PRIVACY POLICY
SCOPE OF THIS POLICY
This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. That data may be collected in the following circumstances:
a. if you contact us via our website, on the phone, by email or by letter post;
“Personal data” means recorded information we hold about you from which you can be identified. It may include your name, email address, or any information provide to us via email, phone or letter.
“Processing” means doing anything with the data, such as accessing, disclosing, destroying or using the data in any way.
1. The data controller for the purpose of this Policy is Yeo Valley Farms (Production) Limited (and associated Yeo Valley companies), a company incorporated in England and Wales whose registered office is at Yeo Valley HQ, Rhodyate, Blagdon, Bristol BS40 7YE (registered number 01283809).
2. Please read this Privacy Policy carefully to understand our views and practices regarding your personal data. This explains what information we gather and helps us ensure that you understand and consent to our uses of such information. Yeo Valley is committed to safeguarding and respecting your privacy in compliance with the UK General Data Protection Regulation.
3. We occasionally modify our Privacy Policy and will post those changes on our website so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. Please check our Privacy Policy frequently to ensure that you are aware of any changes.
4. Please note that our websites may from time to time contain links to and from other websites. If you follow a link to any of these websites, please note that we are not responsible for the privacy practices, or the content of such websites and the information practices of those websites are not covered by this Privacy Policy. Please check the individual privacy policy of any website that you visit before you submit any personal data to them.
INFORMATION WE MAY COLLECT AND HOW WE USE IT
5. During the course of our activities, we will process personal data (which may be held on paper, electronically, or otherwise) about our customers and we recognise the need to treat it in an appropriate and lawful manner, in accordance with the UK General Data Protection Regulations (GDPR) and the Data Protection Act 2018 (DPA). The purpose of this policy is to make you aware of how we will handle your personal data. However, data technology and rules change regularly, so we reserve the right to amend it at any time.
6. We will comply with the seven data protection principles in the GDPR, which say that personal data must be:
o Processed fairly and lawfully;
o Processed for limited purposes and in an appropriate way;
o Adequate, relevant and not excessive for the purpose;
o Accurate;
o Not kept longer than necessary for the purpose; o Processed in line with individuals’ rights;
o Be kept secure.
7. We will usually only process your personal data where you have given us your explicit consent and for a specific purpose, for example to receive our newsletter, to make a reservation, or for entry into a prize promotion. We may also process your data where the processing is necessary to comply with our legal obligations.
8. In other cases, processing may be necessary for the protection of your vital interests, for our legitimate interests or the legitimate interests of others. Such legitimate interests may include data profiling which helps us to understand what other interactions may be of interest to you, sending you product offers, or to maintain visitor lists for the security of our venues.
9. We will only retain personal data for as long as necessary to comply with our obligations. Retention periods can be found in our Data Retention Policy, available on request.
WHO WE SHARE DATA WITH
10. Unless we have obtained your specific consent, we will never transfer your data to third parties for them to communicate directly with you. We may disclose your personal information to third parties in the following circumstances:
• for marketing purposes provided that we have had your direct consent (e.g. by ticking the relevant box(es) on the website at the point of registration);
• to fulfil our obligations to you, for example to give a fulfilment company your address to send you a prize;
• to service providers who manage aspects of our operations (for example third parties who provide technical services to the Website);
• if Yeo Valley or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our website Terms and Conditions and other agreements;
• in the event that we outsource any of our business functions including the hosting and maintenance of our data assets or websites in which case we will ensure that any such service provider complies with our data procedures and policies, and that they put in place adequate data security to the required industry standards.
11. Examples of our service providers includes:
• Advertising companies, who help us advertise online and through other media;
• Social media providers such as Facebook, Instagram, Twitter and TikTok;
• Market research and analytics partners who help us analyse customer behaviour (and demographics);
• Companies that run our email campaigns because they need to know your email address to communicate with you on our behalf;
• Companies who devise and administer competitions and promotions for us;
• Companies that may assist us with our community and social goals;
• Companies that help manage the bookings of our venues and events.
WE KEEP YOUR INFORMATION SAFE
12. We will ensure that appropriate measures are taken against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
13. All information you provide to us is stored on secure servers. Where we have given you (or where you have chosen) a password or other data which enables you to access certain parts of our websites, you are responsible for keeping this password and any other identifier confidential and we strongly recommend that you do not share your password or other identifier with anyone.
14. The dynamics of the internet may mean that information is sent electronically to servers outside of the country where you originally entered the information. In addition, that information may be used, stored and processed outside the country where you entered that information for example to the United States of America. While there is a risk that countries to which information is transferred will not be subject to an information protection regime as rigorous as that of the UK, we will always take steps to ensure that your information is treated securely and adequately protected in accordance with this Privacy Policy.
15. Your data may also be processed by staff that work for us or for one of our suppliers and may be situated outside the country where you entered that information. Such staff may be engaged in, among other things, the provision of our service(s) to you and the provision of support services.
16. By submitting your personal data, you agree to the transfer, storing or processing described in this Privacy Policy. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
17. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the websites; any transmission is at your own risk. Once we receive your information, we use strict procedures and security features to try and prevent unauthorised access. Agents or contractors who in the course of providing services to Yeo Valley have access to information which you give to us are required to keep that information secure and confidential and are not permitted to use it for any purpose other than to carry out the services which they are performing for Yeo Valley.
YOUR RIGHTS
18. You have the right to:
o Request access to any personal data we hold about you
o Prevent the processing of your data for direct-marketing purposes;
o Ask to have inaccurate data held about you amended;
o Request that your data is deleted and forgotten;
o Prevent processing that is likely to cause unwarranted substantial damage or distress to you or anyone else;
o Object to any decision that significantly affects you being taken solely by a computer or other automated process.
19. To exercise any of these rights, please send us an email to the contact in section 25 with your full name and details and we will do our best to make the amendments as soon as possible. But do please understand that changes may not be immediate.
20. We will ensure that we have in place procedures and technologies to maintain the security of all personal data from the point of collection to the point of deletion.
ABOUT THIS POLICY
21. This policy was approved on 6th June 2025. Any amendments will be available on this page. This policy is administered by our Data Protection Officer who can be contacted on the following email address: helloyeo@yeovalley.co.uk
HOW TO CONTACT US
22. You have the right to ask us not to use your personal data for marketing purposes. You can request that you stop receiving information from us or change your preferences at any time by contacting helloyeo@yeovalley.co.uk
If you wish to know what personal data we hold about you or wish to inform us of any changes to your data, you may make a request in writing. Send all such requests to the addresses below.
For email requests: hello@yeovalley.co.uk
For written requests: YEO VALLEY FARMS (PRODUCTION) LIMITED, Yeo Valley Hq, Rhodyate, Blagdon, Somerset, BS40 7YE
Full Address of the Data Controller : YEO VALLEY FARMS (PRODUCTION) LIMITED, Yeo Valley Hq, Rhodyate, Blagdon, Somerset, BS40 7YE