PRIVACY POLICY & DATA PROTECTION

Effective Date: 27th December 2024

Last Updated: 11th April 2025

1. WHO WE ARE

1.1. Malpas Farm Shop is a UK-based farm shop located at Beechcroft, Malpas, SY14 8JQ, operating under company number 14982281.

1.2. We are committed to protecting your personal information in line with the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and applicable platform guidelines (Google Play and Apple App Store).

2. INFORMATION WE COLLECT

a. Information You Provide Directly

• Name, email address, phone number, delivery address

• Payment information (processed securely via third-party providers)

• Preferences and feedback submitted through the App

b. Information Collected Automatically (App-specific)

• Device type, operating system, mobile identifiers

• App usage behaviour (pages visited, features used)

• Location data (if you grant permission)

• Push notification preferences

We do not access your device’s contacts, camera, microphone, or files unless specifically required and explicitly consented to by you.

3. HOW WE USE YOUR INFORMATION

We use your data to:

• Process and fulfil orders

• Communicate with you about your account and orders

• Send personalised promotions and updates (with your consent)

• Provide customer support

• Improve the App’s functionality and user experience

• Prevent fraud and ensure security

• Comply with legal obligations

4. LEGAL BASES FOR PROCESSING

We rely on the following lawful bases:

• Contract: To process and deliver orders

• Consent: For sending marketing messages and using non-essential cookies

• Legitimate Interests: For improving our services, customer engagement, and fraud prevention

• Legal Obligation: Where required by law or for tax/regulatory purposes

You can withdraw consent at any time by updating your settings in the App or contacting us directly.

5. SHARING YOUR INFORMATION

We may share your data with:

• Service providers (e.g., delivery partners, payment processors, hosting providers)

• Regulatory bodies or law enforcement when required

• Retail or promotional partners, but only with your explicit consent

• Analytics providers (for anonymised usage statistics)

We do not sell your personal information.

6. DATA SECURITY

We use industry-standard encryption and access controls to safeguard your information. Your data is stored securely in the UK or EEA where possible. Access is restricted to authorised personnel only.

7. YOUR RIGHTS

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your data (unless required to retain for legal purposes)

• Restrict or object to processing

• Request data portability

• Withdraw marketing consent at any time

8. COOKIES AND TRACKING TECHNOLOGIES

The App may use essential and performance-related cookies and similar technologies to:

• Enhance user experience

• Remember your preferences

• Serve relevant promotions (only with your consent)

We may use third-party services (like Google Analytics for Firebase) to collect anonymised data. You can manage tracking preferences via your device settings or in-app preferences.

9. CHILDREN’S PRIVACY

Our App is not directed to children under the age of 13, and we do not knowingly collect data from them.

10. INTERNATIONAL TRANSFERS

While we aim to store your data within the UK or EEA, if any processing occurs outside these regions, we ensure appropriate safeguards are in place.

11. CHANGES TO THIS POLICY

We review this policy regularly and will notify you via the App or email if we make material changes. The most recent version will always be available on our website and within the App.

12. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:

📍 Malpas Farm Shop, Beechcroft, Malpas, SY14 8JQ

📧 info@malpasfarmshop.co.uk

📞 01948 820 520

1.3. We are registered as a Data Controller with the Information Commissioner’s Office (ICO).

1.4. For privacy enquiries, contact:

• In writing: Data Protection Officer, Malpas Farm Shop, Beechcroft, Malpas, SY14 8JQ

• By email: info@malpasfarmshop.co.uk

• By phone: 01948 820 520

SMS MARKETING — PRIVACY POLICY ADDITION

This section supplements Malpas Farm Shop’s existing Privacy Policy and explains how we use personal information for our SMS marketing programme.

Information we collect

When you subscribe to SMS marketing, we collect your mobile number, any identifying details you provide, and a record of when and how you gave consent. We also record your subscription preferences, messages and replies, delivery information and interactions with links in our texts.

How we use this information

With your consent, we send promotional texts about Malpas Farm Shop products, offers and news. Messages may be sent automatically.

Where your SMS subscription is linked to your email subscription, we may use recorded email engagement to select relevant follow-up texts—for example, a reminder where no opening of an email has been recorded. Email-open tracking is not always accurate.

We also use your information to manage subscriptions, respond to enquiries, assess campaign performance and honour opt-out requests. Consent is our basis for sending SMS marketing. We retain necessary consent and suppression records to demonstrate compliance and prevent unwanted messages.

Your choices

SMS marketing is optional and is not a condition of purchasing from us. Providing a telephone number for an order, or subscribing to email marketing, does not by itself subscribe you to promotional texts.

You can withdraw SMS consent at any time by replying STOP, using the unsubscribe option provided in a message, or emailing office@malpasfarmshop.co.uk. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

Service providers and sharing

We use Mailchimp and its messaging providers to operate our SMS programme. They process information needed to deliver messages, manage consent and opt-outs, provide support and report campaign performance.

We do not sell or rent your mobile number or SMS consent information, or share it with other organisations for their own marketing. We may disclose information where legally required.

International processing

Our service providers may process information outside the UK, including in the United States. Where required, we use recognised safeguards for international transfers, such as applicable adequacy arrangements or approved contractual protections. You can contact us for details.

Retention

We keep SMS subscription and interaction information only for as long as needed to operate the programme and meet applicable legal requirements. After you unsubscribe, we retain the minimum information needed to record your preferences, demonstrate consent history and prevent further marketing texts.

Your rights and contact details

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information. You can object to direct marketing and withdraw consent at any time.

Contact: office@malpasfarmshop.co.uk
Telephone: 01948 820528
Post: Malpas Farm Shop, Beechcroft, Hampton, Malpas, Cheshire, SY14 8JQ.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.