Privacy Policy​

 

Last updated: 23 September 2026

​

1. Important information and who we are

Cammas Hall Fruit Farm Ltd (company number 09351302, registered in England and Wales) ("we", "us" or "our") is the data controller responsible for your personal data.

​

We are committed to protecting your personal data. This privacy notice explains how we collect and process your personal data through your use of our website. This includes any information you provide when you; purchase a product, purchase a ticket or voucher for an onsite activity, make a booking, sign up to our newsletter or loyalty scheme, contact us, or take part in a prize draw or competition.

​

Our website and services are not intended for children. By providing us with your data, you confirm that you are over 13 years of age.

​

Data Compliance Officer. We have appointed a Data Compliance Officer who oversees questions about this privacy notice. If you have any questions, including requests to exercise your legal rights, please contact them using the details in the "Contact us" section at the end of this notice.

​

2. The data we collect about you

​

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following kinds of personal data:

 

• Identity data: Primarily but not solely; first name, last name, and title.

• Contact data: billing address, delivery address, email address and telephone numbers.

• Financial data: payment card details. These are processed securely by our payment provider, and we do not store full card numbers.

• Transaction data: details of payments, and of products, tickets, vouchers and services you have purchased from us.

• Technical data: IP address, browser type and version, time zone setting, operating system and device information, collected when you use our website.

• Profile data: your purchases or bookings, preferences, feedback and survey or competition responses.

• Usage data: information about how you use our website, products and services.

• Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.

• CCTV images: recorded at our premises for security and safety purposes.

​

We do not knowingly collect any special category data (such as health, religious or ethnic data).

​

If you fail to provide personal data that we need to fulfil a contract with you (for example, to process an order or booking), we may be unable to provide that product or service.

​

3. How we collect your personal data

​

• Direct interactions: when you place an order, buy tickets or vouchers, fill in forms, subscribe to our newsletter, enter a competition, join our loyalty scheme, contact us, or visit our premises.

• Automated technologies: as you use our website we may collect technical and usage data through cookies and similar technologies (see section 6).

• Third parties: we may receive data from payment providers, booking or ticketing platforms, and analytics providers such as Google.

4. How we use your personal data

​

• We will only use your personal data when the law allows us to. Most commonly, we rely on one of these lawful bases:

• Processing orders, bookings, tickets and vouchers: performance of a contract.

• Managing payments and preventing fraud: performance of a contract and our legitimate interests.

• Responding to enquiries and providing customer service: our legitimate interests and performance of a contract.

• Sending newsletters and marketing emails: your consent.

• Running prize draws and competitions: performance of a contract and our legitimate interests.

• Improving our website through analytics: your consent, given via our cookie banner.

• Operating CCTV for security and safety: our legitimate interests.

• Complying with legal and tax obligations: legal obligation.

• Where we rely on legitimate interests, we have considered and balanced any potential impact on you and your rights. We will not use your data for activities where our interests are overridden by the impact on you.

​

5. Marketing

​

We will only send you marketing communications if you have opted in, or, where permitted by law, if you have bought similar goods or services from us and have not opted out. You can unsubscribe at any time using the link in any marketing email or by contacting us. We will never sell your personal data to third parties for their own marketing.

​

6. Cookies

​

Our website uses cookies. Non-essential cookies, such as analytics cookies, are only set with your consent. For full details of the cookies we use and how to manage them, please read our Cookie Policy.

​

7. Disclosures of your personal data

​

We may share your personal data with:

​

• service providers acting as processors, such as website hosting, IT, email marketing, payment processing and booking or ticketing platforms, including FuseMatrix;

• professional advisers, including lawyers, accountants, auditors and insurers;

• HM Revenue & Customs, regulators, the police and other authorities where required by law;

• a buyer or successor if we sell, transfer or merge parts of our business.

​

We require all third parties to keep your personal data secure and to use it only in accordance with our instructions and the law.

​

8. International transfers

​

Some of our service providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we make sure it is protected by at least one safeguard: a UK adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework), or the International Data Transfer Agreement or Addendum approved by the ICO.

​

9. Data security

​

We have put appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access is limited to employees, contractors and third parties who have a business need to know. We have procedures for dealing with any suspected personal data breach and will notify you and the ICO where we are legally required to.

​

10. How long we keep your data

​

We keep personal data only for as long as necessary for the purposes we collected it for, including legal, tax, accounting and reporting requirements. For example, we may keep transaction records for six years for tax purposes. Marketing data is kept until you unsubscribe.

​

11. Your legal rights

​

Under data protection law you have the right to:

​

• access your personal data (a "subject access request");

• correct inaccurate or incomplete data;

• erase your data where there is no good reason for us to keep it;

• object to processing based on legitimate interests, and to direct marketing at any time;

• restrict processing in certain circumstances;

• data portability: receive your data in a structured, machine-readable format;

• withdraw consent at any time, where we rely on consent. This does not affect processing already carried out.

​

You will not usually have to pay a fee. We may need to confirm your identity before responding, and we aim to respond within one month. To exercise any of these rights, contact our Data Compliance Officer.

​

12. Complaints

​

If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: www.ico.org.uk, telephone 0303 123 1113.

​

13. Third-party links

​

Our website may include links to third-party websites. Clicking those links may allow third parties to collect data about you. We do not control these websites and are not responsible for their privacy statements.

​

14. Changes to this notice

​

We keep this notice under regular review. Any changes will be posted on this page with an updated date.

​

15. Contact us

​

Data Compliance Officer

Email:office@cammashall.co.uk
Postal address: Cammas Hall Farm, Needham Green, Hatfield Broad Oak, CM22 7JT