Hill Farm Privacy and GDPR Policy

This privacy and GDPR policy explains how Hill Farm uses the personal data we collect from you when you use our website or come to Hill Farm.

What data do we collect?

We collect the following data:

• Personal identification information (including name, email address and telephone number) when you contact us

• We also collect images from CCTV for the purposes of security and crime prevention on which you might be identifiable.
• We have wildlife camera traps and bioacoustic sensors around the site that may capture your image or voice

How do we collect your data?

You directly provide us with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services or those provided by our partners through our website
• Add your personal details to our contact database to receive our newsletters
• Use or view our website via your browser’s cookies

We may also collect data in the form of images or audio from which you might be identifiable when you:

• Come into view of a CCTV or other camera on our premises or in a public or area readily and incidentally viewable or audible in the immediate vicinity of our premises

Just to be clear we do NOT collect the following information: If you make a payment to us via this website (for a course, event, booking, etc) you will be asked to fill in your card details (via the Stripe payment system). That may include your card number, its expiry date, your CVC and your postcode. We don’t see or store any of that information – it is dealt with securely our payment partners and is covered by their privacy policies; we simply get told that you have made the payment.

How will we use your data?

We collect your data so that we can:

• Process your order and manage your account
• Keep you up to date with what is happening at Hill Farm
• In the case of images, for security and so that we can deter and detect crime. Images or audio containing humans that are incidentally captured as part of our ecological monitoring are either deleted automatically by software screening or as soon as on-site human evaluation of the data files identifies any human voice or image.

If you make a payment through our site, we will pass the information necessary to our payments service for them to process that payment.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

How do we store your data?

We will keep your details only for as long as we need them. Once this time period has expired, we will delete your data. You may request to have your data deleted at any time.

Media

Images from any CCTV are kept for no longer than 28 days other than where a specific crime or security event has been identified in which case images potentially relevant to that event will be kept for no more than 28 days beyond the point at which that event has been resolved.

Marketing

We would like to send you information about products and services of ours and our on-site partners that we think you might like.

If you have agreed to receive our newsletters (by placing your contact details on our contact database), you may always opt out at a later date.

You have the right at any time to stop us from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, let us know by contacting us

Who we share your data with

We will not sell or share your data with anyone without your permission

Where your data is sent

Visitor comments and messages may be checked through an automated spam detection service.

What are your data protection rights?

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

In relation to any CCTV images you would need to identify the camera and particular time involved as we cannot readily look at multiple images simply to conduct a generalised search, nor would it be reasonable for us to have to do so.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request to complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email:

Email us at: info@hillfarm.co.uk

Or write to us:

Hill Farm,
Hill Farm Road,
Playford, Ipswich,
Suffolk,
IP69DT

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our website, we may collect information from you automatically through cookies or similar technology.

How do we use cookies?

We uses cookies in a range of ways to improve your experience on our website, including:

• Understanding how you use our website
• Store your preferences

What types of cookies do we use?

There are a number of different types of cookies, however, our website uses:

• Functionality – We uses these cookies so that we recognize you on our website and remember your previously selected preferences. A mix of first-party and third-party cookies are used.

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

Our website contains links to other websites. This privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Changes to our privacy policy

We keep this privacy policy under regular review and place any updates on this web page. This privacy policy was last updated on 17th September 2025.

How to contact us

If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.