Privacy policy
PRIVACY POLICY
Farmison & Co — New Farmison Limited
Last updated: 31 October 2026
1. Introduction
Farmison & Co is operated by New Farmison Limited ("Farmison", "we", "us" or "our"). New Farmison Limited is the data controller responsible for personal information collected through www.farmison.com and our associated customer services, except where another organisation acts as an independent controller.
Business contact address: 5 Heathman’s Road, London, SW6 4TJ, United Kingdom. Email: enquiries@farmison.com. Website: www.farmison.com.
Our website and online store are powered by Shopify. We respect your privacy and are committed to protecting your personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). This policy explains how we collect, use, share, retain and protect your information, together with your rights.
2. Personal Information We Collect
Depending on your interactions with us, we may collect:
· Identity and contact information: Name, email address, telephone number, billing and delivery addresses.
· Order information: Purchases, payment confirmations, order values, deliveries, refunds, returns and transaction histories.
· Payment information: Payment methods, transaction references and relevant payment details processed through our payment providers.
· Account information: Login details, preferences, account settings and shopping interests.
· Website information: IP addresses, browser information, device identifiers, cookie information and interactions with our website.
· Marketing information: Subscription preferences, consent records and interactions with marketing communications.
· Customer communications: Enquiries, complaints, feedback, reviews and correspondence with our team.
We do not ordinarily require customers to provide sensitive personal information. Please avoid supplying unnecessary sensitive information when contacting us.
3. How We Obtain Your Information
· Directly from you when you register, subscribe, purchase products or contact us.
· Automatically through website technologies, including cookies and analytics tools.
· From companies providing services on our behalf, including Shopify, payment providers and delivery partners.
· From other parties where we have a lawful basis to receive and use the information, potentially including records transferred as part of a business or asset acquisition.
Where information is obtained from another organisation, we assess the purpose, legal basis and restrictions applicable to that information.
4. How and Why We Use Your Information
We process personal information only where a lawful basis applies.
|
Purpose |
Principal lawful basis |
|
Processing orders, payments and deliveries |
Performance of a contract |
|
Managing customer accounts, returns and enquiries |
Performance of a contract or legitimate interests, as applicable |
|
Meeting accounting, tax and other legal requirements |
Legal obligation |
|
Preventing fraud and protecting our business |
Legitimate interests or legal obligation |
|
Improving our website and customer experience |
Legitimate interests, or consent where required |
|
Sending promotional emails or text messages |
Consent, or legitimate interests where an applicable PECR exception permits marketing |
|
Personalised advertising and non-essential tracking |
Consent where required, together with an applicable UK GDPR lawful basis |
|
Managing legal claims and disputes |
Legitimate interests or legal obligation, as applicable |
Where we rely on legitimate interests, these include operating and securing our business, providing effective customer service, preventing fraud and improving our products and services. We consider the impact of these activities on individuals’ rights and interests. We will not use your information for purposes incompatible with those for which it was collected unless permitted by law.
5. Marketing Communications
We may contact customers with information about Farmison products, seasonal offers, promotions and other relevant services. We will only send electronic marketing where we have appropriate permission or another lawful route under applicable marketing legislation. Where consent is required, customers will be given a clear opportunity to opt in.
Where the existing-customer marketing exception (commonly called the “soft opt-in”) applies, we will ensure its legal requirements are satisfied, including the requirement to provide an opportunity to opt out when information is collected and in every subsequent marketing communication. We will maintain appropriate records of marketing permissions, objections and unsubscribe requests.
You can unsubscribe from our marketing emails using the link contained in each promotional email, or contact enquiries@farmison.com. Unsubscribing from marketing will not prevent us from sending essential communications concerning your orders or account. We will not treat purchasing a product or registering an account as automatic consent to receive marketing.
6. Historic Farmison Customer Information
New Farmison Limited may receive or process customer records originating from previous Farmison operations where those records have been lawfully transferred or otherwise made available to us. Such information may include customer contact details, transaction histories and recorded preferences.
Before using historic customer information, particularly for marketing, we will assess the legal basis for receiving and processing it and any applicable restrictions. We will not assume that consent provided to a previous business automatically authorises New Farmison Limited to send marketing communications. Where required, we will provide customers with information about our identity, the source of their data, the purposes for which it is processed and their rights.
Customers may contact enquiries@farmison.com regarding historic information held about them.
7. Cookies and Website Tracking
Our website uses cookies and similar technologies to support shopping functionality, maintain security, remember preferences and understand website performance. Certain cookies are necessary for the website to function, including those supporting shopping baskets, checkout and account security. Other technologies may be used for analytics, personalisation and advertising.
Where consent is legally required, we will seek it before placing or accessing non-essential cookies or similar technologies. Customers should be able to accept or reject non-essential cookies and update their choices. Further information about the particular cookies and tracking technologies used, including their providers, purposes and durations, will be made available through our cookie information and preference controls.
8. Sharing Your Information
We may share relevant personal information with organisations that assist us in operating our business, including:
· Shopify, our ecommerce technology provider.
· Payment processing and fraud prevention providers.
· Delivery, logistics and fulfilment companies.
· Email marketing and customer communications providers.
· Website hosting, analytics and technical service providers.
· Professional advisers, including legal and accounting advisers.
· Regulators, public authorities and law enforcement agencies where required or permitted by law.
· Other companies within our corporate group where an appropriate lawful basis exists.
We may also disclose relevant information in connection with a corporate restructuring, acquisition, disposal or similar transaction, subject to applicable legal requirements. We require service providers acting on our behalf to apply appropriate confidentiality, security and data protection safeguards. Where third parties act as independent data controllers, they may process information under their own privacy notices. We do not automatically authorise third parties to use customer information for unrelated marketing.
9. Our Relationship with Shopify
Our store is powered by Shopify, which processes personal information to provide ecommerce functionality, facilitate transactions, maintain security and deliver related services. Information submitted through our website may be processed by Shopify and its authorised service providers.
Certain Shopify features may involve the use of information about customer interactions across Shopify services and participating merchants. Depending on the feature and circumstances, Shopify may act as a processor or an independent controller. For information about Shopify’s own data processing and applicable privacy rights, please see https://www.shopify.com/legal/privacy/app-users and https://privacy.shopify.com/en.
Where required, we will ensure that relevant Shopify settings and customer privacy choices are implemented appropriately.
10. International Data Transfers
Some of our service providers may process or store personal information outside the United Kingdom, including in countries where privacy laws differ. Where a restricted international transfer takes place, we will use an applicable lawful transfer mechanism, such as an adequacy regulation, the UK International Data Transfer Agreement or an appropriate UK Addendum to standard contractual clauses, as relevant. Where appropriate, we will also assess whether additional safeguards are required. You may contact us to request further information about applicable international transfer safeguards.
11. Data Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure and misuse. These may include access restrictions, secure systems, appropriate contractual protections and security measures provided by our ecommerce and payment technology providers. No internet-based system can guarantee absolute security. Customers should keep account passwords confidential and contact us if they suspect unauthorised access.
12. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, contractual, accounting and regulatory requirements. Our retention decisions take account of:
· Applicable tax and accounting recordkeeping obligations.
· The duration of our customer relationship.
· The need to manage orders, returns and disputes.
· Legal limitation periods.
· The continuing validity of marketing permissions.
· Customer requests to delete information.
· Security, fraud prevention and legal requirements.
When information is no longer required, we will delete it, anonymise it or otherwise dispose of it securely, subject to applicable exceptions. We may retain limited suppression records to ensure that marketing opt-outs continue to be respected. More specific retention periods will be provided where applicable, including through supplementary notices or on request.
13. Your Data Protection Rights
Subject to applicable legal requirements and exceptions, you have the right to:
· Request access to personal information we hold about you.
· Request correction of inaccurate or incomplete information.
· Request deletion of information in appropriate circumstances.
· Request restrictions on certain processing activities.
· Object to processing based on legitimate interests.
· Request the transfer of certain information in a portable format.
· Withdraw consent where processing is based on consent.
· Raise concerns about applicable automated decision-making.
You have the right to object at any time to the processing of your personal information for direct marketing purposes. If you exercise this right, we will stop using your information for direct marketing.
To exercise your rights, please email enquiries@farmison.com. We may request appropriate verification of identity before responding to certain requests. We will respond within the timeframe required by applicable law, generally within one month for UK GDPR requests, subject to permitted extensions.
14. Children’s Privacy
Our services are intended for adult customers and are not directed at children. We do not knowingly seek to collect personal information from children for marketing purposes. If a parent or guardian believes that a child has provided personal information to us inappropriately, they should contact enquiries@farmison.com. We will review such requests and take appropriate action.
15. Third-Party Websites
Our website may contain links to websites, services and social media platforms operated by independent third parties. We are not responsible for the privacy practices of those organisations. Customers should review the relevant privacy notices before providing personal information through third-party services.
16. Complaints and Regulatory Rights
If you have a concern about how we collect or use your personal information, please contact us in the first instance: New Farmison Limited — Farmison & Co, 5 Heathman’s Road, London, SW6 4TJ. Email: enquiries@farmison.com.
You also have the right to complain to the Information Commissioner’s Office (ICO), the United Kingdom’s independent data protection regulator. Website: https://ico.org.uk. Where applicable, individuals outside the United Kingdom may also have rights to contact their relevant local data protection supervisory authority.
17. Changes to This Policy
We may update this Privacy Policy to reflect developments in our business, legal requirements, technology or data processing activities. Updated versions will be published on www.farmison.com with a revised date. Where required by law, we will provide additional notice or obtain consent before making material changes to how we process personal information.
18. Contact Details
Data Controller: New Farmison Limited
Trading as: Farmison & Co
Business contact address: 5 Heathman’s Road, London, SW6 4TJ, United Kingdom
Email: enquiries@farmison.com
Website: www.farmison.com
For questions concerning this Privacy Policy, marketing preferences or personal information, please contact us using the details above.