1. Introduction and company information
This Privacy Policy explains how GreenHarvest Produce Ltd collects, uses, discloses, stores, and protects personal data in connection with its vegetable business, including the supply of fresh produce, customer service, supplier management, website communications, and any related business activities.
GreenHarvest Produce Ltd is the data controller for the personal data described in this Privacy Policy.
Company name: GreenHarvest Produce Ltd
Address: Unit 4, Riverside Business Park, Bedford Road, Northampton, NN1 5NX, UK
Email: [email protected]
Phone: +44 1604 528 743
2. Data collection and processing
GreenHarvest Produce Ltd may collect and process the following categories of personal data, depending on your relationship with us:
- Identity and contact details: name, title, business name, address, email address, and phone number.
- Transaction and order details: products purchased, delivery instructions, billing details, payment status, and order history.
- Account and communication data: correspondence with us, enquiries, complaints, feedback, and service preferences.
- Technical data: IP address, browser type, device information, cookies, and website usage data.
- Supplier and business contact data: contact details of growers, distributors, logistics providers, and other commercial partners.
- Compliance data: records required for accounting, tax, fraud prevention, or legal compliance.
We may collect personal data directly from you, automatically through our website or systems, or from third parties such as payment providers, delivery partners, and business partners where appropriate.
We do not intentionally collect special category data unless you voluntarily provide it and it is necessary for a specific lawful purpose. Please do not submit sensitive information unless requested or required.
3. Purpose of data processing
GreenHarvest Produce Ltd processes personal data for the following purposes:
- to supply vegetables and related products and services;
- to process orders, deliveries, invoices, payments, refunds, and account administration;
- to communicate with customers, suppliers, and other business contacts;
- to manage complaints, queries, and customer support;
- to maintain business records and internal administration;
- to monitor and improve our website, products, and service quality;
- to detect, prevent, and investigate fraud, misuse, and security incidents;
- to comply with legal and regulatory obligations, including tax, accounting, and record-keeping requirements;
- to send marketing communications where permitted by law and where consent is not required or has been provided;
- to manage our relationships with growers, logistics partners, and other service providers.
4. Legal basis for processing
GreenHarvest Produce Ltd relies on the following legal bases, where applicable:
- Performance of a contract: where processing is necessary to supply goods or services, handle orders, or manage business relationships.
- Legitimate interests: where we have a lawful business interest that is not overridden by your rights and freedoms, such as improving services, preventing fraud, securing our systems, and managing our operations.
- Legal obligation: where processing is required to comply with applicable laws, regulations, court orders, or official requests.
- Consent: where you have given clear permission for a specific purpose, such as certain marketing activities or optional communications.
Where we rely on legitimate interests, we balance our interests against your privacy rights and take appropriate safeguards.
5. Data sharing and third parties
GreenHarvest Produce Ltd may share personal data with third parties where necessary and lawful, including:
- Delivery and logistics providers to complete shipments and deliveries;
- Payment processors and financial institutions to handle transactions and refunds;
- IT, cloud, hosting, and website service providers that support our systems and operations;
- Professional advisers such as accountants, auditors, lawyers, insurers, and consultants;
- Regulators, law enforcement, and public authorities where required by law or to protect legal rights;
- Business partners and suppliers involved in the fulfillment of services and commercial operations.
We require third parties that process personal data on our behalf to implement appropriate contractual, technical, and organisational safeguards and to use personal data only in accordance with our instructions and applicable law.
We do not sell personal data.
6. Data transfer to third countries
Some of our service providers or business partners may process personal data outside the United Kingdom and, where applicable, outside the European Economic Area. If such transfers occur, GreenHarvest Produce Ltd will take steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable privacy requirements.
These safeguards may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms, together with additional technical and organisational measures where appropriate.
7. Storage duration
GreenHarvest Produce Ltd retains personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and regulatory obligations.
Retention periods may vary depending on the type of data and the purpose of processing. In general:
- order, invoice, and accounting records are retained for the period required by applicable law;
- customer service communications are retained for as long as needed to resolve the matter and maintain appropriate records;
- marketing data is retained until you withdraw consent, object, or unsubscribe, where applicable;
- technical and website usage data is retained for a limited period necessary for analytics, security, and operational purposes.
When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data processed by GreenHarvest Produce Ltd:
- Access: to request confirmation of whether we process your personal data and obtain a copy of that data;
- Rectification: to request correction of inaccurate or incomplete personal data;
- Erasure: to request deletion of your personal data where legally permissible;
- Restriction: to request limitation of processing in certain circumstances;
- Data portability: to request the transfer of certain personal data to you or another controller in a structured, commonly used format, where applicable;
- Objection: to object to processing based on legitimate interests and, where applicable, to direct marketing.
To exercise your rights, please contact us using the details provided in the Contact Information section. We may need to verify your identity before responding to your request. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting GreenHarvest Produce Ltd using the contact details below or by using any unsubscribe mechanism provided in our communications, where available.
10. Right to complain
If you believe that GreenHarvest Produce Ltd has not handled your personal data in accordance with applicable privacy law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
We encourage you to contact us first so that we can try to resolve your concern promptly and directly.
11. Data security
GreenHarvest Produce Ltd takes appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, destruction, and other unlawful forms of processing.
These measures may include access controls, secure storage, staff confidentiality obligations, device and network protection, backups, and procedures for managing security incidents. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact:
GreenHarvest Produce Ltd
Unit 4, Riverside Business Park, Bedford Road, Northampton, NN1 5NX, UK
Email: [email protected]
Phone: +44 1604 528 743
13. Changes to privacy policy
GreenHarvest Produce Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website or otherwise made available to you where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data. The date of the latest update may be added or amended where appropriate.