Privacy Policy

Last updated: 01/04/2026

1. Introduction

This Privacy Policy explains how Frank’s Farm (“we”, “us”, “our”) collects, uses and protects your personal data when you visit https://franks.farm/, create an account, make bookings, or purchase products and courses. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• ICO Registration number: ZB717506

2. Who We Are

• Data Controller: Avenue Farm Food Park Ltd, operating as ‘Frank’s Farm’
• Address: Brockley Road, Elsworth, Cambridge, CB23 4EY
• Email: paul@franks.farm

3. What Personal Data We Collect

a) Account and order data (via WooCommerce)

When you create an account or place an order, we may collect:

• Name
• Email address
• Phone number
• Billing and (if applicable) delivery address
• Account login details
• Order history and purchase details

b) Booking and course data

When you book a course or event:

• Personal details (name, contact number, email address)
• Booking details (course, date, time)
• Attendance information, number of guests etc.
• Special requests (e.g. dietary requirements, accessibility needs)

c) Payment data (processed via Dojo)

When you make a payment:

• Transaction details (amount, date, reference)
• Payment method (e.g. card type, last 4 digits)
• Important: We do not store full card details. All payment information is securely processed and PCI compliant by Dojo.

d) Marketing data

• Email address
• Communication preferences

e) Automatically collected data

• IP address
• Browser and device information
• Website usage data via cookies

4. How We Use Your Data

We use your data to:

• Process and fulfil orders
• Manage bookings for courses and events
• Process payments via Dojo
• Send order confirmations and booking details
• Provide customer support
• Manage cancellations, refunds, and changes
• Send important service communications
• Send marketing emails (if you opt in)
• Improve website performance and user experience
• Prevent fraud and ensure security
• Comply with legal and tax obligations

5. Lawful Basis for Processing

We rely on:

• Contract: To fulfil orders and bookings
• Consent: For marketing communications
• Legitimate interests: To operate and improve our services
• Legal obligation: For accounting and regulatory compliance

6. Payments (Dojo)

We use Dojo to process payments securely. Your payment details are transmitted directly to Dojo; we do not store full card details. Dojo acts as a data processor in accordance with its own privacy policy and PCI-DSS requirements. We recommend reviewing Dojo’s privacy policy when making a payment.

7. E-commerce Platform (WooCommerce)

Our website uses WooCommerce to:

• Store customer account information
• Manage orders and bookings
• Process checkout data

Data is stored securely on our hosting servers and may be processed by service providers supporting our website.

8. Sharing Your Data

We share your data only where necessary with:

• Payment processors (Dojo)
• Website hosting providers
• WooCommerce-related service providers and plugins
• Email marketing platforms
• IT and technical support services
• All third parties are required to comply with UK GDPR.

9. Data Retention

We retain data as follows:

• Orders and financial records: Up to 6 years (legal requirement)
• Customer accounts: Until deleted by you or upon request
• Booking records: Up to 3 years
• Marketing data: Until you withdraw consent

10. Your Rights

You have the right to:

• Access, correct, or request deletion of your personal data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact: paul@franks.farm

11. Data Security

We use appropriate security measures, including:

• SSL encryption (HTTPS)
• Secure WooCommerce configuration
• PCI-DSS compliant payment processing via Dojo
• Restricted access to personal data
• Regular updates and monitoring

12. Cookies

We use cookies to:

• Enable WooCommerce functionality (e.g., cart, checkout)
• Remember user preferences
• Analyse site usage

You can control cookies via your browser settings.

13. Third-Party Links

Our website may link to external websites. We are not responsible for their privacy practices.

14. Children’s Data

Our services are not specifically directed at children under 18. We do not knowingly collect personal data from children without parental consent.

15. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be published on this page with an updated date.

16. Complaints

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk