Privacy

Venn Farm Retreats consider your privacy to be of the upmost importance. The Privacy Policy outlined below explains the way in which we collect, process and protect the information (including personal information) collected when you visit www.venn-farm.co.uk and/or sign up for our newsletters.

Use of the Site is in accordance with our Terms and Conditions. By using the Site you indicate that you agree to our Terms and Conditions and this Privacy Policy.

You must be over 18 years old to use our Site. By using our Site you confirm that you are over 18 years of age.

If you have any questions about your personal data and this Privacy Policy you can contact us for more information any time by emailing [email protected]

We promise to keep your personal data safe and private, not to sell your personal data, and to give you a simple way to view and manage your marketing and communication choices at any time.

This Privacy Policy has been designed to comply with GDPR (the General Data Protection Regulation), which comes into force on 25 May 2018. It will inform you about what kind of information we may collect, how we collect it, why we collect it, the legal basis for collecting it and your rights under the GDPR. The GDPR regulates how individuals and organisations may obtain, use, store, and eliminate personal data. It applies to any organisation processing personal data of EU citizens.

There are three categories of information we collect:

1. Information you give to us: information necessary for use of the Site: we ask for this information when you use the Site as it is required for proper performance of our contract with you.
   Email information – when you submit your email address to us to join our mailing list
2. Information you choose to give us: you can choose to give us additional information that is not essential for use of the Site but will enhance your experience and help us provide a better service to you. This information is processed based on your consent.
   i) If you contact us outside of the Site via email or other method
   ii) If you complete a user questionnaire or survey.
3. Information we automatically collect from your use of the Site: when you use the Site we automatically collect information, including personal data. This information is necessary for the performance of the contract between you and us, as well a given our legitimate interest to improve the functionality of the Site and provide you with a good service.
   i) Site Usage Information: we collect information about pages you visit and your searches
   iii) Log data and device information: we collect log data and device information for when you use the Site, even if you are not logged in or registered for an account with us. This information is vital to us for to prevent fraudulent or malicious use of the Site.
   iv) Cookies: we use cookies and similar tracking technologies on the Site and in our emails, such as pixels and web beacons, to analyse trends and movements around the Site, serve targeted advertisements, gather demographic information about our user base as a whole, and to tell us when emails we send have been delivered or viewed and links in them clicked.

How we use this Information: we may use and disclose personal data only for the following purposes:
1. To communicate with Site visitors and competition entrants.
2. To send you information and promotional material to you by email. You will only receive this information if you have positively opted in and you can stop receiving this content at any time.
3. To send you alerts and notifications by email based on transactions you make on the Site – such as entering a competition. These are essential for the performance of our contract and you cannot opt out of receiving these messages, but you will only receive them if you make such transactions.
4. To provide, support and improve the Site and service to you. This may include sharing your personal data with third party service providers to provide and support our service and make certain features available to you. We ensure your data is protected by ensuring all third parties we may use have entered into a contract to only use your data as is necessary and in a manner that is consistent with this Privacy Policy.
5. To enforce compliance with our Terms and Conditions and applicable law. This includes storing server log data that help us prevent Site misuse and violation.
6. To protect the rights and safety of our customers, site visitors and third parties.
7. To meet legal requirements, comply with the law, court orders, respond to legal requests or an official investigation.
8. To provide information to our advisors or agents, such as lawyers and accountants.
9. We may share your data with a third party if we choose to sell, transfer or merge part or all of our business – or we seek to acquire another business or merge with them. We will only share your data with a third party in this case if they agree to keep your data safe and private and have the appropriate safeguards in place. In any such event we will notify you of the change either by sending you an email or posting a notice on our Site.

Third Party Links: the Site includes links to third party websites including business we feature within our editorial, partners, advertisers, social media sites (such as Instagram, Facebook or Twitter) and other websites. We do not control these sites and when you visit them you may be providing personal data to the third party. The third party’s use of your information will be governed by his or her own Privacy Policy, which we recommended you review. We do not accept any responsibility or liability for their policies whatsoever.

Recipients of Your Data
1. Other Site Users: if you interact with the Site to enter a competition, we will share data with the competition partner only if you allow us to share that information. This information is therefore provided with your consent.
2. Our Employees and Contractors: your data will be shared with our employees, contractors and agents who all enable us to provide the service. We need to share this information in order to ensure the adequate performance of our contract with you. Such recipients will have entered into a contract to keep your data safe and private and in a manner that is consistent with this Privacy Policy.
3. Service Providers: we use a variety of third party service providers (TTPs) to help us who help us provide and support our services. We need to share this information in order to ensure the adequate performance of our contract with you. These TTPs would be classed as “data processors” under GDPR. Examples of TTPs we use might include hosting services, helpdesk systems and content delivery services. All TTPs enter into a contract that requires them to use your personal data only for the provision of services to us and in a manner that is consistent with this Privacy Policy.
4. Other Third Parties: we may share your data with a third party if we choose to sell, transfer or merge part or all of our business – or we seek to acquire another business or merge with them. We will only share your data with a third party in this case if they agree to keep your data safe and private and have the appropriate safeguards in place.

Transfers to TTPs and Outside the EU: we are a UK based partnership, operating in the UK and our Site and service is available to anyone worldwide. We use a number of Third Party Processors (TTPs) to enable us to provide and support the Site and service. Some of these TTPs are based outside the European Economic Area (EEA) and data is processed on servers located outside the EEA. These TTPs have limited access to your information and perform process on our behalf. We only use TTPs who we are confident have the appropriate safeguards in place and they are contractually bound to protect and use it only for the purposes for which it was transferred, consistent with this Privacy Policy.

The GDPR provides the following rights for individuals:
1. Right to be informed: you have the right to be informed about the collection and use of personal data. This Privacy Policy should contain all the information you need for you to exercise this right.
2. Right of access: you have the right to access your personal data and supplementary information. You can request this by emailing [email protected]. We will respond to a request as soon as reasonably possible. We may ask you to verify your identity.
3. Right to rectification: you have the right to ask us to have inaccurate personal data rectified, or completed if it is incomplete by emailing us. We will respond to a request as soon as reasonably possible. We may ask you to verify your identity.
4. Right to erasure: you have a right to have your personal data erased. This is also known as the “right to be forgotten”. 5. Right to restrict processing: in certain circumstances, you have a right to restrict the way we may process your personal data, as an alternative to erasing it, if you have a particular reason for wanting it restricted
6. Right to data portability: your right to data portability entitles you to obtain personal data you have provided to us – in a commonly used, structured format – and request that we send it to another another service provider (if technically feasible).
7. Right to object or withdraw consent: you have the right to object to our processing of your personal data where the use is based on our legitimate interests (including profiling), or where it is used for direct marketing. You may at any time ask us to stop processing of your information for direct marketing purposes, by emailing us or by following the link on our emails.

How Long We May Keep Your Data: we generally retain your information for as long as your account is active or as long as necessary to provide you with our service. We may also retain and use your information in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

Security: we are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Changes to this Privacy Policy: VennFarm reserves the right to amend this Privacy Policy from time to time without notice. Any such change will take effect once the revised policy is available on the Site. This Privacy Policy was last update on 23 May 2018.

Contact Us: should you have any queries or concerns regarding this Privacy Policy please do not hesitate to get in touch at thoughts.