Data Security Privacy

As you may have noticed from the vast volumes of GDPR related notifications and emails you have received, the old Data Protection Act was replaced by the EU General Data Protection Regulation on the 25th May 2018.

All those involved with our farm have responsibility for data protection and security. We abide by the six GDPR principles relating to the processing of your personal data, i.e. that it should be:

• processed lawfully, fairly and in a transparent manner
• collected for specified, explicit and legitimate purposes
• adequate, relevant and limited to what is necessary
• accurate and, where necessary, kept up to date
• retained only for as long as necessary
• processed in an appropriate manner to maintain security

At Maryfield Farm, we record name, address, email and phone numbers of those individuals and companies that are placing orders in the current year or have placed orders with us in the past. We use this information to issue our annual newsletter and order form and to acknowledge receipt of an order or respond to any queries. If no orders are placed by a customer for four years then the personal details are deleted.

The personal information we hold is used for no other purpose and is not passed to any other organisation.

As our customer, you have the following rights:

• The right to be informed – when we collect your data, we will tell you what data, why we are collecting it, how we will use it and how long we will store it for.
• You have the right to access any personal data we hold about you and relevant supplementary information – Just let us know!
• The right to rectification – making sure that the data we hold about you is accurate and as complete as necessary for the purposes we hold it. Our annual order forms should take care of this automatically however just let us know.
• The right to erasure – you can ask us to erase any personal data that we hold about you ahead of a natural deletion of your data should you not place an order with us over a 4-year period. Just let us know.
• The right to restrict processing – We do not use your data for any other purpose than order management nor do we pass the data to any other organisation.
• The right to data portability – you can request from us any data that you have provided directly that you then wish to use for your own purposes, although we can’t think of a practical reason for this in our case.
• The right to object – you can object to processing of your personal data and we must comply unless there are compelling legitimate grounds to the contrary. Again, we can’t think of a practical reason for this to occur in our case.

If you consider that the data protection principles have not been followed in respect of personal data about yourself, or indeed you have a complaint about how we have handled your information then please get in touch.

Maryfield Farm Partnership, Tilquhillie, Banchory AB31 6HY. ICO Registration reference A8243208.