Black Cat Farm Shop
c/o Roxton Garden Centre, Bedford Road, Roxton, Beds. MK44 3DY
Version 1.00 – 10 July 2020
The Black Cat Farm Shop (BCFS) is committed to protecting and respecting your privacy.
Any questions concerning this Policy, or our privacy practices should be sent by email to firstname.lastname@example.org or in writing to Sue Lang (Owner) via the shops address (at the top of this document). The rules on processing of personal data are set out in the General Data Protection Regulation (the GDPR).
Who are we?
The Black Cat Farm shop is a small Farm Shop, based in the grounds of Roxton Garden Centre. It is a privately owned business, owned and run by Sue Lang. The business sources and sells locally grown and produced food and craft items, mainly vegetables and fruit.
Our primary objectives are: to sell and promote locally grown and produced food. We are classed under GDPR as a data controller and a data processor. This means that we decide how your personal data we receive is processed and for what purposes.
How do we collect information from you?
We obtain information about you when you use our website, for example registering to receive weekly newsletters. We also receive and process personal information when you agree to have vegetable boxes delivered, for Christmas orders and for customers who order unpasteurised milk from Raw Milk Dairy for collection at the shop.
What type of information do we collect and why?
· your name and address and phone number for the veg box deliveries, Christmas orders and milk orders, plus the details of the goods you require.
· the IP address of the computer you use to access our public website is recorded in our website logs, but it is not cross-referenced with your personal details.
How we use your information?
We may use your information to:
· carry out any obligations arising from any contracts entered into by you and us (such as Veg box deliveries);
· notify you of any changes to our services;
· send you communications which you have requested.
· Send you communications which we think are necessary in the execution of our contractual obligations to you.
. Send you communications about services you have previously purchased (such as Christmas orders).
If you have expressly consented to allow it:
· you will be added to the distribution list of the regular newsletter.
We review our retention periods for personal information on a regular basis.
What is our legal basis for processing your personal information?
Our lawful basis for processing your general personal information under article 6 of GDPR is as follows:
· consent of the individual – we will directly ask for your consent to process your information when you contact us for the supply of a service – such as the delivery of a vegetable box.
· processing necessary for the performance of a contract between you and us, or to take steps to enter into a contract – we will collect and use your information when you apply for our veg boxes, Christmas orders or milk orders, or book tickets to any event that we might be hosting.
· We will use your personal information to process and facilitate you to receive the regular newsletter.
. Legitimate Interest – for instance if you have previously placed a Christmas Order.
Who has access to your information?
The BCFS requires access to personal information in order to process and manage your contract for vegetable boxes, Christmas orders and milk deliveries, and when appropriate to facilitate any events we may. It is important to note we will:
· not sell or rent your information to other third parties;
· not share your information with other third parties for marketing purposes.
Third party providers working on our behalf: we may pass your information on to third party providers for the purposes of completing tasks and providing services to you on our behalf (for example email newsletter service provider). However, where we use third party providers we disclose only the personal information that is necessary to deliver the service. We will not release your information to third parties for them to use for their own direct marketing purposes unless you have requested us to do so, or unless we are required to do so by law, for example, by a court order or for the purposes of preventing a crime.
Where and how your data is stored
Your data is stored electronically on our laptop which is located in the United Kingdom. This is secured via password, backed up regularly – which is kept locked up.
The email newsletter is processed by the provider (Mailchimp based in the USA). Access is protected by password and mobile phone verification. Your name and email address are the only data required for this service. Mailchimp does not have the right to use this information is any way other than to process the newsletter to your email inbox.
How long is your data retained
All stored data will be reviewed annually, during January each year.
For those customers who previously ordered Vegetable boxes, and placed Milk orders – your data will be deleted if you have not ordered a delivery (or collection from the shop) within the previous 12 months.
For Christmas order customers, if you have not placed an order for the previous 2 Christmases your data will be deleted (GDPR – Legitimate Interest).
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct communications from us for example regular newsletters; or updates about Vegetable Boxes, Christmas Orders and Milk orders – you can unsubscribe to these at any time. However if you request your personal details such as address to be removed, we will not be able to deliver vegetable boxes to you (you can of course still collect them from the shop – in which case all we require is your name).
We will not contact you for marketing purposes by: post; email; phone; or, text message unless you have given your prior consent.
You can change your marketing preferences at any time by changing your personal information via the link on the communication, or advising BCFS in writing or by phone/text/face to face.
Aged 16 or Under?
We are especially concerned to safeguard the privacy of children aged 16 or under. We do not process anyone’s data aged under 16 without their parent’s or guardian’s explicit permission. If you are aged 16 or under, please get you parent/guardian’s permission whenever you provide us with personal information.
How to make a complaint?
If you wish to make a complaint about this policy or our use of it, please in the first instance contact by email to email@example.com or in writing to Sue Lang at the Shop address.
We are legally obliged to confirm where, how and what format all personal data that we store of yours. There is no charge for this. We are obliged to provide this within a maximum of 30 days.
If this does not resolve your complaint to your satisfaction, you have a right to lodge a complaint with the Information Commissioners Office:
· on 0303 123 1113; · via email https://ico.org.uk/global/contact-us/email/
· by post at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow. Cheshire. SK9 5AF.
Review of this Policy
We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. [By using our website you are agreeing to be bound by this Policy.]
This Policy was last updated on 10 July 2020.