; we may ask for proof that they are authorized. We will respond within 45 days, and won’t treat you differently for making a request.
California residents
If you live in California, you may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the rights to know, delete and correct personal information, to opt out of its sale or sharing, and to limit the use of sensitive personal information. As described above, we do not sell or share personal information and do not collect sensitive personal information for the purpose of inferring characteristics about you.
Under California’s “Shine the Light” law, you can ask whether we have disclosed personal information to third parties for their own direct marketing in the past year. We have not.
In the last 12 months we have collected these categories of personal information: identifiers (such as name, email address and IP address), customer records (such as postal address and phone number for orders), commercial information (such as purchase history), internet activity (such as server log data), and any other information you choose to share in a message or form. We collect it from you directly, automatically when you use the site, and from the services described above, for the purposes and with the recipients described in this policy.
Children
The site is meant for adults and is not directed to children under 13. We don’t knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
Where your information is processed
We are based in the United States, and our service providers store and process information in the United States and possibly other countries. If you contact us from outside the United States, your information will be handled in the United States.
Links to other sites
The site links to other websites and services, such as Instagram. Their privacy practices are their own, and we encourage you to read their policies.
Changes to this policy
We’ll update this policy when our practices change, such as when we open an online store or choose an email provider. We’ll change the “last updated” date at the top, and for significant changes we’ll also post a notice on the site or email people on our list.
Contact us
Questions or requests about your privacy:
The Thicket Co, LLC
Attn: Privacy
3185 Willow Ave, Ste F, Clovis, CA 93612
hello@thethicketco.com