Privacy Policy

Last Updated: 05/05/2025

This Privacy Policy explains how Daisy May's Farm, whose registered address is Daisy May's Farm, Hall Road, Elsenham, Essex, CM22 6DN, collects, uses, and shares personal data of users of our website, www.daisymaysfarm.org.

We are committed to protecting your privacy and ensuring compliance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

What Personal Data We Collect

We may collect the following types of personal data from you:

Information You Provide Directly: Contact Information: This may include your name, email address, telephone number, and postal address if you contact us through the Website or make enquiries.
Enquiries and Communications: Records of your correspondence and communications with us.
Form Submissions: Information you provide when filling out forms on our Website, such as feedback forms, newsletter sign-ups, or contact forms.

Information We Collect Automatically:

IP Address and Device Information: We may collect your IP address, browser type, operating system, device identifiers, and other technical information about the device you use to access our Website.
Website Usage Data: Information about your browsing activity on our Website, including the pages you visit, the links you click, the time spent on pages, and your navigation patterns.
Analytics Data: We may use third-party analytics services (such as Google Analytics) to analyse website traffic and usage. These services may collect information about your use of our Website.

How We Use Your Data:

We may use your data for the following purposes, based on the lawful bases outlined in the UK GDPR:

Performance of a Contract: To fulfil our obligations arising from any contracts entered into between you and us (e.g., processing orders or bookings).
Legitimate Interests: For our legitimate business interests, which include responding to your enquiries and providing customer support, improving and personalising your experience on our Website, and Analysing website usage and trends to enhance our services, ensuring the security and functionality of our Website, Marketing our products and services to you (where you have provided consent or we have a legitimate interest to do so, following PECR).
Consent: Where you have given us your explicit consent to process your data for specific purposes (e.g., sending you marketing emails). You have the right to withdraw your consent at any time.
Legal Obligations: To comply with applicable laws and regulations.

Sharing Your Data:

We may share your data with the following categories of recipients:

Service Providers: Third-party service providers who provide services on our behalf, such as website hosting, data analysis, payment processing, email marketing, and customer support. These providers are contractually obligated to process your data only according to our instructions and in compliance with data protection laws.
Analytics Providers: Third-party analytics services (e.g., Google Analytics) to help us understand website usage.
Legal Authorities: We may disclose your data to law enforcement agencies, regulatory bodies, or other legal authorities if required to do so by law or in response to a valid legal request.
With Your Consent: We may share your data with other third parties with your explicit consent.

Your Rights Under the UK GDPR:

Under the UK GDPR, you have several rights regarding your data, including:

The Right to Access: You have the right to request a copy of the personal data we hold about you.
The Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
The Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your data in certain circumstances.
The Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances.
The Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
The Right to Object: You have the right to object to the processing of your data in certain circumstances, including for direct marketing purposes.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. We will post any changes on our Website and update the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at: info@daisymaysfarm.org.

Right to Lodge a Complaint with the ICO

You have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, if you believe that we have not complied with data protection law. You can find more information on the ICO website: www.ico.org.uk.

By using our Website, you acknowledge that you have read and understood this Privacy Policy.