Privacy Policy of Greenfield Heritage Farm Ltd
Effective date: 14 July 2026
1. Introduction and company information
This privacy policy explains how Greenfield Heritage Farm Ltd (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when you interact with us, visit our farm, contact us, make bookings, purchase products or services, subscribe to updates, or otherwise use our services.
Greenfield Heritage Farm Ltd is the data controller for the personal data described in this privacy policy.
Company name: Greenfield Heritage Farm Ltd
Address: Greenfield Heritage Farm, 14 Mill Lane, Stanground, Peterborough PE2 8HE, United Kingdom
Email: [email protected]
Phone: +44 1733 846 295
This policy is intended to provide a clear explanation of our data handling practices in relation to customers, visitors, suppliers, event attendees, website users, newsletter subscribers, and other individuals who may interact with Greenfield Heritage Farm Ltd.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on how you interact with us:
- Identity data: name, title, and similar identifiers.
- Contact data: address, email address, telephone number, and other communication details.
- Booking and transaction data: details relating to bookings, purchases, orders, reservations, attendance, payments, invoices, and receipts.
- Communication data: messages, enquiries, feedback, complaints, and correspondence with us.
- Usage data: information about how you use our website, online forms, or digital services.
- Technical data: IP address, browser type, device identifiers, operating system, and log data.
- Preference data: marketing preferences, communication preferences, and service interests.
- Special category data: only where necessary and lawful, for example information about accessibility needs, dietary requirements, or health-related information you choose to provide for event safety or service delivery.
We generally collect personal data directly from you, for example when you contact us, submit a form, make a booking, purchase a product or service, sign up for communications, or visit our premises. We may also receive data from third parties such as payment processors, booking systems, delivery providers, and service partners.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide customer support;
- to manage bookings, reservations, visits, events, farm activities, and related services;
- to process payments, issue receipts, and maintain financial records;
- to deliver products, services, and visitor experiences;
- to communicate with you about your orders, bookings, and account or service updates;
- to send marketing communications where permitted and appropriate consent or other lawful basis applies;
- to improve our website, services, customer experience, and operational efficiency;
- to comply with legal, regulatory, accounting, and tax obligations;
- to protect the security of our premises, systems, staff, visitors, and property;
- to manage disputes, claims, complaints, and legal proceedings;
- to maintain internal records and business administration.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the context, we rely on one or more of the following legal bases:
- Performance of a contract: where processing is necessary to provide our services, manage bookings, or fulfil a purchase or agreement with you.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, fraud prevention, business administration, customer support, and security.
- Consent: where you have given clear consent, for example for certain marketing communications or optional processing activities.
- Legal obligation: where we must process data to comply with applicable laws, regulations, court orders, or lawful requests from authorities.
- Vital interests: in rare circumstances where processing is necessary to protect someone’s life or physical safety.
- Task carried out in the public interest: only where relevant and legally applicable.
Where we process special category data, we will do so only where a lawful condition under applicable law applies, such as explicit consent, substantial public interest, or another permitted condition.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this privacy policy. These may include:
- payment service providers and card processing partners;
- IT, hosting, cloud storage, cybersecurity, and website service providers;
- booking, scheduling, customer management, and email service platforms;
- delivery, logistics, and fulfilment providers;
- professional advisers such as accountants, auditors, insurers, lawyers, and consultants;
- government authorities, regulators, law enforcement, and courts where required by law;
- marketing and communications providers, where applicable and lawful;
- event, activity, or service partners involved in delivering farm-related services.
We require third parties to handle personal data securely and only for specified purposes. Where third parties act as processors, they do so under contractual obligations and our instructions. Where they act as independent controllers, their own privacy terms may also apply.
6. Data transfer to third countries
Some of our service providers may be located outside the United Kingdom or may store or access data in other countries. If personal data is transferred to a country that does not provide an adequate level of protection under applicable law, we will implement appropriate safeguards to protect your data.
Such safeguards may include:
- standard contractual clauses or equivalent approved transfer mechanisms;
- data transfer agreements with additional protective measures;
- reliance on adequacy decisions where available;
- technical and organisational safeguards designed to secure the data.
Where required by law, you may request further information about the safeguards used for international transfers.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, operational, and reporting requirements.
In general, retention periods are determined by the following factors:
- the nature of the data and the purpose of processing;
- whether we have an ongoing relationship with you;
- legal and regulatory retention requirements;
- limitation periods for potential claims;
- business need and security considerations.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention practices and legal obligations.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to ask us to correct inaccurate or incomplete personal data.
- Erasure: to ask us to delete your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to request that we provide certain data to you or another organisation in a structured, commonly used, machine-readable format, where applicable.
- Objection: to object to processing based on legitimate interests or to direct marketing at any time.
You may also have rights in relation to automated decision-making, if and to the extent such processing occurs. We do not ordinarily use personal data for decisions producing legal or similarly significant effects without human involvement, unless permitted by law and disclosed where relevant.
To exercise any of your rights, please contact us using the details in the “Contact information” section. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference management option we provide in our communications. If you withdraw consent, we may still be entitled to process your data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue promptly and fairly.
You also have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is generally the Information Commissioner’s Office (ICO). Further information is available from the ICO website or by contacting them directly.
11. Data security
We take the security of personal data seriously and implement appropriate technical and organisational measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include, where appropriate:
- access controls and permission restrictions;
- secure storage and encryption where feasible;
- staff awareness and confidentiality obligations;
- regular review of systems and security practices;
- backup and recovery procedures;
- physical security measures at our premises and records locations.
No method of transmission or storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions, requests, or complaints about this privacy policy or our handling of personal data, please contact:
Greenfield Heritage Farm Ltd
Greenfield Heritage Farm, 14 Mill Lane, Stanground, Peterborough PE2 8HE, United Kingdom
Email: [email protected]
Phone: +44 1733 846 295
13. Changes to privacy policy
We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal obligations, or business operations. Any updated version will be effective once posted on our website or otherwise made available to you, unless a different effective date is stated.
We encourage you to review this privacy policy periodically so that you remain informed about how Greenfield Heritage Farm Ltd processes personal data.