Privacy Policy

Last updated: 28 October 2026.

Who we are

This website is run by Core and Coat Limited, a company registered in England and Wales (company number 17287859), whose registered office is at Office 2 Bridgeview House, Ray Mead Road, Maidenhead, Berkshire SL6 8NJ ("Fora", "we", "us"). We are the data controller for the personal data described here. You can contact us at hi@foragummy.com.

What this website does

This site presents Fora and lets you register your interest. If you choose a plan and go through the checkout page, nothing is charged and no order is placed. We ask for your name and email so we can notify you when the product becomes available.

What we collect

• At the checkout page: your email address, first name, the plan you selected (its name, quantity and price) and the language of the page you used.
• When you sign up: a record of the sign-up, such as the time and technical details our email provider logs (for example your IP address).
• If you accept the cookie banner: information about how you use the site, such as the pages you visit, where you click and how far you scroll, your approximate location, device and browser (see "Cookies and analytics" below).

We do not ask for card details, delivery addresses or any payment information, and we do not collect them.

Why we use it, and our legal basis

Launch notifications

If you register your interest in Fora, we use your details only to notify you when the product becomes available so that you can complete your purchase. We do not send marketing or promotional emails. Registration does not constitute an order, and no payment is taken. Our legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by contacting hi@foragummy.com.

Analytics

With your consent, we use Google Analytics and PostHog to understand how visitors use our website and improve their experience, including through heatmaps of clicks and scrolling. With your consent, we also use the Meta Pixel to measure the effectiveness of our advertising and to reach people who have shown interest in Fora with relevant ads on Facebook and Instagram. Our legal basis is your consent (Article 6(1)(a) GDPR). You can change your preferences at any time through Cookie settings.

Website operation and security

We process limited technical information, such as IP addresses and browser information, to operate our website, maintain security and prevent misuse. Our legal basis is our legitimate interests (Article 6(1)(f) GDPR) in providing a secure and functional website.

Who processes your data

We work with trusted service providers to operate our website and communicate with visitors:

• Klaviyo, Inc.: Stores launch registrations and manages our availability notifications by email. Data is processed in the United States, with transfers protected by Klaviyo's participation in the EU–US Data Privacy Framework and its UK Extension.
• Google Ireland Limited / Google LLC: Provides Google Analytics when you consent to analytics cookies. Applicable transfers to Google LLC in the United States are protected by its participation in the EU–US Data Privacy Framework and its UK Extension.
• PostHog: Provides click and scroll heatmaps and usage statistics when you consent to analytics cookies. We use its EU cloud, so the data is stored in the EU. We do not use session recordings, and we ask it to ignore the forms on this site.
• Meta Platforms Ireland Limited / Meta Platforms, Inc.: Provides the Meta Pixel when you consent to analytics and advertising cookies. It receives information such as the pages you visit, your browser and device details, and when you register your interest. Meta may transfer data to the United States, where its transfers rely on Meta's participation in the EU–US Data Privacy Framework and its UK Extension.
• Adobe Inc. (Adobe Fonts): Delivers the headline font used on this website. When a page loads, your browser connects to Adobe's servers, which receive technical information such as your IP address. Our legal basis is our legitimate interests (Article 6(1)(f) GDPR) in displaying the website consistently.
• GitHub, Inc.: Hosts our website and may process technical information, including IP addresses, necessary to deliver the website.

We do not sell your personal data. For more information about applicable international data transfer safeguards, contact hi@foragummy.com.

Cookies and analytics

We use optional analytics cookies to understand how visitors interact with our website. Google Analytics, PostHog and the Meta Pixel are activated only when you accept the cookie banner. Until then they are not loaded and no analytics or advertising cookies are set. If you accept, Google Analytics sets cookies (named _ga and _ga_…), PostHog stores a cookie and local-storage entries (names starting with ph_) and the Meta Pixel sets cookies (named _fbp and, if you arrive from a Meta ad, _fbc). You can withdraw your consent at any time through Cookie settings in the page footer, which will stop further analytics tracking and remove the analytics cookies from your browser.

Your browser may also store your language preference and cookie preferences to ensure the website functions correctly.

Is providing your information required?

Providing your information is optional. Your email address and first name are required if you wish to receive a launch notification. Without these details, we cannot notify you. You can browse our website without registering or accepting analytics cookies.

Automated decision-making

We do not use personal data collected through this website to make solely automated decisions that produce legal or similarly significant effects on individuals.

How long we keep it

We retain your contact details for as long as necessary to provide the communications you have requested.

We retain your details for the purpose of notifying you about product availability and delete them when they are no longer needed, unless another lawful basis applies. You can ask us to delete them at any time.

We may retain a minimal record of your opt-out to ensure you are not contacted again.

Google Analytics data is retained for 2 months. PostHog data is retained for no longer than 12 months. The Meta Pixel cookies expire after 90 days, and data received by Meta is kept in line with Meta's own privacy policy.

Technical and security logs are retained only for as long as necessary for website operation, security and troubleshooting, in accordance with our hosting provider's applicable retention arrangements.

Your rights

You can ask us to access, correct or delete your data, restrict or object to its use, or receive a copy of it, and you can withdraw consent at any time. Contact us at hi@foragummy.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Changes

We may update this notice and will change the date above when we do.