Privacy Policy

FarmMarket Ltd ("we", "us", "our") operates FarmMarket Wales (farmmarket.wales). This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

FarmMarket Ltd is registered in Wales (Companies House). Our registered office is at 14 Museum Place, Cardiff CF10 3BH. We are the data controller for your personal information.

Contact us: hello@farmmarketwales.co.uk

2. Data We Collect

We collect the following personal data:

• Account data: Full name, email address, phone number, language preference
• Identity verification (farmers only): Photo ID, proof of address, farm registration documents
• Order data: Items purchased, delivery address, payment status
• Payment data: Processed securely by Stripe — we never store card details
• Communication data: Support chat messages, email correspondence
• Technical data: IP address, device type, app usage data

3. How We Use Your Data

• To create and manage your account
• To process and fulfil orders
• To verify farmer identity (KYC compliance)
• To process payments via Stripe
• To provide customer support
• To send order confirmations and delivery updates
• To comply with legal obligations

4. Legal Basis for Processing

• Contract: Processing necessary to fulfil your orders
• Legal obligation: KYC verification, fraud prevention
• Legitimate interests: Platform security, fraud detection
• Consent: Marketing communications (you can opt out anytime)

5. Data Sharing

We share your data only with:

• Stripe: Payment processing (UK/EU data centres)
• Supabase: Database hosting (EU data centres)
• Resend: Email delivery
• Cloudinary: Image storage
• Delivery partners: Name and address for order fulfilment only

We never sell your personal data to third parties.

6. Data Retention

• Account data: Retained while your account is active + 7 years (legal requirement)
• Order data: 7 years (HMRC requirement)
• Support chats: 2 years
• KYC documents: 5 years after account closure

7. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Port your data to another service
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, email hello@farmmarketwales.co.uk

8. Cookies

Our mobile app does not use cookies. Our website uses essential cookies only for functionality. We do not use tracking or advertising cookies.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, row-level security on our database, and regular security audits. All staff with data access are trained in data protection.

10. Children

FarmMarket Wales is not intended for users under 18. We do not knowingly collect data from children.

11. Changes to This Policy

We will notify you of significant changes via email or in-app notification.

12. Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.