Privacy Policy
1. Introduction
Tyninghame Community Farm CIC (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your data when you use our website, place orders, or interact with our services. By engaging with our farm, you consent to the practices described herein.
2. Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, delivery address, email address, phone number, and billing address provided during order placement or account registration.
- Order Details: Information about the products you purchase (e.g., weekly vegetable boxes, specific vegetables, melons, roots, or tubers), order dates, and payment history.
- Payment Information: Credit/debit card details or other payment method data, which are processed securely through third-party payment processors (we do not store full payment details).
- Website Usage Data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and analytics tools to improve user experience.
- Communication Preferences: Your choices regarding marketing emails, newsletters, or updates about our services.
3. How We Use Your Information
We use your personal information for the following purposes:
- To process and fulfill your orders, including harvesting, packing, and delivering fresh produce (same-day picking and weekly delivery as described in our business model).
- To communicate with you about your order status, delivery updates, or changes to our services.
- To manage your account, process payments, and resolve any issues with your orders.
- To send you promotional offers, seasonal updates, or information about new products (only if you have opted in).
- To improve our website, services, and product offerings based on user behavior and feedback.
- To comply with legal obligations, such as tax or regulatory requirements.
4. Disclosure of Your Information
We will not share your personal information with third parties except in the following circumstances:
- Service Providers: We may share data with trusted third parties who assist in our operations, such as delivery companies (to ensure your weekly boxes reach you), payment processors (to handle transactions), and IT service providers (to maintain our website). These parties are contractually obligated to protect your data and use it solely for the purposes we specify.
- Legal Requirements: We may disclose information if required by law, court order, or government authority, or to protect our legal rights, property, or safety, or that of our customers or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with appropriate safeguards in place.
- With Your Consent: We may share information with third parties if you explicitly authorize us to do so.
5. Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:
- Secure socket layer (SSL) encryption for data transmitted via our website.
- Restricted access to personal data within our organization.
- Regular security audits and updates to our systems.
- Secure storage of data with trusted hosting providers.
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take all reasonable steps to minimize risks.
6. Your Rights
You have the following rights regarding your personal information, subject to applicable law:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to update or correct inaccurate information.
- Erasure: Request deletion of your data if we no longer have a legal basis to retain it.
- Restriction of Processing: Ask us to limit how we use your data (e.g., if you contest its accuracy).
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Opt-Out: Unsubscribe from marketing communications at any time by clicking the “unsubscribe” link in our emails or contacting us directly.
To exercise these rights, please contact us using the details in Section 9. We will respond to your request within one month of receipt.
7. Cookies and Tracking Technologies
Our website uses cookies—small text files stored on your device—to enhance your browsing experience. Cookies help us:
- Remember your preferences (e.g., delivery address).
- Track website usage to improve functionality.
- Personalize content and offers.
You can manage cookie settings through your browser, but disabling cookies may affect the performance of our website. For more details, see our Cookie Policy (if applicable).
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. For example:
- Order details are kept for 7 years for tax and accounting purposes.
- Contact information for marketing is retained until you opt out.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: Jacob2PhilipWright@outlook.com
- Phone: +44 7450 309462
- Address: St. Baldreds, Dunbar, EH42 1XN, GB
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The revised policy will be posted on our website with an updated “Last Modified” date. We encourage you to review it regularly.