Privacy Policy

1. Who We Are

County Fresh operates an online farm shop connecting customers with local and regional fresh produce suppliers across the UK. References to "we", "us" or "our" in this policy refer to County Fresh and its franchise members. Our registered address and contact details are available on request.

2. What Information We Collect

We collect the following personal data when you use our service:

• Identity & Contact: Full name, email address, delivery address, and postcode.
• Order Data: Products purchased, quantities, prices, and order history.
• Payment Data: Payment is processed securely by Stripe. We do not store card details on our servers.
• Usage Data: Pages visited, products viewed, and browsing behaviour on our site to improve your experience.
• Communications: Any messages or queries you send us regarding orders.

3. How We Use Your Information

We use your personal data to:

• Process and fulfil your orders and arrange delivery or collection.
• Communicate with you regarding your orders, including confirmations and updates.
• Share relevant order details with the supplier(s) fulfilling your order.
• Improve our website and personalise your shopping experience.
• Comply with our legal and regulatory obligations.
• Send you marketing communications where you have given your consent (you may opt out at any time).

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following bases: contract performance (to fulfil your orders), legitimate interests (to improve our service and prevent fraud), legal obligation (to comply with applicable law), and consent (for marketing communications).

5. Sharing Your Data

We may share your data with:

• Suppliers & Farmers: To fulfil your order (name, delivery address, and items ordered).
• Stripe: Our payment processor. See Stripe's Privacy Policy.
• Courier Services: Where applicable, to arrange delivery of your order.
• IT & Platform Providers: Who host and operate our platform under strict data processing agreements.

We do not sell your personal data to third parties.

6. Data Retention

We retain your order and account data for up to 7 years to comply with HMRC record-keeping requirements. Usage and analytics data is retained for no longer than 12 months. You may request deletion of your account and associated data at any time, subject to any legal retention obligations.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restrict or object to our processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use essential cookies to maintain your shopping basket session. We may also use analytics cookies to understand how visitors use our site. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of our service after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related queries or to exercise your rights, please contact us via the email address provided in your order confirmation or through our website contact form.