Privacy Policy

1. Introduction and company information

This Privacy Policy explains how Willow Vale Orchards Ltd collects, uses, discloses, stores, and protects personal data when you interact with us, including when you contact us, place an order, visit our premises, use our website, or otherwise engage with our orchard business.

Willow Vale Orchards Ltd acts as the data controller in respect of the personal data described in this Privacy Policy.

Company details:

This Privacy Policy is intended to provide clear information about our data handling practices in a professional and transparent manner. It should be read together with any other notices we may provide from time to time.

2. Data collection and processing

We may collect and process the following categories of personal data:

We collect personal data directly from you when you interact with us, and indirectly from service providers, payment processors, delivery partners, analytics providers, and publicly available sources where lawful and appropriate.

3. Purpose of data processing

We process personal data for the following purposes:

Where data is collected for a specific purpose, we will not process it in a manner that is incompatible with that purpose unless permitted by law.

4. Legal basis for processing

We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:

Where we rely on legitimate interests, we assess the impact of the processing and implement appropriate safeguards to protect your interests and rights.

5. Data sharing and third parties

We may share personal data with third parties where necessary for the purposes described in this Privacy Policy. These recipients may include:

We require third parties to handle personal data in accordance with applicable data protection requirements and, where relevant, under contractual obligations regarding confidentiality, security, and lawful processing.

We do not sell personal data.

6. Data transfer to third countries

Where it is necessary for the operation of our business, personal data may be transferred to and processed in countries outside the United Kingdom and, where applicable, outside the European Economic Area.

When we transfer personal data internationally, we take appropriate steps to ensure that an adequate level of protection is provided, which may include:

If you would like further information about international transfers and the safeguards in place, you may contact us using the details below.

7. Storage duration

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and record-keeping obligations.

The retention period will depend on factors such as:

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices and applicable law.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

You may also have rights in relation to automated decision-making, if and when such processing is used. We do not currently rely on automated decision-making that produces legal or similarly significant effects without human involvement, unless we notify you otherwise.

To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding to your request.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw consent by contacting us using the details below or by using any unsubscribe or preference-management options we provide in our communications. If you withdraw consent, we may continue to process your personal data where another lawful basis applies.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can attempt to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. If you are in the United Kingdom, this is ordinarily the Information Commissioner's Office (ICO).

We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority, but you are under no obligation to do so.

11. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, unlawful destruction, alteration, disclosure, or misuse. These measures may include:

While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

12. Contact information

If you have any questions about this Privacy Policy or our processing of personal data, or if you wish to exercise your rights, please contact:

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be made available on our website or otherwise communicated where appropriate.

The latest version of this Privacy Policy will apply from the date it is published, unless stated otherwise. We encourage you to review this page periodically to stay informed about how Willow Vale Orchards Ltd protects personal data.

7/11/2026 Home