Who we are
This website is run by Hartington Farm Shop & Café (“we”, “us”, “our”), Mill Lane, Hartington, Derbyshire SK17 0AN. We are the controller of the personal information described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions about your information? Email hartingtonfarmshop@gmail.com, call 01298 84496, or write to us at the address above.
What we collect
When you send us an enquiry or booking request
Our forms (afternoon tea bookings, dog-friendly tables, outside catering, celebrations and general enquiries) ask for:
- your name, email address and, if you choose, your phone number;
- details of your booking or event — date, time, number of people, location and which afternoon tea you'd like;
- anything you tell us in your message, such as dietary requirements or allergies.
Allergy and dietary information can count as health information. We only use it to prepare your food safely, and only because you've chosen to tell us.
When you email, phone or message us
We'll have whatever you send us — for example your email address and the content of your message. If you contact us on Facebook or Instagram, Meta's own privacy policies also apply.
When you visit the website
We don't use analytics, advertising or tracking cookies. Like all websites, our hosting provider automatically processes basic technical information (such as your IP address and browser type) to deliver pages securely and protect against misuse. See our cookie policy.
How and why we use it
| What we do | Our lawful basis |
|---|---|
| Reply to your enquiry and arrange your booking, afternoon tea or catering order, including taking a deposit | Taking steps at your request before entering into a contract, and performing that contract |
| Use allergy or dietary details you give us to prepare your food safely | Your explicit consent (you can withdraw it at any time — just tell us) |
| Keep records of bookings, deposits and payments | Legal obligation (for example tax and accounting rules) |
| Keep the website secure and working | Our legitimate interests in running a safe website |
We don't send marketing emails, we don't sell or rent your information, and we don't use it for automated decision-making.
Who we share it with
We only share your information with the services that help us run the website and reply to you:
- Google — our email is provided by Gmail, so enquiries and emails are stored there.
- Vercel — hosts this website and processes the technical data needed to deliver it.
- An email delivery service — if enquiries are sent to us directly from the website, a service such as Resend delivers them to our inbox.
- Our website developer, Hunters Country Press, may have access while maintaining the site.
Some of these providers are based in, or use servers in, the United States. Where information is transferred outside the UK, it's protected by appropriate safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge. We may also share information if the law requires it.
How long we keep it
- Enquiries that don't lead to a booking — up to 12 months, then deleted.
- Booking and deposit records — up to 6 years, to meet accounting and tax rules.
- Allergy and dietary notes — only as long as needed for your booking.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct anything that's wrong or incomplete;
- ask us to delete your information, or to restrict how we use it;
- object to how we use it, or ask for it to be transferred to you or someone else;
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, contact us using the details above. It's free, and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.