We are committed to ensuring that we only process personal data from our customers and website users when we are conducting a legitimate business relationship or when we have expressly been given permission to do so.
This website is owned by The Mile Farm Shop Ltd The Mile, Pocklington, York, England, YO42 1TW.
Our webhost is Krystal Hosting.
Who we are
The Mile Farm Shop Ltd (‘we’ or ‘us’) are a ‘data controller’ for the purposes of the Data Protection Act 1998 and as of 25 May 2018, the General Data Protection Regulation (‘GDPR’) (as applicable the “Legislation”) where we control the purposes for which we process your personal information.
Any questions about our data protection policy or how we handle your personal data should be addressed using our Full Contact information below.
What information do we collect?
Personal information provided by you
We collect personal information about you (such as your name, address and contact details), for example your email address and phone number when you request further information on our services. We do not store any printed, hardcopy records containing personal data.
Personal information about other individuals
If you give us information on behalf of someone else, such as a child for whom you are legally responsible, you confirm that either;
(1) the other person has a contractual relationship with you and knows that you will be transferring their personal data to us for specific purposes and/or
(2) s/he has appointed you to act on his/her behalf and has agreed that you can:
- give consent on his/her behalf to the processing of his/her personal data
- receive on his/her behalf any data protection notices
- give consent to the processing of his/her sensitive personal data (as listed below).
How will we use the information about you?
We collect information about you so that we can:
- provide the information requested
- improve our services and user experience
- If you become a client, your details will be retained for internal record keeping and in order to complete a job.
When you make a booking with us or contact us with an enquiry we need to store your personal information so that we can contact you about your booking or enquiry and in order to keep historical records of our business relationship.
We use ‘consent’ as the legal basis for collecting, storing and processing your personal data only when you have proactively and specifically agreed to us contacting you with marketing promotions – for example, when you have ticked a box on our website to opt-in to receiving marketing promotions. You can withdraw your consent at any time.
Who your information might be shared with
We may disclose your personal data to:
- employees within our group
- our service providers
- law enforcement agencies in connection with any investigation to help prevent unlawful activity
Keeping your data secure
We comply with the Legislation and use the appropriate technical and organisational measures necessary to safeguard your personal data.
Any personal data collected via our website is held within a secure, password protected system, only authorised users with valid user names and passwords have access to the data held on this system. The system is stored on a secure server that is located in a secure UK data centre.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet.
What can I do to keep my information safe?
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Information submitted by an enquiry form will be held on our secure server in order to refer back to for a job.
If you have made a purchase from us we store your personal information for a minimum of 7 years as HMRC and other government bodies require us to keep transactional and invoicing records for this length of time. If you have requested information from us via our website or via phone we will store your personal data on file for a minimum of 1 year, but we will not send marketing information to you unless you have given us permission to do so.
What rights do you have?
The GDPR provides the following rights for individuals whose personal data is processed:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object to processing
- Rights in relation to automated decision making and profiling [(We do not carry out automated decision making and profiling)]
- Right to access – i.e. to request a copy of your information
You can request a copy of your information which we hold (this is known as a subject access request). If you would like a copy of some or all of it, please contact us using details below and:
- let us have proof of your identity (a copy of your driving licence or passport); and
- let us know what information you want.
Right to correct any mistakes in your information
You can require us to correct any mistakes in your information which we hold free of charge. If you would like to do this, please:
- email or write to us (see ‘How can you contact us?’ below)
- let us have enough information to identify you
- let us know the information that is incorrect and what it should be replaced with.
Right to remove your details from our records or restrict how we use your information
You can ask us to stop contacting you for particular purposes or remove your information completely from our records. There may be a legal reason why we need to keep your personal data and, in that circumstance, we will destroy your personal information as soon as we are legally entitled to do so. If you would like us to stop contacting you with information about our services, please: email or write to us (see ‘How can you contact us?’ below).
Right to lodge a complaint with the Supervising Authority
If you have any concerns or complaints about how we use your personal data we hope you will alert us to these directly (see the Contact information below). If you are still unhappy you are entitled to complain to the Information Commissioners Office (ICO) which is the supervising authority in the UK. Their contact details and the procedure can be found at www.ico.gov.uk.
You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
For further information visit www.aboutcookies.org or www.allaboutcookies.org.
How to contact us
If you wish to contact us about any other matter, please send an email to firstname.lastname@example.org.