M

Privacy Policy

Last updated: 17th March 2025

1. Introduction

Welcome to The Wellbeing Farm’s privacy policy. This policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (www.thewellbeingfarm.co.uk) or interact with us through other means, including social media, emails, and in-person communication.

By using our website, you confirm that you are at least 13 years old and consent to the collection and use of your data as outlined in this policy.

Data Controller:
The Wellbeing Farm Ltd acts as the data controller, which means we determine how your personal data is processed and for what purposes.

Contact Information:
If you have any questions about this privacy policy, please contact our Data Protection Officer:

Legal Entity: The Wellbeing Farm Ltd
Data Protection Officer: Celia Gaze, Managing Director
Email: [email protected]
Postal Address: The Wellbeing Farm, Plantation Road, Edgworth, Bolton, Lancashire BL7 0BY

It is important that the personal data we hold about you is accurate. Please notify us of any changes to your personal data by emailing [email protected].

2. What Data We Collect and How We Use It

Personal data refers to any information that can identify an individual. The data we process includes:

A. Types of Data Collected

  1. Communication Data:

    • Any communication you send to us via website contact forms, email, social media messaging, or other methods.
    • Purpose: To communicate with you, maintain records, and handle legal matters if necessary.
    • Legal Basis: Legitimate interests (to respond to your queries and maintain business records).

  2. Customer Data:

    • Information related to purchases, such as name, title, billing and delivery addresses, email, phone number, and payment details.
    • Purpose: To process transactions and fulfil orders.
    • Legal Basis: Performance of a contract (to deliver goods/services).

  3. User Data:

    • Information about how you use our website, including content you upload or interact with.
    • Purpose: To operate, secure, and improve our website.
    • Legal Basis: Legitimate interests (to manage and optimise our website).

  4. Technical Data:

    • IP address, browser type, time spent on pages, navigation paths, and device details.
    • Purpose: To analyse website performance, security, and improve user experience.
    • Legal Basis: Legitimate interests (to enhance website security and functionality).

  5. Marketing Data:

    • Preferences regarding receiving marketing communications from us and third parties.
    • Purpose: To inform you about promotions, competitions, and relevant offers.
    • Legal Basis: Consent (where required) or legitimate interests (to grow our business).

We do not collect sensitive data such as ethnicity, religious beliefs, health records, or criminal history.

3. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Directly from you: When you fill in forms, subscribe to marketing, or contact us.
  • Automatically: Through cookies and tracking technologies (see our Cookie Policy for details).
  • From third parties: Including Google Analytics, Facebook, and wedding/event directories such as Guides for Brides and Hitched.
  • From publicly available sources: Such as Companies House and the Electoral Register (UK only).

4. Marketing Communications

We may send you marketing communications if:

  • You have purchased from us or requested information.
  • You opted in to receive updates.
  • You are a limited company (under UK law, we may send marketing emails without prior consent).

How to Opt Out:

  • Click the unsubscribe link in any email.
  • Email us at [email protected] requesting removal.

Opting out of marketing does not affect transactional emails related to purchases or essential communications.

Before sharing your data with third-party marketing partners, we will obtain your explicit consent.

5. Sharing Your Personal Data

We may share your data with:

  • Service providers: IT, payment processors, delivery companies.
  • Professional advisors: Lawyers, accountants, insurers.
  • Regulatory authorities: HMRC, ICO, or other government bodies if legally required.
  • Business partners: If we sell, merge, or transfer part of our business.

We require all third parties to process your data securely and lawfully.

6. International Data Transfers

Some service providers may be outside the UK/EEA. We ensure adequate protection by:

Transferring data only to approved countries (with adequate data protection laws).
Using EU Standard Contractual Clauses for data security.
Working with UK GDPR-compliant providers.

If no lawful basis exists, we will seek your explicit consent before transferring data.

7. Data Security

We take security seriously and have implemented measures to prevent:

Unauthorised access
Accidental loss or alteration
Data breaches

Only employees with a legitimate business need have access to personal data. In the event of a data breach, we will notify affected individuals and regulators if required by law.

8. Data Retention

We retain your data only as long as necessary, considering:

Legal requirements (e.g., tax records kept for six years).
Business needs (customer service, security).
Anonymisation (some data may be kept for research/statistics).

Once no longer needed, data will be securely deleted or anonymised.

9. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

Access – Request a copy of your personal data.
Correction – Update inaccurate data.
Erasure – Ask us to delete your data.
Restriction – Limit how we process your data.
Objection – Stop processing for direct marketing.
Data Portability – Transfer data to another provider.
Withdraw Consent – If processing is based on consent.

To exercise your rights, contact [email protected]. We aim to respond within one month.

If you are unhappy with our response, you can complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

10. Third-Party Links

Our website may link to external sites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.

11. Cookies & Tracking

We use cookies to enhance website performance and personalise your experience. You can disable cookies in your browser settings. See our Cookie Policy for details.

For any questions regarding this privacy policy, contact us at [email protected].