Privacy and Cookie Policy

Whole Health Agriculture (“WHAg”, “we”, “us”, or “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect any information that you give us when you use our website https://wholehealthag.org.

We are the Data Controller of any personal information you provide to us and are registered with the Information Commissioner’s Office (ICO) under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the terms of this Privacy and Cookie Policy.

1. Information We Collect

We may collect and process the following personal data:

• Name and job title
• Contact details including email address
• Demographic information such as postcode, preferences, and interests
• Technical data such as IP address, browser type, and operating system
• Other information relevant to customer surveys, feedback forms, and offers

2. How We Use Your Information

We process your personal data for the following purposes:

• Internal record keeping and administration
• Improving our products and services
• Sending you promotional emails about new products, services, or offers
• Contacting you for market research purposes via email, phone, or post
• Customising the website according to your preferences and interests

3. Legal Basis for Processing

We only process personal data when we have a valid lawful basis under UK GDPR. The legal bases we rely on include:

• Consent – for marketing communications and optional services you sign up to
• Contractual necessity – where processing is required to fulfil a contract with you
• Legal obligation – to comply with applicable legal or regulatory requirements
• Legitimate interests – for running our operations efficiently, including improving services and protecting against fraud (provided your rights do not override those interests)

4. Third-Party Processors

We may engage third-party service providers (e.g. email platforms, payment processors, IT support) to process personal data on our behalf. We ensure that all such processors:

• Operate under a written contract
• Comply with UK GDPR requirements
• Have adequate technical and organisational measures in place to protect your data

We do not allow third parties to use your personal data for their own purposes. They may only process it for specified purposes and in accordance with our instructions.

5. Security

We are committed to ensuring that your information is secure. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

6. Data Breach Notification

In the event of a personal data breach, WHAg will:

• Assess the risk to your rights and freedoms
• Notify affected individuals without undue delay if there is a high risk to those rights and freedoms
• Notify the ICO within 72 hours of becoming aware of the breach, where required

7. Cookies

What Are Cookies?

Cookies are small text files stored on your device to improve your browsing experience. They help websites recognise your device and remember your preferences.

Types of Cookies We Use:

• Strictly Necessary Cookies: Enable core functionality like page navigation and secure access. The website cannot function properly without these cookies.
• Performance Cookies: Collect anonymous data on how visitors use our site. These help us improve site performance.
• Functionality Cookies: Remember your preferences to enhance your user experience.

By continuing to browse our site, you agree to our use of cookies. You can control or delete cookies through your browser settings.

8. Links to Third-Party Websites

Our website may contain links to external websites. Once you leave our site, we do not have control over those websites and are not responsible for the protection or privacy of any information you provide while visiting them. We recommend you review their privacy policies.

9. Controlling Your Personal Information

You may:

• Withdraw your consent to marketing communications at any time
• Update your preferences or request corrections to your data
• Request deletion or restriction of your personal data under applicable laws

We will not sell, lease, or distribute your personal information to third parties unless we have your permission or are legally required to do so.

10. Your Data Protection Rights

You have the following rights under UK GDPR:

• Right to Access – You can request a copy of the personal data we hold about you.
• Right to Rectification – You can request corrections to inaccurate or incomplete data.
• Right to Erasure – You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing – You can ask us to suspend processing of your data.
• Right to Data Portability – You can request that we transfer your data to another provider.
• Right to Object – You can object to our processing where we rely on legitimate interests.

To make a subject access request or exercise your data rights, please email us at: info@wholehealthag.org. We may need to verify your identity before fulfilling your request. We aim to respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113

11. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time. Changes will be posted on this page and, where appropriate, notified to you by email. Please check this page periodically to ensure that you are happy with any changes.

12. Contact Us

If you have any questions or concerns about this Privacy and Cookie Policy, or how we handle your personal data, please contact:

Whole Health Agriculture

Email: info@wholehealthag.org
Post: 16 Larkdown, Wantage, Oxfordshire, OX12 8HE