Privacy Policy

Last Updated: January 1, 2025

1. Introduction

At Harleston Cornucopia, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, premises, or interact with us in any way.

Please read this Privacy Policy carefully. By using our website or providing us with your personal information, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide to Us

We may collect personal information that you provide directly to us, such as:

  • Contact information (name, email address, postal address, phone number)
  • Payment information when making purchases
  • Information provided when signing up for our newsletter
  • Information provided when contacting us with inquiries
  • Information provided when participating in surveys, competitions, or promotions
  • Information provided when applying to become a vendor

2.2 Information We Collect Automatically

When you visit our website, we may automatically collect certain information about your device and usage, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on those pages
  • Referral source
  • Time and date of your visit

We collect this information using cookies and similar technologies. For more information about our use of cookies, please see our Cookie Policy.

2.3 Information from Third Parties

In some cases, we may receive information about you from third parties, such as:

  • Social media platforms, if you interact with us through those platforms
  • Payment processors, in relation to your purchases
  • Event booking platforms, if you register for our events through a third-party service

3. How We Use Your Information

We use the information we collect for various purposes, including:

  • To provide and maintain our services
  • To process and fulfill your purchases
  • To send you marketing communications (if you have opted in)
  • To respond to your inquiries and provide customer support
  • To improve our website and services
  • To administer events, competitions, or promotions
  • To prevent fraud and ensure security
  • To comply with legal obligations

4. Legal Basis for Processing

We process your personal information on the following legal bases:

  • Consent: Where you have given us explicit consent to process your data for specific purposes, such as sending you marketing communications.
  • Contract: Where processing is necessary for the performance of a contract with you, such as when you make a purchase.
  • Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services or preventing fraud, provided that these interests are not overridden by your rights and freedoms.
  • Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.

5. Data Sharing and Disclosure

We may share your personal information with:

  • Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, email delivery, and website hosting.
  • Individual Vendors: If you express interest in or purchase items from specific vendors within Harleston Cornucopia, we may share your contact information with those vendors to facilitate the transaction.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you
  • Whether there is a legal obligation to which we are subject
  • Whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: The right to request a copy of the personal information we hold about you.
  • Rectification: The right to request that we correct any inaccurate or incomplete personal information.
  • Erasure: The right to request that we delete your personal information in certain circumstances.
  • Restriction: The right to request that we restrict the processing of your personal information in certain circumstances.
  • Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.
  • Objection: The right to object to our processing of your personal information in certain circumstances.
  • Withdraw Consent: The right to withdraw your consent at any time where we rely on consent to process your personal information.

To exercise any of these rights, please contact us using the details provided in Section 11.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

If we transfer your personal information to countries outside the European Economic Area (EEA) or the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal information, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

You can see when this Privacy Policy was last updated by checking the "Last Updated" date at the top of this page.

13. Complaints

If you are not satisfied with our response to your concern or believe our processing of your personal information does not comply with data protection law, you can make a complaint to the Information Commissioner's Office (ICO):