The purpose of this Privacy Notice is to let you know how we collect, use, share, transfer and otherwise process information about you.
Who are we?
Company: FeedCo Ltd
Address: Postlake Farm, Clyst st Mary, Exeter, Devon, EX5 1AP
Data Protection Manager: Edward Lane
Contact email: firstname.lastname@example.org
We are committed to protecting your personal information, otherwise known as data, to maintain your trust and confidence in us. We are registered with the Information Commissioners Office (ICO) and we are a Data Controller. We will process and store personal data in accordance with the provisions of the Data Protection Act and the General Data Protection Regulations (GDPR).
Personal data is any information that relates to a natural living person who can be identified from the data. Personal data may also include special category data (previously known as sensitive personal data) which relates to you, this may include the following:
- Ethnic origin
- Political opinions
- Religious beliefs
- Philosophical beliefs
- Trade union membership
- Genetic data
- Biometric data
- Health data
- Data concerning a natural person’s sex life
- Sexual orientation
We will inform you what category of data we are collecting or that we obtain from any third party concerning you.
What information will we collect about you and why do we process it?
In order for us to provide the services to you we need to collect certain personal data.
We collect the following information:
- The information that we may collect is: Business names, Contact names, Phone Numbers, Addresses, and E-mails.
- When you contact us, we may keep a record of any correspondence, this may be through: Phone call, email or any other correspondence we have with you.
- Details that we may collect when on Farm through FeedCo rep visits, or details that we collect when at agricultural shows.
What is the lawful basis for processing the data?
In certain circumstances we will require consent to process both personal data and special category data, but it must be explicitly given. Where we are asking you for special category data we will always tell you why and how the information will be used.
You may withdraw consent at any time by contacting the Data Protection Officer for the company.
You may be under contract with us and that will be the lawful basis for processing your personal data.
We may have to comply with the law in processing your data, not including contractual obligations.
We may have to process data to protect someone’s life.
We may have to process data to perform a task in the public interests and the task has a clear basis in law.
We may have a legitimate interest for processing your data, including but not limited to the following:
You are a current customer having purchased from us within the last 18 months. We believe you will benefit from details of our latest news and production information.
We are intent on collecting only the information that is appropriate for the purpose and does not invade your privacy. Where we need to contact you for marketing purposes we will seek additional consent.
How will we use that data that we collect about you?
We will process the information you provide to us in a manner which is compatible with the EU’s GDPR. We will use all reasonable efforts to keep your information accurate and up to date and not keep it for longer than is necessary.
Specifically, we use your data for:
- Completing orders
- Delivery information
- Contracted hauliers
- Contracted blending sites
- Updating you with company news and product information
Do we share that data with anyone else?
We will not share your data with third parties without your consent.
Basic information will be shared with approved (trusted) third party companies, sharing of information will only occur when necessary, for example when using contract hauliers; business name, telephone number and address will need to be shared to ensure delivery.
Customer information will not be shared with any other third party companies unless:
- We have your prior permission
- It is a legal requirement
How long will we keep your data?
We will not keep your data for longer than is necessary for the purposes of the processing. We keep some data for the length of time determined by statue and other data is kept in accordance with recommended guidelines by the relevant authority.
What rights do you have as a data subject?
As an Individual you have the right to be informed about the collection and use of your personal data. This is a key transparency requirement under the GDPR.
- The right to be informed
- The right of access – you have a right to access the information we hold about you.
- The right to rectification – you have the right to correct the data that we hold about you that is incomplete or inaccurate.
- The right to erasure – under certain circumstances you can ask us to delete data that we hold about you.
- The right to restrict processing – you can ask us to restrict the processing under certain circumstances.
- The right to data portability – you have the right to request that we transfer information about you to another organisation.
- The right to object – you have the right to object to certain types of processing.
- Rights in relation to automated decision making and profiling.
In order to exercise your rights, you need to contact us and we will send you a subject access request form.
Can I withdraw consent?
Yes, you can withdraw consent at any time. Please contact the Data Protection manager as above to request a withdrawal of consent.
How do I find out what data is being held about me?
You are entitled to see the information held about you and you may ask us to make any necessary changes to ensure that it is accurate and kept up to date. If you wish to do this, or you have a complaint please contact us at the email address above. There is no charge for this service.
You need to submit a Subject Access Request to us and we can confirm what information we hold about you and how it is processed. If we do hold personal data about you, you can request the relevant information, including the following:
- The identity and contact details of the person or organisation that is processing your personal data.
- The contact details of our Data Protection Officer or Manager, where appropriate, or the company’s representative.
- The reason and the legal basis for the processing.
- Whether the processing is based on legitimate interest.
- The categories and special categories of data.
- How long the data will be stored for.
- Whether the provision of the personal data is a contractual requirement or a statutory one and whether and what the consequences are if the individual fails to provide the relevant data.
- Any details of automated decision making, such as profiling and any relevant information about the logic involved in the decision-making process, including the significance and expected consequences of the processing.
Who do I complain to if I’m not happy?
If you wish to complain about how your personal data is being processed by us or any third party that processes data on our behalf, or how your complaint has been handled by us, you can complain by contacting us on the details above or direct to the supervisory authority:
Information Commissioners Office
Tel: 0303 123 1113
Online at: https://ico.org.uk/concerns/handling/
Document Control and Change History
We keep our Privacy Notice under regular review, it was last updated as seen below.
|Version||Revisor||Description of Change||Date of Change||Next Review|