Privacy Policy
1. Introduction and company information
This Privacy Policy explains how GreenHarvest Produce Ltd collects, uses, stores, shares, and protects personal data when it operates its business as a vegetable supplier and any related services, including sales, deliveries, customer communications, supplier management, website interactions, and other business activities.
The data controller responsible for your personal data is:
- Company name: GreenHarvest Produce Ltd
- Address: Unit 4, Riverside Industrial Estate, Mill Lane, Cambridge, CB5 8HL, UK
- Email: [email protected]
- Phone: +44 1223 864 719
This Privacy Policy is intended to provide clear information about our data handling practices in a professional and transparent manner, in accordance with applicable privacy and data protection laws.
2. Data collection and processing
GreenHarvest Produce Ltd may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
- Identity data: name, title, job role, and company name where relevant.
- Contact data: address, email address, telephone number, and delivery or billing details.
- Transaction data: order details, invoices, payment status, delivery history, and records of goods supplied.
- Communication data: correspondence, enquiries, complaints, feedback, and customer service records.
- Technical data: IP address, device information, browser type, log data, and website usage information.
- Marketing preferences: preferences regarding promotional communications and consent choices where applicable.
- Supplier and business data: contract details, purchase records, compliance information, and account management information.
We generally collect personal data directly from you, such as when you place an order, contact us by phone or email, use our website, enter into a contract with us, or otherwise interact with our business. In some cases, we may receive data from third parties, such as payment providers, delivery partners, professional advisers, or publicly available sources where permitted by law.
We process personal data using both automated and manual methods as needed for business operations, record keeping, communication, compliance, and service delivery.
3. Purpose of data processing
GreenHarvest Produce Ltd processes personal data for the following purposes:
- to supply vegetables and related products and services;
- to process orders, payments, invoices, refunds, and account administration;
- to arrange deliveries, logistics, and customer support;
- to manage supplier relationships and business contracts;
- to respond to enquiries, complaints, and requests;
- to send service-related communications and administrative notices;
- to maintain internal records, accounting, and regulatory compliance;
- to improve our products, services, operations, and website functionality;
- to conduct marketing activities where permitted and where you have not objected or have given consent, as applicable;
- to detect, prevent, and investigate fraud, misuse, or security incidents;
- to establish, exercise, or defend legal claims.
We only process personal data where it is necessary for a legitimate business purpose and where such processing is permitted by applicable law.
4. Legal basis for processing
GreenHarvest Produce Ltd relies on one or more of the following legal bases for processing personal data, depending on the circumstances:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you, including supply, delivery, or account management.
- Legal obligation: where we must process data to comply with applicable legal, tax, accounting, or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating our business efficiently, improving services, managing relationships, securing systems, and preventing fraud, provided these interests are not overridden by your rights and freedoms.
- Consent: where we rely on your consent, for example for certain marketing communications or optional cookies or similar technologies, where applicable.
- Vital interests: in limited circumstances where processing is necessary to protect someone’s vital interests.
- Public interest or official authority: where required by law and applicable to specific processing activities.
Where processing is based on consent, you may withdraw that consent at any time, as described below.
5. Data sharing and third parties
GreenHarvest Produce Ltd may share personal data with third parties where necessary and lawful, including the following categories of recipients:
- Delivery and logistics providers: for the fulfilment and transportation of orders.
- Payment service providers and financial institutions: for payment processing, fraud prevention, and account reconciliation.
- IT and cloud service providers: for hosting, software, data storage, communications, and security services.
- Professional advisers: such as accountants, auditors, lawyers, insurers, and compliance advisers.
- Regulators, authorities, and law enforcement: where disclosure is required by law or necessary to protect rights, property, or safety.
- Business partners and suppliers: where required for order fulfilment, service coordination, or contract performance.
We require third parties who process personal data on our behalf to implement appropriate safeguards and to use the data only in accordance with our instructions and applicable law. Where a third party acts as an independent controller, their own privacy terms may also apply.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area to countries that may not provide the same level of data protection, GreenHarvest Produce Ltd will take appropriate steps to ensure that such transfers are lawful and protected by suitable safeguards.
These safeguards may include, where applicable:
- adequacy regulations or decisions;
- standard contractual clauses or equivalent contractual protections;
- additional technical, organisational, and contractual measures;
- reliance on specific legal exemptions where permitted by law.
Where required, you may request further information about the relevant safeguards by contacting us using the details below.
7. Storage duration
GreenHarvest Produce Ltd retains personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, or regulatory requirements.
- Contract and transaction records: retained for the duration of the business relationship and for a subsequent period required by law or business necessity.
- Customer service communications: retained for as long as needed to handle the enquiry, complaint, or dispute, and thereafter as necessary for record keeping.
- Marketing data: retained until you withdraw consent, object, or otherwise opt out, subject to internal suppression records where appropriate.
- Technical and website data: retained for a period necessary for security, analytics, and service improvement purposes.
When personal data is no longer required, we will delete it or anonymise it securely in accordance with our retention procedures.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data held by GreenHarvest Produce Ltd:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of personal data in certain circumstances.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to request that we provide certain data in a structured, commonly used, machine-readable format or transfer it to another controller where technically feasible.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding. We will respond within any timeframe required by applicable law.
9. Withdrawal of consent
Where GreenHarvest Produce Ltd relies on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional services or communications, but this will not affect processing based on another legal basis where that processing is lawful.
10. Right to complain
If you have concerns about how GreenHarvest Produce Ltd handles your personal data, please contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In the United Kingdom, this is generally the Information Commissioner’s Office (ICO).
11. Data security
GreenHarvest Produce Ltd takes the security of personal data seriously and implements appropriate technical and organisational measures designed to protect against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include, as appropriate:
- access controls and role-based permissions;
- secure storage and transmission methods;
- staff confidentiality obligations and training;
- system monitoring and security procedures;
- regular updates and maintenance of IT systems;
- procedures for incident response and breach management.
While we take reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. You should also take care when sharing information online or by email.
12. Contact information
If you have any questions about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact:
- GreenHarvest Produce Ltd
- Unit 4, Riverside Industrial Estate, Mill Lane, Cambridge, CB5 8HL, UK
- Email: [email protected]
- Phone: +44 1223 864 719
13. Changes to privacy policy
GreenHarvest Produce Ltd may update this Privacy Policy from time to time to reflect changes in our practices, operational needs, legal requirements, or other relevant factors. Any updated version will be made available through our usual communication channels or website, where applicable.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle personal data. Continued use of our services after changes take effect may indicate acceptance of the updated policy, to the extent permitted by law.
Effective date: 14 July 2026