Privacy Policy

Last updated: June 2026. Farm Marketplace ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data under UK GDPR.

1. Data We Collect

Account data: Name, email address, and password when you register.

Profile data: Farm name, address, phone number, website, and description if you're a seller.

Order data: Products ordered, delivery address, and order history.

Payment data: Payment card details are processed entirely by Stripe — we never see or store your full card number.

Usage data: Pages visited, search queries, and interactions with the site.

2. How We Use Your Data

We use your data to: (a) process orders and facilitate payments; (b) enable communication between buyers and farmers; (c) improve our platform; (d) send order confirmations and shipping updates; (e) comply with legal obligations; (f) prevent fraud and abuse.

3. Legal Basis

We process your data on the following legal bases: (a) contract performance (fulfilling orders); (b) legitimate interest (improving our service, preventing fraud); (c) legal obligation (tax records, law enforcement); (d) consent (marketing emails, which you can opt out of).

4. Data Sharing

We share data with: Stripe for payment processing (PCI DSS Level 1 certified); Farmers — your name, delivery address, and order details are shared with the farmer fulfilling your order; Delivery companies (Evri, Royal Mail) when farmers generate shipping labels. We do not sell your data to third parties.

5. Data Retention

Account data is retained while your account is active and for 6 years after closure (for legal/tax purposes). Order data is retained for 6 years. Usage data is anonymised after 26 months.

6. Your Rights

Under UK GDPR you have the right to: (a) access your data; (b) correct inaccurate data; (c) delete your data (subject to legal obligations); (d) restrict processing; (e) data portability; (f) object to processing. To exercise these rights, contact us at [email protected].

7. Cookies

We use essential cookies for site functionality (session management, CSRF protection) and analytics cookies to understand usage. See our Cookie Policy for details. You can manage cookie preferences in your browser settings.

8. Data Security

We implement appropriate technical and organisational measures including: encryption in transit (HTTPS), secure payment processing (Stripe), access controls, and regular security reviews.

9. International Transfers

Your data is stored in the UK. Stripe may process payment data in the US under Standard Contractual Clauses.

10. Contact

For privacy enquiries: [email protected]. You have the right to complain to the Information Commissioner's Office.