1. Introduction and Company Information
This Privacy Policy explains how Greenfield Harvest Ltd collects, uses, stores, shares, and protects personal data when you interact with us, including through our website, by email, by telephone, in person, or in the course of our agricultural business operations.
Data Controller: Greenfield Harvest Ltd
Registered/Business Address: Unit 4, Greenway Business Park, Broughton Road, Skipton, North Yorkshire, BD23 3FA, UK
Email: [email protected]
Phone: +44 1756 384 927
Greenfield Harvest Ltd is an agriculture business and may process personal data relating to customers, suppliers, contractors, website users, job applicants, visitors, and other individuals whose data we receive in the course of our operations.
2. Data Collection and Processing
We may collect and process the following categories of personal data:
- Identity data: name, title, business name, job title, and similar identifiers.
- Contact data: address, email address, telephone number, and other contact details.
- Transaction data: records of products or services supplied, orders, invoices, payments, and delivery details.
- Communication data: correspondence with us by email, telephone, contact forms, or otherwise.
- Technical data: IP address, browser type, device information, and usage data collected through our website or online services.
- Supplier and contractor data: payment details, business credentials, insurance information, and performance records.
- Employment and recruitment data: CVs, references, qualifications, work history, right-to-work information, and interview notes.
- Site and operational data: visitor logs, access records, health and safety records, and operational information relevant to our agricultural activities.
We may receive personal data directly from you, from your employer or business partner, from publicly available sources, from our service providers, or from third parties who are legally entitled to share it with us.
We do not intentionally collect special category data unless it is necessary and lawful to do so, for example in connection with employment, health and safety, or legal compliance requirements.
3. Purpose of Data Processing
We process personal data for the following purposes:
- to provide and manage our agricultural products and services;
- to communicate with customers, suppliers, contractors, and other business contacts;
- to manage accounts, payments, orders, deliveries, and invoicing;
- to operate, maintain, and improve our website, systems, and business processes;
- to manage recruitment, employment, training, and workforce administration;
- to maintain health and safety, site security, and operational records;
- to comply with legal, regulatory, tax, accounting, and reporting obligations;
- to detect, investigate, or prevent fraud, misuse, or security incidents;
- to establish, exercise, or defend legal claims;
- to send service-related updates and other communications relevant to our relationship with you;
- where permitted, to carry out marketing or business development activities.
Because Greenfield Harvest Ltd operates in the agriculture sector, processing may also include operational information connected with land management, supply chains, harvesting, storage, transport, and farm or site access arrangements.
4. Legal Basis for Processing
We process personal data only where we have a valid legal basis. Depending on the circumstances, the legal basis may include:
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where we must comply with applicable legal, tax, accounting, health and safety, or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities where required.
- Vital interests: in limited cases, where processing is necessary to protect someone’s life or physical safety.
- Public interest or official authority: where relevant and permitted by law.
Where we rely on legitimate interests, our interests may include operating and improving our business, maintaining security, preventing fraud, managing relationships, and ensuring efficient agricultural operations.
5. Data Sharing and Third Parties
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy, including:
- service providers and processors acting on our instructions, such as IT support, hosting, cloud storage, payroll, communications, and administrative services;
- professional advisers, including accountants, auditors, insurers, legal advisers, and consultants;
- delivery providers, logistics partners, and supply chain participants;
- payment processors and banking institutions;
- regulators, public authorities, law enforcement agencies, or courts where required or permitted by law;
- recruitment agencies or referees in connection with hiring and employment;
- business partners or counterparties involved in transactions, contracts, or site operations.
We require third parties who process personal data on our behalf to implement appropriate technical and organisational measures and to use the data only as instructed by us and in accordance with applicable law.
6. Data Transfer to Third Countries
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that the data is protected in a manner consistent with applicable privacy requirements.
Such safeguards may include:
- transfers to countries recognised as providing an adequate level of protection;
- standard contractual clauses or equivalent approved transfer mechanisms;
- additional technical and organisational safeguards where appropriate.
If you would like further information about international transfers and the safeguards we use, you may contact us using the details below.
7. Storage Duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, tax, regulatory, or reporting requirements.
Retention periods vary depending on the nature of the data and the purpose of processing. In general, we consider:
- the length of our relationship with you;
- whether we have a continuing legal, contractual, or business need to retain the data;
- the existence of any legal limitation periods or record-keeping requirements;
- the sensitivity, volume, and nature of the data;
- the potential risk of harm from unauthorised use or disclosure.
When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices and applicable law.
8. User Rights
Depending on applicable law and the circumstances of processing, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where feasible, have it transmitted to another controller.
- Objection: to object to processing based on our legitimate interests and to object to direct marketing at any time.
To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or communications where consent is necessary. To withdraw consent, please contact us at [email protected].
10. Right to Complain
If you have concerns about our use of your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. In the UK, this is generally the Information Commissioner's Office (ICO).
11. Data Security
We take the security of personal data seriously and use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
These measures may include access controls, authentication procedures, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of our systems and processes.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
12. Contact Information
If you have any questions about this Privacy Policy, or if you wish to exercise your rights, please contact:
Greenfield Harvest Ltd
Unit 4, Greenway Business Park, Broughton Road, Skipton, North Yorkshire, BD23 3FA, UK
Email: [email protected]
Phone: +44 1756 384 927
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.
Any updated version will be made available on our website or otherwise communicated where appropriate. The revised policy will take effect from the date stated in the updated version.
We encourage you to review this Privacy Policy periodically to stay informed about how Greenfield Harvest Ltd protects your personal data.