Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Willow Vale Orchards Ltd collects, uses, discloses, stores, and protects personal data when you interact with us, including when you contact us, place an order, visit our premises, use our website, or otherwise engage with our orchard business.
Willow Vale Orchards Ltd acts as the data controller in respect of the personal data described in this Privacy Policy.
Company details:
- Name: Willow Vale Orchards Ltd
- Address: Willow Vale Orchards, 18 North Street, Emsworth, Hampshire, PO10 7DD, United Kingdom
- Email: [email protected]
- Phone: +44 23 9247 5186
This Privacy Policy is intended to provide clear information about our data handling practices in a professional and transparent manner. It should be read together with any other notices we may provide from time to time.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, and where applicable business name.
- Contact data: email address, telephone number, postal address, and other contact details.
- Order and transaction data: products purchased, order history, payment status, delivery details, and related correspondence.
- Account or enquiry data: details you provide when contacting us, submitting a form, making a booking, or requesting information.
- Communication data: messages, feedback, complaints, and customer service records.
- Technical data: IP address, browser type, device information, operating system, and website usage data.
- Marketing preferences: consent choices and communication preferences.
- Special category data: we do not generally seek to collect special category data. If you choose to provide such information, for example in correspondence, we will only process it where permitted by law and where necessary.
We collect personal data directly from you when you interact with us, and indirectly from service providers, payment processors, delivery partners, analytics providers, and publicly available sources where lawful and appropriate.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide customer support;
- to process orders, deliveries, and payments;
- to manage bookings, visits, events, or orchard-related services;
- to maintain business records and administer our relationship with you;
- to communicate about products, services, updates, and operational matters;
- to improve our website, services, and customer experience;
- to maintain security, prevent fraud, and protect our business and customers;
- to comply with legal obligations, regulatory requirements, and accounting rules;
- to establish, exercise, or defend legal claims;
- to send marketing communications where permitted and, where required, with your consent.
Where data is collected for a specific purpose, we will not process it in a manner that is incompatible with that purpose unless permitted by law.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you, such as fulfilling an order or booking.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include business administration, customer service, fraud prevention, and website improvement.
- Legal obligation: where processing is required to comply with applicable law, including tax, accounting, and regulatory obligations.
- Consent: where you have given clear consent, for example for certain marketing communications or optional data uses.
- Vital interests: where necessary to protect someone’s life in an emergency, although this is expected to be rare.
- Public task or other lawful grounds: where applicable under relevant privacy laws.
Where we rely on legitimate interests, we assess the impact of the processing and implement appropriate safeguards to protect your interests and rights.
5. Data sharing and third parties
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy. These recipients may include:
- payment service providers and card processors;
- delivery, logistics, and fulfilment partners;
- IT, hosting, cloud storage, and website support providers;
- email, communications, and customer relationship management service providers;
- professional advisers, including accountants, auditors, insurers, and legal advisers;
- public authorities, regulators, law enforcement, or courts where required by law;
- analytics and security providers that support our website and business operations;
- other third parties where you have asked us to do so or where you have otherwise consented.
We require third parties to handle personal data in accordance with applicable data protection requirements and, where relevant, under contractual obligations regarding confidentiality, security, and lawful processing.
We do not sell personal data.
6. Data transfer to third countries
Where it is necessary for the operation of our business, personal data may be transferred to and processed in countries outside the United Kingdom and, where applicable, outside the European Economic Area.
When we transfer personal data internationally, we take appropriate steps to ensure that an adequate level of protection is provided, which may include:
- transferring data to countries recognised as providing adequate protection;
- using approved contractual safeguards;
- implementing additional technical and organisational measures where appropriate;
- relying on another lawful transfer mechanism available under applicable law.
If you would like further information about international transfers and the safeguards in place, you may contact us using the details below.
7. Storage duration
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and record-keeping obligations.
The retention period will depend on factors such as:
- the nature of the data and the purpose of processing;
- whether there is an ongoing business relationship;
- applicable legal or regulatory retention requirements;
- whether retention is necessary for dispute resolution or defence of legal claims.
When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices and applicable law.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Right of access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of your personal data in certain circumstances.
- Right to restriction: to request that we limit the processing of your personal data in certain situations.
- Right to data portability: to request that we provide certain data in a structured, commonly used, machine-readable format and, where technically feasible, transmit it to another controller.
- Right to object: to object to processing based on legitimate interests and to object to direct marketing at any time.
You may also have rights in relation to automated decision-making, if and when such processing is used. We do not currently rely on automated decision-making that produces legal or similarly significant effects without human involvement, unless we notify you otherwise.
To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding to your request.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by contacting us using the details below or by using any unsubscribe or preference-management options we provide in our communications. If you withdraw consent, we may continue to process your personal data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can attempt to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. If you are in the United Kingdom, this is ordinarily the Information Commissioner's Office (ICO).
We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority, but you are under no obligation to do so.
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, unlawful destruction, alteration, disclosure, or misuse. These measures may include:
- access controls and role-based permissions;
- secure systems and password protections;
- encryption or other protective technologies where appropriate;
- staff awareness and confidentiality obligations;
- regular review of security procedures and service providers;
- backup and recovery measures.
While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our processing of personal data, or if you wish to exercise your rights, please contact:
- Willow Vale Orchards Ltd
- Address: Willow Vale Orchards, 18 North Street, Emsworth, Hampshire, PO10 7DD, United Kingdom
- Email: [email protected]
- Phone: +44 23 9247 5186
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be made available on our website or otherwise communicated where appropriate.
The latest version of this Privacy Policy will apply from the date it is published, unless stated otherwise. We encourage you to review this page periodically to stay informed about how Willow Vale Orchards Ltd protects personal data.