Data & Privacy

Tynefield Organics operates under the principles of fairness, transparency, and minimal data collection. This notice explains how we collect, use, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tynefield Organics is based at 27 Grainger Street, Newcastle upon Tyne NE1 5JE, England. You can reach us by email at [email protected] or by phone on +44 191 264 0785.

2. What Information We Collect

We collect only the data necessary to carry out your order or respond to enquiries. This may include:

Your name and contact details (email address, phone number, and delivery address).
Order details, such as chosen products or delivery notes.
Messages sent via our contact forms or email correspondence.
Technical information like anonymised analytics (browser type, page visit counts) when cookies are enabled.

3. Why We Use Your Data

Your data helps us process orders, arrange delivery, and communicate effectively. Specifically, we use it to:

Confirm and deliver your organic produce.
Provide updates on routes or substitutions.
Respond to questions or feedback.
Maintain internal accounting and tax compliance.

4. Lawful Basis for Processing

We rely on the following legal grounds under UK GDPR:

Contractual necessity: to process and deliver your order.
Legitimate interest: to improve our service and maintain communications.
Legal obligation: to keep records required by law.

5. Data Retention

We retain customer records for as long as necessary to fulfil orders and meet accounting requirements. Inactive customer data is reviewed and securely deleted after two years unless further contact is requested.

6. Sharing of Data

We do not sell or rent personal data. Limited sharing occurs only with service providers essential to our operations, such as payment processors or IT maintenance partners. These providers are contractually bound to keep data secure and compliant with UK GDPR.

7. International Transfers

We do not transfer data outside the United Kingdom. If any transfer is required in the future, it will only occur under approved safeguards such as adequacy decisions or standard contractual clauses.

8. Your Rights

Under UK GDPR, you have rights to:

Access a copy of your personal data.
Request corrections of inaccurate information.
Ask for deletion (the “right to be forgotten”).
Limit or object to processing in specific cases.
Withdraw consent when processing is based on consent.

To exercise these rights, contact us via [email protected]. We respond within 30 days.

9. Security Measures

All personal data is stored on secure UK-based servers with restricted access. We use encryption and password protection for systems that handle order and contact details.

10. Changes to This Policy

Updates may occur as regulations or our processes change. The latest version will always appear on this page, with the revision date noted.

Last updated: October 2025