Last Updated: 21 October 2026

1. About Us

Farm Data Principles Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. We believe in transparency and responsible data governance in everything we do.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

• Organisation: Farm Data Principles Ltd (Company Number: 15150036)

• Registered Office: 27 Perowne Street, Cambridge, England, CB1 2AY

• Contact: Here

2. Information We Collect

We collect and process personal data only when necessary to operate our website, communicate with stakeholders, and deliver our services.

• Information you provide directly: When you fill in forms on our website (such as our contact or registration forms), correspond with us by email or phone, or engage with our certification and framework services. This may include your name, organisation name, role, email address, postal address, and telephone number.

• Website usage and technical data: When you browse our website, our server infrastructure (Google Sites) may temporarily process technical data necessary to deliver the site securely (such as IP addresses and device browser types).

• Privacy-preserving analytics: We use Umami Cloud (hosted in the EU) to gather aggregate website usage metrics (e.g. total visitor numbers, popular pages, referral sources). Umami operates without cookies, does not log personal identifiable information (PII), and does not track users across websites.

3. Lawful Bases for Processing

Under the UK GDPR, we only process your personal data where we have a valid lawful basis:

• Legitimate Interests: To communicate with you, respond to enquiries, administer and secure our website, and advance the adoption of the Farm Data Principles.

• Contractual Necessity: Where processing is required to enter into or perform a contract or service agreement with you or your organisation.

• Legal Obligation: Where we must retain or disclose records to comply with applicable UK laws and regulations.

• Consent: Where you have explicitly opted in to receive direct marketing or optional newsletters from us (which you can withdraw at any time).

4. How We Use Your Information

We use your information to:

• Provide information, support, or services you request from us.

• Manage certifications, registers, or memberships associated with Farm Data Principles.

• Maintain the security, performance, and integrity of our website.

• Notify you about important updates to our guidance, frameworks, or policies.

We do not sell, rent, or trade your personal data, nor do we share it with third-party advertisers for behavioural targeting.

5. Data Sharing and Processors

We only share information with trusted third-party service providers who assist us in operating our organisation, under strict data protection terms:

• Cloud & Infrastructure Providers: Including Google Workspace / Google Sites for website hosting and business administration.

• Analytics Providers: Umami Cloud (EU data centre) for cookieless, non-identifying aggregate site metrics.

• Professional & Legal Advisors: Where required for compliance, audit, fraud prevention, or legal claims.

6. International Data Transfers

Where service providers (such as Google Workspace) process data outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with the UK GDPR - such as standard contractual clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or adequacy regulations.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymized.

8. Your Data Protection Rights

Under UK data protection law, you have statutory rights regarding your personal information:

• Right of access: You can request a copy of the personal data we hold about you.

• Right to rectification: You can ask us to correct inaccurate or incomplete data.

• Right to erasure ("Right to be forgotten"): You can ask us to delete your personal data under certain conditions.

• Right to restriction: You can request that we pause the processing of your personal data in specific circumstances.

• Right to object: You can object to processing based on legitimate interests or direct marketing.

• Right to data portability: You can ask us to transfer your data to you or another provider in a structured, commonly used format.

To exercise any of these rights, please contact us at: Here

9. How to Complain

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority:

• Information Commissioner’s Office (ICO)

• Website: ico.org.uk

• Helpline: 0303 123 1113

10. Third-Party Links

Our website may contain links to external websites (e.g. industry partners, government bodies). We do not control external sites and are not responsible for their privacy practices. We encourage you to read the privacy notice of every website you visit.

11. Changes to This Notice

We keep this Privacy Notice under regular review. Any updates will be published directly on this page with an updated revision date.