Privacy Policy

We respect your privacy and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

1. Who we are

The Herb Farm is the data controller for orders placed through our website (theherbfarm.co.uk).

If you have any questions about this policy, you can contact us using the form at the bottom of the website.

2. Information we collect

a) Information you provide

When you place an order, we collect:

1. name
2. billing and delivery address
3. email address
4. phone number
5. order details

We do not see or store your card details. Payments are handled securely by SumUp.

b) Information collected automatically

When you visit our site, some technical information may be collected automatically by SumUp’s website platform, such as:

1. IP address
2. browser type
3. device information
4. basic site usage data

This is used for site security and essential site functionality.

We do not use advertising pixels, targeted advertising, or advanced analytics beyond what SumUp provides for basic operation.

3. How we use your information

We use your information to:

1. process and deliver your order
2. send order confirmations and updates
3. contact you if there is an issue with your order
4. comply with legal and accounting obligations

If you contact us directly, we will use your details to respond.

We do not sell your data, share it for marketing, or use it for targeted advertising.

4. Legal basis for processing

We process your information because it is necessary for:

1. performing a contract (fulfilling your order)
2. our legitimate interests (running a secure and functional website)
3. complying with our legal obligations (record-keeping, accounting)

5. Sharing your information

We only share your data with:

1. SumUp, for secure payment processing and website functionality
2. delivery providers (such as Royal Mail) to deliver your order
3. professional service providers if legally required (e.g., accounting)

These organisations may process data outside the UK/EU but must do so under appropriate safeguards.

We never share your data for advertising or profiling.

6. Data retention

We keep order records for as long as required for accounting and tax purposes (usually up to 7 years).

After this period, your data is securely deleted.

Messages submitted through the contact form are kept only as long as necessary to handle your enquiry.

7. Your rights

You have the right to:

1. access the personal data we hold about you
2. request correction or deletion
3. object to or restrict processing
4. request a copy of your data (data portability)
5. withdraw consent if consent was ever requested

To exercise any of these rights, contact us using the website form.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Changes to this policy

We may update this policy from time to time. The most recent version will always be displayed on this page.

9. Contact

For any questions about this policy or your data, please contact us using the form at the bottom of theherbfarm.co.uk.