Privacy Policy

1. Introduction

Apsley Farms ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our website or services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, company name
• Address Information: Delivery addresses, billing addresses
• Order Information: Product selections, quantities, delivery preferences
• Communication: Messages sent through contact forms or direct communication

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address (anonymized)
• Browser type and version
• Device type and operating system
• Pages visited and time spent on site
• Referring website

3. How We Use Your Information

We use your personal information for the following purposes:

• Pre-order Processing: To fulfill your dry ice pre-orders and arrange delivery
• Customer Service: To respond to inquiries and provide support
• Communication: To send pre-order confirmations, delivery updates, and safety information
• Service Improvement: To improve our products and services
• Legal Compliance: To comply with applicable laws and regulations
• Newsletter: To send updates about availability and offers (only with your consent)

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to fulfill your pre-orders
• Legitimate Interests: Improving our services and ensuring safety
• Consent: For newsletter subscriptions and non-essential communications
• Legal Obligation: Compliance with health and safety regulations

5. Cookie-Free Analytics

5.1 Why We Don't Use Cookies

We believe in respecting your privacy. That's why we use Plausible Analytics - a privacy-focused, cookie-free analytics service that:

• Does not use cookies or store personal data
• Does not track visitors across websites
• Does not create personal profiles
• Complies with GDPR, CCPA, and PECR without requiring consent banners

5.2 What Plausible Analytics Collects

Plausible Analytics collects only anonymized, aggregated data including:

• Page views and unique visitors (anonymized)
• Referral sources
• Top pages visited
• Device type (desktop/mobile)
• General location (country/region level only)

5.3 No Consent Required

Because we use cookie-free analytics that cannot identify individuals, no consent is required under privacy laws. Your browsing remains completely private.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted partners who help us deliver services (e.g., payment processors, delivery services)
• Legal Requirements: When required by law or to protect our rights
• Emergency Situations: To prevent harm to safety or security

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

8. Data Retention

We retain your personal data only as long as necessary:

• Order Data: 7 years for tax and legal compliance
• Contact Data: Until you request deletion or withdraw consent
• Marketing Data: Until you unsubscribe or withdraw consent
• Analytics Data: 26 months (anonymized, cannot identify individuals)

9. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: For newsletter and marketing communications

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

11. International Transfers

Your personal data is processed within the UK. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place to protect your information.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

• Email: Through our contact form
• Phone: Our customer service team
• Mail: Our registered business address

15. Data Protection Officer

If you have concerns about how we handle your personal data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.