Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Greenfield Equine Services Ltd collects, uses, stores, shares, and protects personal data when you visit our website, contact us, use our services, or otherwise interact with us.
Greenfield Equine Services Ltd is the data controller responsible for your personal data.
Company details:
- Company name: Greenfield Equine Services Ltd
- Address: Greenfield Equine, Unit 4, St Mary's Road, Wigan, Lancashire WN3 4EX, UK
- Email: [email protected]
- Phone: +44 1942 782 634
This policy is intended to provide clear information about our privacy practices in relation to our horse-related business services, including enquiries, bookings, client management, service delivery, invoicing, communications, and related administrative activities.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity information: name, title, and, where applicable, the name of your business or organisation.
- Contact information: postal address, email address, telephone number, and other communication details.
- Booking and service information: details relating to your enquiries, appointments, service requests, preferences, and communications with us.
- Payment and transaction information: billing details, payment records, invoices, and payment status information.
- Customer correspondence: messages, feedback, complaints, and other communications you send to us.
- Technical information: IP address, browser type, device information, log data, and website usage information if you access our website.
- Marketing preferences: your choices regarding receiving marketing communications from us.
- Special category data: in limited circumstances, we may process data that could reveal health-related information or other sensitive details if you provide it to us and only where necessary for service delivery, safety, or compliance purposes.
We collect personal data directly from you, from our website, by email, by telephone, through forms, during service interactions, and sometimes from third parties such as payment processors, booking platforms, or professional advisers where relevant and lawful.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotes or information;
- to manage bookings, appointments, and service delivery;
- to communicate with clients, suppliers, and other contacts;
- to process payments, issue invoices, and maintain financial records;
- to maintain customer and business administration records;
- to improve our services, website, and customer experience;
- to send service-related notices and important updates;
- to comply with legal, regulatory, tax, and accounting obligations;
- to protect our business, staff, customers, property, and systems;
- to handle complaints, disputes, and claims;
- to send marketing communications where permitted by law and where you have not opted out;
- to carry out any other purpose that is compatible with the original reason for collection.
Where appropriate, we may use data for business administration, risk management, record keeping, internal analysis, and lawful operational purposes.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the circumstances, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
- Legal obligation: where processing is necessary to comply with applicable legal or regulatory requirements.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities or processing of sensitive information where required.
- Vital interests: in limited circumstances, where processing is necessary to protect someone’s life or safety.
Where we rely on legitimate interests, these may include operating and protecting our business, managing client relationships, preventing fraud, ensuring efficient administration, and improving our services.
5. Data sharing and third parties
We may share personal data with third parties where necessary and lawful for the purposes set out in this Privacy Policy. These may include:
- Service providers: IT support, website hosting, cloud storage, email providers, accounting services, payment processors, and administrative support providers.
- Professional advisers: accountants, auditors, lawyers, insurers, and other professional advisers.
- Regulatory and public authorities: where disclosure is required by law, court order, or other legal process.
- Business partners and subcontractors: where needed to deliver services you have requested.
- Delivery and communication providers: where relevant to fulfilling services or correspondence.
We require third parties to handle personal data securely and only for specified purposes. Where they act as processors on our behalf, they are subject to appropriate contractual and security obligations.
We do not sell your personal data.
6. Data transfer to third countries
Where personal data is transferred outside the UK or, where applicable, outside the European Economic Area, we will take appropriate steps to ensure that your data is protected. This may include:
- relying on adequacy regulations or decisions;
- using standard contractual clauses or equivalent safeguards;
- implementing additional technical and organisational measures where needed;
- assessing the transfer risks and applying appropriate controls.
If you would like more information about international transfers and the safeguards used, you may contact us using the details provided below.
7. Storage duration
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, and reporting requirements.
The retention period may vary depending on the type of data and the context in which it was collected. In general:
- enquiry and customer communication records are retained for a reasonable period after the last contact;
- contract, invoicing, and accounting records are retained for the period required by law or business necessity;
- marketing preference records are retained until you withdraw consent or opt out;
- complaints, dispute, and legal claim records may be retained for longer where necessary to defend or establish legal rights.
When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request a copy of the personal data we hold about you.
- Rectification: the right to ask us to correct inaccurate or incomplete data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request that we limit the processing of your data in certain situations.
- Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and to request transfer to another controller where applicable.
- Objection: the right to object to processing based on legitimate interests and, in some cases, direct marketing.
These rights are not absolute and may be subject to legal exceptions and limitations. We may need to verify your identity before responding to your request.
To exercise any of these rights, please contact us using the details in the Contact Information section below.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or communications that depend on that consent. To withdraw consent, please contact us at [email protected].
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
ICO contact information:
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include:
- access controls and role-based permissions;
- password protection and secure authentication;
- device and network security measures;
- backups and recovery procedures;
- staff awareness and confidentiality obligations;
- monitoring for unusual or suspicious activity;
- secure disposal of records when no longer required.
While we take reasonable steps to safeguard your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or how Greenfield Equine Services Ltd handles personal data, please contact us:
- Greenfield Equine Services Ltd
- Greenfield Equine, Unit 4, St Mary's Road, Wigan, Lancashire WN3 4EX, UK
- [email protected]
- +44 1942 782 634
We will aim to respond to privacy-related enquiries promptly and in accordance with applicable law.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will become effective when posted on our website or otherwise communicated to you.
We encourage you to review this Privacy Policy periodically to stay informed about how Greenfield Equine Services Ltd protects your personal data.