Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Greenfields Dairy Supplies Ltd collects, uses, stores, shares, and protects personal data when you interact with us, including when you contact us, place an order, request information, use our services, or otherwise engage with our business.
Greenfields Dairy Supplies Ltd is the data controller for the purposes of applicable privacy laws, unless we state otherwise. We are committed to handling personal data lawfully, fairly, transparently, and securely.
Company name: Greenfields Dairy Supplies Ltd
Registered / business address: Greenfields Dairy, Unit 4, Riverside Industrial Estate, St John Street, Cattle, North Yorkshire, YO8 4QG, UK
Email: [email protected]
Phone: +44 1757 824 693
This policy should be read together with any other notices we may provide on specific occasions when we are collecting or processing personal data.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, username, and similar identifiers.
- Contact data: billing address, delivery address, email address, telephone number, and business contact details.
- Transaction data: products purchased, order history, payment confirmations, invoices, delivery information, and returns information.
- Communication data: correspondence with us by email, telephone, post, or other means.
- Technical data: IP address, browser type, device identifiers, operating system, log data, and website usage information.
- Marketing and preferences data: communication preferences, consent choices, and marketing interactions.
- Business-related data: company name, job title, account details, and information relating to commercial supply or service arrangements.
We may collect personal data directly from you, from your employer or business contacts, from our website or digital systems, from payment and delivery providers, and from other third parties where lawful and appropriate.
We do not seek to collect special category data unless it is necessary and lawful to do so. If you provide such data, we will only process it where permitted by applicable law and where appropriate safeguards are in place.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide dairy-related products, supply services, quotations, and customer support;
- to manage customer and supplier relationships;
- to process orders, deliveries, payments, refunds, and invoicing;
- to communicate with you regarding enquiries, updates, complaints, or account matters;
- to maintain business records and fulfil contractual obligations;
- to comply with legal, regulatory, tax, accounting, and reporting obligations;
- to prevent, detect, and investigate fraud, abuse, or other unlawful activity;
- to improve our services, products, website, and operational efficiency;
- to conduct marketing activities where permitted, including sending promotional communications subject to your rights and preferences;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary to comply with applicable laws, including tax and accounting obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as certain marketing communications.
- Vital interests: where processing is necessary to protect someone’s life or physical safety, in rare cases.
- Public interest / legal claims: where applicable law permits or requires processing for legal proceedings or other lawful purposes.
Where we rely on legitimate interests, these may include operating and improving our business, securing our systems, managing commercial relationships, and protecting our rights and property.
5. Data sharing and third parties
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy and where permitted by law. These third parties may include:
- payment service providers and banks;
- delivery, logistics, and courier companies;
- IT, hosting, cloud storage, software, and support providers;
- professional advisers, including accountants, auditors, insurers, lawyers, and consultants;
- regulatory authorities, law enforcement agencies, or courts where required;
- marketing or communications service providers, where lawful;
- business partners, subcontractors, and suppliers involved in fulfilling our services.
We require third parties to respect the security of personal data and to process it in accordance with applicable law. Where they act as processors, they may only process personal data on our documented instructions.
We do not sell personal data.
6. Data transfer to third countries
Where necessary, personal data may be transferred to, stored in, or accessed from countries outside the United Kingdom. If such transfers occur, we will take appropriate steps to ensure that personal data remains protected in accordance with applicable privacy laws.
These safeguards may include reliance on adequacy regulations, standard contractual clauses, international data transfer agreements, transfer risk assessments, and other lawful mechanisms where appropriate.
By using our services or communicating with us, you acknowledge that such transfers may take place where required for business operations, service provision, or support.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, or reporting requirements.
The retention period depends on the type of data and the purpose of processing. In general:
- customer and supplier records are kept for the duration of the relationship and for a period thereafter as required by law or legitimate business needs;
- financial and tax records are retained in accordance with applicable legal obligations;
- correspondence and enquiry records are retained for as long as needed to handle the matter and manage related legal or operational risks;
- marketing data is retained until you withdraw consent, object, or we no longer need it for the relevant purpose.
When personal data is no longer needed, we will securely delete, destroy, or anonymise it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request its transfer where technically feasible.
- Objection: to object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain communications or services where consent was necessary. You can withdraw consent by contacting us at [email protected] or by using any unsubscribe mechanism included in our communications, where applicable.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You may also have the right to complain to the relevant data protection supervisory authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
ICO website: https://www.ico.org.uk
11. Data security
We have implemented appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction.
These measures may include access controls, password protection, secure storage, staff confidentiality obligations, backups, and monitoring of systems and processes. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
Where required, we will notify you and any applicable authority of a personal data breach in accordance with applicable legal obligations.
12. Contact information
If you have any questions about this Privacy Policy or our processing of personal data, please contact:
Greenfields Dairy Supplies Ltd
Greenfields Dairy, Unit 4, Riverside Industrial Estate, St John Street, Cattle, North Yorkshire, YO8 4QG, UK
Email: [email protected]
Phone: +44 1757 824 693
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. Any updated version will be effective when posted on our website or otherwise made available to you, unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Greenfields Dairy Supplies Ltd processes personal data.