Privacy Statement

Yare Valley Oils respects your privacy and is committed to protecting your personal information. This Privacy Statement explains how we collect, use, store and protect your personal data when you visit our website, place an order, contact us or otherwise interact with us.

1. Who We Are

Yare Valley Oils produces and supplies cold-pressed rapeseed oil and related products from our farm in Norfolk.

For the purposes of UK data protection law, Yare Valley Oils is responsible for the personal information we collect and process through this website.

If you have any questions about this Privacy Statement or how your personal information is handled, please contact us using the details provided on our Contact page.

2. Information We Collect

Depending on how you use our website and services, we may collect information including:

• Your name

• Email address

• Telephone number

• Billing and delivery address

• Order and transaction information

• Information you provide when completing a contact or enquiry form

• Communications you send to us

• Technical information such as your IP address, browser type and device information

• Information about how you use and navigate our website

• Cookie and analytics information, where applicable

When you make a payment, your payment information may be processed securely by our chosen payment provider. We do not normally receive or store your complete card details.

3. How We Use Your Information

We may use your personal information to:

• Process, manage and fulfil your orders

• Arrange delivery or collection of products

• Respond to questions and enquiries

• Provide customer service and support

• Manage trade and stockist enquiries

• Maintain records of purchases and communications

• Improve our website, products and customer experience

• Detect and prevent fraudulent or suspicious activity

• Comply with our legal, accounting and regulatory obligations

• Send marketing communications where you have provided consent or where otherwise permitted by law

We will only use your personal information where we have a lawful basis for doing so.

4. Our Lawful Bases for Processing

Under UK data protection law, we may process your personal information on one or more of the following grounds:

Contract
Where processing is necessary to fulfil an order, provide a service or take steps at your request before entering into a contract.

Legal obligation
Where we need to process or retain information to comply with a legal or regulatory requirement.

Legitimate interests
Where processing is reasonably necessary for the operation, security and improvement of our business and website, provided those interests do not override your rights.

Consent
Where you have specifically agreed to a particular use of your personal information, such as certain marketing or non-essential cookies.

Where processing relies on consent, you may withdraw your consent at any time.

5. Online Orders and Payments

When you place an order through our website, we collect the information necessary to process the transaction and fulfil your order.

Your information may be shared with organisations that assist us in providing the service, such as payment processors and delivery providers.

Payment transactions are processed through secure third-party payment services. Their handling of your information is also subject to their own privacy policies.

6. Cookies and Website Analytics

Our website may use cookies and similar technologies to operate correctly, remember preferences, understand how visitors use the website and improve its performance.

Essential cookies may be used where they are necessary for the website or online shop to function.

Where required by law, non-essential cookies, including certain analytics or marketing cookies, will only be used after you have provided your consent.

You can manage your cookie preferences through the cookie controls available on the website and through your browser settings.

7. Marketing Communications

Where you have subscribed to receive marketing communications, or where we are otherwise permitted to contact you, we may send information about Yare Valley Oils, our products, events or other relevant updates.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Withdrawing from marketing communications will not prevent us from sending essential messages relating to an order or enquiry.

8. Sharing Your Personal Information

We do not sell your personal information.

We may share information with trusted third parties where necessary to operate our business and provide our services. These may include:

• Website and hosting providers

• Payment processors

• Delivery and courier companies

• Email and communications providers

• Analytics and website service providers

• Professional advisers such as accountants or legal advisers

• Government, regulatory or law enforcement authorities where legally required

Third parties are only provided with information necessary for the relevant purpose.

9. International Data Transfers

Some third-party services used by our website may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection legislation.

10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax and reporting requirements.

Retention periods may vary depending on the type of information and our legal obligations.

When information is no longer required, it will be securely deleted or anonymised where appropriate.

11. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

While we take appropriate measures to safeguard information, no internet-based system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights relating to your personal information, including the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information in certain circumstances

• Request restriction of processing

• Object to certain types of processing

• Request the transfer of your information where applicable

• Withdraw consent where processing is based on consent

If you wish to exercise any of these rights, please contact us.

We may need to verify your identity before responding to a request.

13. Complaints

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority responsible for data protection.

14. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the relevant privacy information when visiting an external website.

15. Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes to our website, business practices, services or legal requirements.

The latest version will be published on this page with the relevant updated date.

16. Contact Us

If you have any questions about this Privacy Statement, the personal information we hold about you or your data protection rights, please contact Yare Valley Oils using the contact details provided on our website.