PRIVACY POLICY

We have created this privacy statement to demonstrate Oak Farm Firewood’s commitment to your privacy. This policy outlines how your personal data will be collected and processed by us in accordance with the General Data Protection Regulation EU 2016/679 (GDPR).

Your trust is important to us, and we want to assure you that we are dedicated to keeping your data safe and secure. We only use your data for legitimate business purposes, primarily for processing your orders and managing your user account. You have full control over your data and can request its deletion at any time.

Our business name is ‘Oak Farm Firewood’ and our website is https://oakfarmfirewood.co.uk. The data controller is Archie Hodgkinson of Oak Farm Firewood.

You can contact us by email at: sales@oakfarmfirewood.co.uk

INFORMATION COLLECTED

When you choose to use our website, send us emails, exchange correspondence, or make telephone calls, we collect certain personal information. This includes:

Contact Details: Such as your name, addresses, and telephone numbers.
Order Information: When you place an order through our WooCommerce system, we collect details necessary to process and fulfill your order, including products purchased, payment information (though we do not store full payment card details), and delivery preferences.
Account Information: If you create a user account on our website, we collect information you provide for your account, including your username, password (stored securely as a hash), and details related to your referral dashboard. This enables you to access your order history and manage your referral activities.
Correspondence: Records of your communications with us.

We collect this information for the sole purposes of processing your orders, managing your user account and referral activities, and providing you with relevant information about Oak Farm Firewood’s services.

INFORMATION USAGE

Your personal data is used exclusively for the purposes for which it was collected:

Order Processing: To process and fulfill your orders placed through WooCommerce, including payment processing, delivery arrangements, and customer service related to your purchases.
Account Management: To create and manage your user account, allowing you to log in, view your order history, manage your preferences, and utilize the referral dashboard.
Communication: To respond to your inquiries, provide customer support, and send you important updates regarding your orders or account.
Marketing emails and newsletters: When you place an order you will be added to our mailing list unless you remove your consent (you can unsubscribe at any time)
Referral Program: To track and manage your participation in our referral program through your user account dashboard.

We will not transmit this information to any other third parties without your explicit agreement, except where necessary for order fulfillment (e.g., sharing delivery address with a courier) or as legally required.

SECURITY OF INFORMATION

We are committed to ensuring the security of your personal information. We implement robust measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

Secure Servers: We store the personal information collected on password-protected servers.
Secure Files: Secure paper files, where applicable, have access limited to authorized personnel.
Limited Access: Access to your personal data is strictly limited to employees who require it to perform their job functions.
Encryption: Our website uses SSL/TLS encryption (HTTPS) to secure data transmitted between your browser and our servers, particularly during order processing and account logins.
Data Minimisation: We only collect and retain data that is necessary for the purposes outlined in this policy.

We never release personal details to third parties unless required for the provision of our services (e.g., shipping) or by law. We may request proof of identity before releasing information to you, to ensure your data’s security.

THIRD-PARTY SERVICES

We utilize certain third-party services to enhance our website functionality and operations. These services may collect and process data in accordance with their own privacy policies.

WooCommerce

We use WooCommerce (an e-commerce platform built on WordPress) to process all customer orders. When you make a purchase, WooCommerce facilitates the collection of your order details, billing, and shipping information. While WooCommerce is part of our website, it processes data essential for your transactions. Your payment information is securely handled by our payment gateway providers, and we do not store your full credit card details on our servers.

Google Analytics

We use Google Analytics as a third-party software data collector. Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualise and personalise the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant (Note: The Privacy Shield framework has been replaced by the Data Privacy Framework for transfers to the US. We rely on the appropriate safeguards for data transfers as detailed in “Data Transfer Outside EU” section).

COOKIES

Our service currently uses cookies which may collect identifiable information such as, but not limited to, your IP address, information regarding your device, and methods of services usage. Accepting our cookie alert means you consent to the usage of cookies for analytics purposes and for the proper functioning of our website, including features related to your shopping cart and user account.

YOUR RIGHTS UNDER GDPR

As a user, you have specific rights regarding your data processed by Oak Farm Firewood. We are committed to upholding these rights.

Users entitled to broader protection standards (such as those residing in the EU/EEA) may exercise any of the rights described below. In all other cases, Users may inquire with the Owner to find out which rights apply to them.

In particular, you have the right to do the following:

Withdraw your consent at any time. You have the right to withdraw consent where you have previously given your consent to the processing of your Personal Data.
Object to processing of your Data. You have the right to object to the processing of your Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
Access your Data. You have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
Verify and seek rectification. You have the right to verify the accuracy of your Data and ask for it to be updated or corrected.
Restrict the processing of your Data. You have the right, under certain circumstances, to restrict the processing of your Data. In this case, the Owner will not process their Data for any purpose other than storing it.
Have your Personal Data deleted or otherwise removed. You have the right, under certain circumstances, to obtain the erasure of your Data from the Owner. If you wish for your data to be deleted, please contact us using the details below.
Receive your Data and have it transferred to another controller. You have the right to receive your Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on your consent, on a contract which you are part of, or on pre-contractual obligations thereof.
Lodge a complaint. You have the right to bring a claim before your competent data protection authority (e.g., the ICO in the UK).

Details about the right to object to processing:

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

You must know that, however, should their Personal Data be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights:

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

DATA TRANSFER OUTSIDE EU

The Owner is allowed to transfer Personal Data collected within the EU to third countries (i.e. any country not part of the EU) only pursuant to a specific legal basis. Any such Data transfer is based on one of the legal bases described below. Users can inquire with the Owner to learn which legal basis applies to which specific service.

Data transfer to countries that guarantee European standards: If this is the legal basis, the transfer of Personal Data from the EU to third countries is carried out according to an adequacy decision of the European Commission. The European Commission adopts adequacy decisions for specific countries whenever it considers that country to possess and provide Personal Data protection standards comparable to those set forth by EU data protection legislation. Users can find an updated list of all adequacy decisions issued on the European Commission’s website. Personal Data collected: various types of Data.
Data transfer abroad based on consent (this Website): If this is the legal basis, Personal Data of Users shall be transferred from the EU to third countries only if the User has explicitly consented to such transfer, after having been informed of the possible risks due to the absence of an adequacy decision and appropriate safeguards. In such cases, the Owner shall inform Users appropriately and collect their explicit consent via this Website. Personal Data collected: various types of Data.

QUESTIONS ABOUT OUR PRIVACY PRACTICES OR THIS PRIVACY POLICY:

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained. If you have any questions about our Privacy Practices or this Policy, please contact us at sales@oakfarmfirewood.co.uk.

Version 2.0 Date: January 1, 2025