Privacy policy

Last updated: December 2025

Bush Barn Farm is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website www.bushbarnfarm.co.uk or purchase our cordials and elderberry products.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Data Controller: Bush Barn Farm

Address: Silverhill, Robertsbridge, East Sussex, TN32 5PA, United Kingdom

Email: info@bushbarnfarm.co.uk

Phone: 07483 846192

Information We Collect

We may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, delivery address, and billing address
  • Order Information: Details of products purchased, order history, and preferences
  • Payment Information: Payment card details are processed securely by our payment provider and are not stored on our systems
  • Technical Information: IP address, browser type, device information, and website usage data collected through cookies
  • Communication Data: Records of correspondence when you contact us

How We Use Your Information

We use your personal information for the following purposes:

  • To process and fulfil your orders
  • To communicate with you about your orders and respond to enquiries
  • To send you marketing communications (with your consent)
  • To improve our website and products based on customer feedback
  • To comply with legal obligations, including food safety regulations
  • To prevent fraud and ensure website security

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to fulfil your order
  • Consent: For marketing communications (you can withdraw consent at any time)
  • Legal Obligation: To comply with food safety and other legal requirements
  • Legitimate Interest: To improve our services and prevent fraud

Sharing Your Information

We may share your personal information with:

  • Delivery Services: To deliver your orders
  • Payment Processors: To process payments securely
  • Website Hosting Provider: To maintain our website
  • Legal Authorities: When required by law or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Order and customer data is typically retained for 7 years to comply with tax and accounting regulations. Marketing consent records are kept until you withdraw consent.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us using the details provided at the end of this policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no data transmission over the internet can be guaranteed as completely secure. While we strive to protect your information, we cannot ensure absolute security.

Children's Privacy

Our website and products are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Transfers

Your personal data is stored and processed within the United Kingdom. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place as required by UK GDPR.

Marketing Communications

With your consent, we may send you marketing emails about our products, special offers, and news. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. Visit www.ico.org.uk for more information.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Bush Barn Farm

Silverhill, Robertsbridge
East Sussex, TN32 5PA
United Kingdom

Email: info@bushbarnfarm.co.uk
Phone: 07483 846192