Privacy Policy

Privacy Policy

Back of the Barn understands that your privacy is important to you and that you care about how your personal data is used and shared online.
We respect and value the privacy of everyone who visits this website, www.backofthebarn.co.uk (“Our Site”), and we will only collect and use personal data in ways that are described here and in accordance with our legal obligations and your rights under the law.

By using Our Site, you agree to this Privacy Policy. If you do not accept this Policy, you must stop using Our Site immediately.

1. Definitions and Interpretation

In this Policy:

  • “Account” means an account required to access and/or use certain areas and features of Our Site.
  • “Cookie” means a small text file placed on your computer or device by Our Site when you visit certain parts or use certain features.
  • “Cookie Law” means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003.
  • “Personal Data” means any data that relates to an identifiable person who can be directly or indirectly identified. This definition follows the UK General Data Protection Regulation (UK GDPR).
  • “We/Us/Our” means Back of the Barn, a trading name of Norfolk Essential Oils Ltd, registered in England under company number 11112441, with registered address at Pates Farm, Wisbech Rd, Tipsend, Welney, Wisbech PE14 9SQ.

2. Information About Us

  • Trading Name: Back of the Barn (Norfolk Essential Oils Ltd)
  • Company Registration: 11112441
  • Registered Address: Pates Farm, Wisbech Rd, Tipsend, Welney, Wisbech PE14 9SQ
  • VAT Number: 711 3799 37
  • Data Protection Officer: Ken Goodger
    • Email: [email protected]
    • Telephone: 01354 638065
    • Postal Address: Pates Farm, Wisbech Rd, Tipsend, Welney, Wisbech PE14 9SQ

3. What This Policy Covers

This Privacy Policy applies only to your use of Our Site.
Our Site may contain links to other websites; we have no control over how your data is collected, stored, or used by those third-party websites. We encourage you to check the privacy policies of any such sites before providing any data to them.

4. Your Rights

As a data subject, you have the following rights under the UK GDPR:

  1. The right to be informed about Our collection and use of your personal data.
  2. The right of access to the personal data We hold about you.
  3. The right to rectification if any data We hold is inaccurate or incomplete.
  4. The right to erasure (“the right to be forgotten”).
  5. The right to restrict processing of your personal data.
  6. The right to data portability.
  7. The right to object to Our use of your personal data.
  8. Rights in relation to automated decision-making and profiling.

If you have any complaints, please contact Us first (details in Section 14). If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

5. Data We Collect

Depending on how you use Our Site, We may collect some or all of the following data:

  • Name
  • Business or company name
  • Contact details (email address, telephone number)
  • Demographic information (postcode, preferences, interests)
  • IP address
  • Browser type and version
  • Operating system
  • Referring and exit URLs
  • Website activity and usage data

6. How We Use Your Data

We process all personal data lawfully, fairly, and transparently, and only for as long as necessary. We may use your data for:

  • Managing your Account and access to Our Site
  • Providing and delivering Our products and services
  • Personalising your experience on Our Site
  • Communicating with you (e.g. order updates, queries)
  • Marketing (where you have consented)
  • Conducting market research and improving Our Site

We will never send you unsolicited marketing communications or sell your data to third parties. You can withdraw consent or unsubscribe from marketing at any time.

7. Data Retention and Storage

We retain personal data only as long as necessary for its purpose:

  • Non-contractual data is kept for a maximum of 2 years.

Your data will be stored securely within the UK or the European Economic Area (EEA).

Security measures include:

  • Paper data stored in locked filing cabinets.
  • Managed firewall on our main server.
  • Access to electronic data restricted to authorised staff only.

8. Sharing Your Data

We do not share your personal data with third parties unless required by law or necessary for legal compliance (e.g. a court order).
We may compile anonymised statistics for internal reporting or analytics, but this data cannot be used to identify you.

9. Business Transfers

If all or part of Our business is sold or transferred, your personal data may be transferred to the new owner, who will be bound by this Privacy Policy.

10. Controlling Your Data

You can:

  • Restrict Our use of your data for marketing.
  • Unsubscribe from communications at any time.
  • Contact Us to update, delete, or access your information.

You may also register with the UK’s preference services (TPS, CTPS, or MPS) to reduce unsolicited marketing.

11. Cookies

Our Site uses Cookies to improve your browsing experience and functionality.
Essential Cookies (e.g. woocommerce_cart_hash, wp_woocommerce_session) are required for our shopping cart to function.
We also use Google Analytics and New Relic for anonymous site performance data.

You can manage or delete Cookies via your browser settings. However, disabling Cookies may limit functionality on Our Site.

12. Accessing Your Data

You have the right to access a copy of any personal data We hold about you.
Requests are free of charge and can be made by contacting Us at [email protected].

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and, where appropriate, notified by email. Please review this page periodically to stay informed.

✅ This policy ensures compliance with the UK GDPR, Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).