Privacy Policy of Greenfield Harvest Ltd
Effective date: 14 July 2026
1. Introduction and company information
This Privacy Policy explains how Greenfield Harvest Ltd (“we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you interact with us, including when you visit our website, contact us, purchase our agricultural products or services, apply for employment, or otherwise engage with our business.
Greenfield Harvest Ltd is the data controller for the personal data described in this Privacy Policy.
Company details:
- Name: Greenfield Harvest Ltd
- Address: Greenfield Harvest, 14 Mill Lane, Nursery, Kent, TN2 4QJ, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
As an agricultural business, we may collect and process information relating to customers, suppliers, contractors, delivery partners, visitors, website users, and individuals who enquire about our produce, farm operations, storage, logistics, or related services.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, job title, business name, and similar identifiers.
- Contact data: postal address, email address, telephone number, and other communication details.
- Transaction data: orders, invoices, payment records, delivery details, and purchase history.
- Account and correspondence data: enquiries, feedback, complaints, support requests, and communications with us.
- Technical data: IP address, browser type, device identifiers, operating system, and website usage information.
- Location data: general location inferred from IP address or delivery location where relevant.
- Marketing data: preferences relating to receiving promotional communications.
- Supplier and contractor data: bank details, tax information, certifications, insurance details, and compliance records.
- Recruitment data: CVs, employment history, references, qualifications, and interview notes if you apply for a role.
- Security data: CCTV footage, visitor logs, access records, and incident reports where applicable.
We collect personal data directly from you, from your employer or organisation, from our business partners, from publicly available sources, and automatically through our website and systems.
We may also process special category data only where necessary and permitted by applicable law, for example where this is provided in relation to employment, health and safety, or legal compliance requirements.
3. Purpose of data processing
We use personal data for the following purposes:
- to supply agricultural products and related services;
- to process and fulfil orders, deliveries, invoices, and payments;
- to communicate with customers, suppliers, and other business contacts;
- to manage our website and improve user experience;
- to respond to enquiries, complaints, and requests;
- to maintain business records and manage our contractual relationships;
- to comply with legal and regulatory obligations, including accounting, tax, food safety, traceability, employment, and health and safety requirements;
- to carry out recruitment and personnel management where relevant;
- to protect our business, staff, assets, and visitors, including fraud prevention, security, and incident management;
- to send marketing communications where permitted and where you have the appropriate rights or have given consent;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We process personal data only where we have a valid legal basis to do so. Depending on the context, our legal bases may include:
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where we must process personal data to comply with legal or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities or optional cookies, where applicable.
- Vital interests: where processing is necessary to protect someone’s life or physical safety in an emergency.
- Public interest or legal claims: where applicable under relevant law.
Where we rely on legitimate interests, these may include operating our agricultural business efficiently, protecting our property, preventing fraud, ensuring safe premises, and maintaining business records.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Policy. These may include:
- payment processors and financial institutions;
- delivery, logistics, and transport providers;
- IT, cloud hosting, website, and cybersecurity service providers;
- professional advisers, including lawyers, accountants, auditors, and insurers;
- regulators, government authorities, and law enforcement where required;
- recruitment agencies and reference providers;
- subcontractors, consultants, and operational partners supporting our business;
- food safety, certification, inspection, or compliance bodies where relevant.
We require third parties to handle personal data securely and only in accordance with our instructions or as otherwise permitted by law. We do not sell personal data.
6. Data transfer to third countries
We may transfer personal data to countries outside the United Kingdom where our service providers, partners, or systems are located. Where such transfers occur, we take appropriate steps to ensure that personal data is protected in accordance with applicable legal requirements.
These safeguards may include contractual protections, data transfer agreements, adequacy decisions, or other legally recognised mechanisms. If you would like further information about transfers and safeguards, you may contact us using the details below.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, operational, and reporting requirements.
Retention periods may vary depending on the type of data and the reason we hold it. In general:
- customer and supplier records are retained for the duration of the relationship and for a reasonable period afterwards;
- financial and tax records are retained for the period required by applicable law;
- website and technical logs are retained for security, analytics, and troubleshooting purposes for a limited period;
- recruitment records are retained for the recruitment process and for a short period thereafter unless you consent to longer retention or applicable law requires otherwise;
- CCTV and security records are retained only for as long as necessary for security and incident management purposes.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention procedures.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your data and to obtain a copy of it;
- Rectification: to request correction of inaccurate or incomplete data;
- Erasure: to request deletion of your data in certain circumstances;
- Restriction: to request that we limit processing in certain circumstances;
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller;
- Objection: to object to processing based on legitimate interests or for direct marketing purposes;
- Objection to automated decision-making: where applicable, to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional services or communications to you. To withdraw consent, please contact us at [email protected].
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. If you are in the UK, this is generally the Information Commissioner's Office (ICO).
We would appreciate the opportunity to address your concerns before you approach a supervisory authority.
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include:
- access controls and permission restrictions;
- secure systems and password protection;
- encryption where appropriate;
- staff training and confidentiality obligations;
- monitoring of systems for suspicious activity;
- physical security measures at our premises and where relevant on-site storage facilities;
- incident response and backup procedures.
While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our handling of personal data, please contact:
- Greenfield Harvest Ltd
- Address: Greenfield Harvest, 14 Mill Lane, Nursery, Kent, TN2 4QJ, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, operations, legal obligations, or regulatory requirements. Any updated version will be made available on our website or otherwise communicated where appropriate.
Please review this Privacy Policy periodically to stay informed about how Greenfield Harvest Ltd processes personal data. Your continued use of our services after changes are posted may indicate your acceptance of the updated policy, where permitted by law.