The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Yockenthwaite Farm. By means of this data protection declaration, our business would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
Any data subject may, at any time, contact us with any questions and suggestions concerning data protection.
Yockenthwaite Farm is committed to protecting your privacy and promises not to share any information we collect with any third party.
However, as our online shop is mail order, it is necessary for us to gather certain pieces of personal information in order to fulfil our service and make your shopping experience as simple and easy as possible.
The information we do collect – and how it is collected:
Information that we collect from you
Use of your information
Your information will enable us to supply the goods, services or information you have requested. It will also enable us to process your order and to contact you where necessary concerning your order. Further, where you have consented, we might also use your information to let you know by email about other products and services which we offer. We use Mailchimp for our email newsletters, meaning that all contact details can be updated easily. Mailchimp also gives an easy option to unsubscribe from our mailing list at any time. The unsubscribe option can be found at the bottom of every newsletter email we send. The Mailchimp unsubscribe feature is immediately and permanently effective.
We may share some of your data with others in the situations detailed below, but will never sell your information to a third party.
1. With agents (our online payment processing services, delivery companies and data processing analysts) that we use to process the orders you place with us or who assist us in the service we provide to you. In these instances, we provide them with only the information they need to perform their function. We require all such third parties to treat your personal data as fully confidential and to fully comply with all applicable UK Data Protection and consumer legislation.
How to control and delete Cookies
Alternatively, you may wish to visit ico.org.uk which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
Please be aware that restricting cookies may impact on the functionality of our website.
Security and Data Retention
We employ security measures to protect, so far as reasonably possible, your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We will retain your information for a reasonable period or as long as the law requires or permits.
All credit/debit card payments are processed through PAYPAL. Please visit the relevant site to learn more about their stringent security levels.
We will only use the information that we collect about you lawfully and in accordance with the Data Protection Act (1998) and the new GDPR legislation (May 2018).
Contact possibility via the website:
The website of Yockenthwaite Farm contains information that enables a quick electronic contact to our business, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
Legal basis for the processing:
Contract – Where Yockenthwaite farm need to process someone’s personal data to fulfil contractual obligations to you or because you have asked Yockenthwaite Farm to do something before entering into a contract (eg provide a quote), contract is used as a legal basis.
Legitimate interests – if processing is necessary for your interests, for example keeping customers appraised of new product lines relevant to their business, this is done using legitimate interests as a legal basis.
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal retention policy.
Disclosing your information
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
Any other organisations who access your information in the course of providing services on our behalf will be governed by strict contractual restrictions to make sure that they protect your information and keep to data-protection and privacy laws which apply. We may use service providers to help us run these sites (or services available on the sites).
You can find out what information we hold about you, and ask us not to use any of the information we collect.
Existence of automated decision-making: As a responsible company, we do not use automatic decision-making or profiling.
GDPR AND OUR BUSINESS CUSTOMERS
A new piece of legislation regarding Data Protection became law In May 2018. General Data Protection Regulations (GDPR) replaced the dated Data Protection previously operated by the ICO.
We shall use appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. We shall not sub-contract any processing of personal data unless that personal data continues to be subject to an appropriate level of protection. To the extent that we as data processor for you, we shall only process personal data in accordance with your instructions.
We will keep and use it to enable us to run the business and manage our relationship with you effectively, lawfully and appropriately, whilst we are working with you and past this point. This includes using information to enable us to comply with our customer contract, to comply with any legal requirements, pursue the legitimate interests of the Company and protect our legal position in the event of legal proceedings. If you do not provide this data, we may be unable in some circumstances to comply with our obligations and we will tell you about the implications of that decision.
The criteria used to determine the period of retention of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal data retention policy, as long as it is no longer necessary for the fulfilment of or initiation of the services being provided or is no longer necessary for the specific purpose for which it was obtained.
Under the GDPR data subjects have a number of rights:
• The right to be informed about whether their personal data is being processed by us;
• The right of access to the personal data that we store about them;
• The right to rectification of their personal data should it prove to be inaccurate;
• The right to erasure of their personal data under specified circumstances;
• The right to restrict the processing or their personal data under specified circumstances;
• The right to data portability – the ability to have their personal data transferred to another data controller;
• The right to object to having their personal data processed by us (under specified circumstances); and
• The right not to be subject to automated decision-making, including profiling. (Yockenthwaite Farm does not use automated decision-making or profiling).
As a data subject, if you are not satisfied with the action we have taken in relation to exercising your rights, or if you believe that your data has been misused or that we have not kept it secure, you may complain to the Information Commissioners Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate). https://ico.org.uk/concerns
If for whatever reason you feel that Yockenthwaite Farm has not adhered to the principles as stated above, please contact us via our website or to Yockenthwaite Farm, 14 Craven Nursery Park, Skipton, North Yorkshire. BD23 2QR. Tel: 01756 701030 firstname.lastname@example.org