PRIVACY & DATA PROTECTION POLICY
This privacy & data protection policy sets out how Hundred River Farm uses and protects any information that you give to Hundred River Farm. We are committed to safeguarding the privacy of our visitors, guests, website users and participants. Should we ask you to provide certain information by which you can be identified when using our website or services, then you can be assured that it will only be used in accordance with this privacy statement.
Hundred River Farm may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
For the purpose of the Data Protection Act 1998, the data controller is Hundred River Farm. The information you provide will be held in accordance with the Data Protection Act and may be used by Hundred River Farm and its agents to supply the services which you have requested.
What we collect
We may collect the following information from general clients:
Name and job title
Contact information including email address
Organisation or personal postal address
For customers or volunteers;
Information that you provide to us for the purpose of allowing admission to events, workshops or activities hosted on our premises. This involves personal information such as e-mail, name, phone number.
Some details of the fulfilments and transactions you carry out through our website, which is required for our billing purposes.
Some information regarding your use of our website and facilities such as your numbers of bookings. We always take responsible endeavours to only use the information that we collect in order to give you the best service and personalise our offer to you.
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
internal record keeping
we may use the information to improve our products and services
we may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided if you have requested these
from time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or post. We may use the information to customise the website according to your interests.
We don’t store credit or debit card information in our servers but these may be held by a third party software such as Stripe.
The personal data stored shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed. Hundred River Farm collects and processes appropriate information, and does so only to the extent that it is needed to fulfil operational needs or to comply with legal requirements.
Where we store your personal data
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted. Unfortunately, the transmission of information via the Internet is never completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Understands that they are contractually responsible for following good data protection practice.
Is appropriately trained to do so.
Is appropriately supervised.
Any enquiries about handling personal information are promptly and courteously dealt with;
An annual review and audit is made of the way personal information is managed;
Any unauthorised access or processing of personal data will be considered a serious offence, and may be a disciplinary matter for staff.
Links to other websites
Our website may contain links to other websites of interest. However, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Controlling your personal information
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen. If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to information
The Data Protection Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. If you would like a copy of the information held on you please email us at email@example.com. We will provide you the information within one calendar month for free. If you want more than one copy there may be a charge.