SCOPE OF THIS POLICY

1. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. That data may be collected in the following circumstances:
   • if you contact us via one of our websites, on the phone, by email or by letter post;
   • if you create an account on one of our websites, including but not limited to a Yeokens account;
   • if you buy products or redeem points or vouchers;
   • if you interact with one of our posts on social media;
   • if you opt in to receive our newsletters or any other information that you agree to;
   • if you take part in a Yeo Valley branded prize draw, competition or one of our surveys;
   • if you give us your explicit permission to share your data with a third party brand for a prize draw, competition, marketing emails, information request or survey;
   • if you make a reservation at one of our Venues or buy a ticket for an event;
   • if you visit us at one of our venues;
   • if you provide us with details of dietary of health requirements at an event or when eating at one of our Venues.

“Personal data” means recorded information we hold about you from which you can be identified. It may include your contact details, details about your dietary requirements, image footage captured via CCTV at one of our venues, financial details, other personally identifiable information, or information that we are able to infer about you based on your interaction with us.

“Processing” means doing anything with the data, such as accessing, disclosing, destroying or using the data in any way.

2. The data controller for the purpose of this Policy is Yeo Valley Limited a company registered in England and Wales with registered number 11897141 whose registered office is at Yeo Valley HQ, Rhodyate, Blagdon, Bristol, BS40 7YE. Yeo Valley Limited is registered with the ICO – number ZB291975.

Other companies in the Yeo Valley family of businesses covered by this policy include:

• Yeo Valley Organic Limited (ICO registration ZA734543)
• Yeo Valley Properties Limited (ICO registration ZB581839)
• Yeo Valley Farms Limited (ICO registration ZA734575)
• Yeo Valley Farms (Production) Limited (ICO registration Z7521519)

Together “Yeo Valley”, “we” “our” and “us”

3. Please read this Privacy Policy carefully to understand our views and practices regarding your personal data. This explains what information we gather and helps us ensure that you understand and consent to our uses of such information. Yeo Valley is committed to safeguarding and respecting your privacy in compliance with the UK General Data Protection Regulation.
4. We occasionally modify our Privacy Policy and will post those changes on our website so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. Please check our Privacy Policy frequently to ensure that you are aware of any changes.
5. Please note that our websites may from time to time contain links to and from other websites. If you follow a link to any of these websites, please note that we are not responsible for the privacy practices, or the content of such websites and the information practices of those websites are not covered by this Privacy Policy. Please check the individual privacy policy of any website that you visit before you submit any personal data to them.

INFORMATION WE MAY COLLECT AND HOW WE USE IT

6. During the course of our activities, we will process personal data (which may be held on paper, electronically, or otherwise) about our customers and we recognise the need to treat it in an appropriate and lawful manner, in accordance with the UK General Data Protection Regulations (GDPR) and the Data Protection Act 2018 (DPA). The purpose of this policy is to make you aware of how we will handle your personal data. However, data technology and rules change regularly, so we reserve the right to amend it at any time.
7. We will comply with the seven data protection principles in the GDPR, which say that personal data must be:

1. • Processed fairly and lawfully;
   • Processed for limited purposes and in an appropriate way;
   • Adequate, relevant and not excessive for the purpose;
   • Accurate;
   • Not kept longer than necessary for the purpose;
   • Processed in line with individuals’ rights;
   • Be kept secure.

8. We will usually only process your personal data where you have given us your explicit consent and for a specific purpose, for example to receive our newsletter, to make a reservation, to create a Yeokens account or for entry into a prize promotion. We may also process your data where the processing is necessary to comply with our legal obligations.
9. In other cases, processing may be necessary for the protection of your vital interests, for our legitimate interests or the legitimate interests of others.Such legitimate interests may include data profiling which helps us to understand what other interactions may be of interest to you, sending you product offers, or to maintain visitor lists for the security of our venues.
10. If you create a Yeokens account and/or register to receive our email newsletters, we may use your information to

• to operate the Yeokens Scheme, for example to enable you to earn, record and redeem points, and to provide other directly related scheme benefits that we may introduce from time to time;
• to profile you and your household’s characteristics and understand how you use the Yeokens Scheme and interact with our marketing channels such as our websites, email, surveys and social media channels. This understanding allows us to communicate better with you and deliver more relevant offers, prizes and other products;
• to assess the effectiveness of the marketing activities we carry out for Yeo Valley and for other brands that we partner with to ensure we deliver a great consumer experience;
• to use our understanding of your behaviour to show or provide you with information, offers, research surveys and digital advertisements for the products and events we believe are likely to be relevant and of interest to you;
• to provide you with newsletters and other information about products and features of our websites which we think may be of interest to you;
• to provide you with relevant and related marketing activity for Yeo Valley and third parties if you have provided us with your consent to do so;
• to ensure that content from our websites is presented in the most effective manner for you and your computer, including enhancing your user experience;
• to notify you about changes to our products, events, venues and/or our websites;
• to help diagnose problems with our server and to administer our websites so that they remain available to you.

11. We will only retain personal data for as long as necessary to comply with our obligations. Retention periods can be found in our Data Retention Policy, available on request.

WHO WE SHARE DATA WITH

12. Unless we have obtained your specific consent, we will never transfer your data to third parties for them to communicate directly with you. We may disclose your personal information to third parties in the following circumstances:

• for marketing purposes provided that we have had your direct consent (e.g. by ticking the relevant box(es) on the website at the point of registration);
• to fulfil our obligations to you, for example to give a fulfilment company your address to send you a prize;
• to service providers who manage aspects of our operations (for example third parties who provide technical services to the Website);
• if Yeo Valley or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our website Terms and Conditions and other agreements;
• in the event that we outsource any of our business functions including the hosting and maintenance of our data assets or websites in which case we will ensure that any such service provider complies with our data procedures and policies, and that they put in place adequate data security to the required industry standards.

13. Examples of our service providers includes:

• Advertising companies, who help us advertise online and through other media;
• Social media providers such as Facebook, Instagram, Twitter and TikTok;
• Market research and analytics partners who help us analyse customer behaviour (and demographics);
• Companies that run our email campaigns because they need to know your email address to communicate with you on our behalf;
• Companies who devise and administer competitions and promotions for us;
• Companies that may assist us with our community and social goals;
• Companies that help manage the bookings of our venues and events.

WE KEEP YOUR INFORMATION SAFE

14. We will ensure that appropriate measures are taken against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
15. All information you provide to us is stored on secure servers. Where we have given you (or where you have chosen) a password or other data which enables you to access certain parts of our websites, you are responsible for keeping this password and any other identifier confidential and we strongly recommend that you do not share your password or other identifier with anyone.
16. The dynamics of the internet may mean that information is sent electronically to servers outside of the country where you originally entered the information. In addition, that information may be used, stored and processed outside the country where you entered that information for example to the United States of America. While there is a risk that countries to which information is transferred will not be subject to an information protection regime as rigorous as that of the UK, we will always take steps to ensure that your information is treated securely and adequately protected in accordance with this Privacy Policy.
17. Your data may also be processed by staff that work for us or for one of our suppliers and may be situated outside the country where you entered that information. Such staff may be engaged in, among other things, the provision of our service(s) to you and the provision of support services.
18. By submitting your personal data, you agree to the transfer, storing or processing described in this Privacy Policy. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
19. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the websites; any transmission is at your own risk. Once we receive your information, we use strict procedures and security features to try and prevent unauthorised access. Agents or contractors who in the course of providing services to Yeo Valley have access to information which you give to us are required to keep that information secure and confidential and are not permitted to use it for any purpose other than to carry out the services which they are performing for Yeo Valley.

YOUR RIGHTS

20. You have the right to:
    • Request access to any personal data we hold about you;

1. • Prevent the processing of your data for direct-marketing purposes;
   • Ask to have inaccurate data held about you amended;
   • Request that your data is deleted and forgotten;
   • Prevent processing that is likely to cause unwarranted substantial damage or distress to you or anyone else;
   • Object to any decision that significantly affects you being taken solely by a computer or other automated process.

21. To exercise any of these rights, please send us an email to the contact in section 25 with your full name and details and we will do our best to make the amendments as soon as possible. But do please understand that changes may not be immediate.
22. We will ensure that we have in place procedures and technologies to maintain the security of all personal data from the point of collection to the point of deletion.

ABOUT THIS POLICY

23. This policy was approved on 21^st August 2023. Any amendments will be available on this page. This policy is administered by our Data Protection Officer who can be contacted on the following email address: dpo@yeovalleyfarms.co.uk

HOW TO CONTACT US

24. You have the right to ask us not to use your personal data for marketing purposes. You can request that you stop receiving information from us or change your preferences at any time by visiting www.yeovalley.co.uk/unsubscribeco.uk/unsubscribe

If you wish to know what personal data we hold about you or wish to inform us of any changes to your data, you may make a request in writing. Send all such requests to the addresses below.

For email requests: hello@yeovalley.co.uk

For written requests: Yeo Valley HQ, Rhodyate, Blagdon, Bristol BS40 7YE

1. 25. Full Address of the Data Controller : Yeo Valley HQ, Rhodyate, Blagdon, Bristol BS40 7YE