Privacy Policy
This Privacy Policy explains how Honeypot Harvest Ltd collects, uses, discloses, stores, and protects personal data when you interact with our business, website, products, services, communications, and premises. This policy is written to provide a comprehensive and transparent summary of our data handling practices in connection with our beekeeping business.
1. Introduction and company information
Data controller: Honeypot Harvest Ltd
Registered and trading address: Honeypot Harvest, Unit 4, Mill Road Industrial Estate, Mill Road, Hailsham, East Sussex BN27 2RZ, UK
Email: [email protected]
Telephone: +44 1323 847 965
Honeypot Harvest Ltd is a beekeeping business that may process personal data in connection with honey sales, beekeeping services, customer enquiries, deliveries, supplier management, website use, marketing communications, events, and other business activities. We are committed to handling personal data lawfully, fairly, and transparently.
This Privacy Policy applies to personal data we collect from customers, prospective customers, suppliers, business contacts, website visitors, event attendees, job applicants, and other individuals whose data we process in the course of our operations.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, business name, job title, and similar identifiers.
- Contact data: address, email address, telephone number, delivery address, and billing address.
- Transaction data: details of purchases, orders, payments, invoices, refunds, and related communications.
- Communication data: messages, emails, call notes, enquiry details, complaint records, and feedback.
- Technical data: IP address, browser type, device information, operating system, website usage information, cookies, and similar technologies.
- Marketing data: preferences for receiving marketing from us and our communication preferences.
- Supplier and business data: bank details, contractual information, account details, and operational records.
- Employment and recruitment data: CVs, application forms, references, interview notes, and right-to-work information where relevant.
We typically collect personal data directly from you, for example when you place an order, submit an enquiry, sign up for updates, request a service, communicate with us, visit our premises, or otherwise interact with Honeypot Harvest Ltd. We may also receive personal data from third parties such as payment providers, delivery providers, professional advisers, business partners, public sources, and platforms used for marketing or website analytics.
Where we use cookies or similar technologies on our website, we may collect technical and usage information to improve functionality, understand website performance, and support security and analytics.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide information about our products and services;
- to process and fulfil orders, deliveries, returns, and refunds;
- to manage customer relationships and provide support;
- to issue invoices, maintain accounts, and process payments;
- to maintain supplier, contractor, and business partner relationships;
- to send service-related notices and administrative communications;
- to send marketing communications where permitted by law and where required, with your consent;
- to improve our website, products, services, customer experience, and operational efficiency;
- to carry out analytics, research, and business planning;
- to maintain security, prevent fraud, and protect our business, staff, customers, and systems;
- to comply with legal obligations, regulatory requirements, tax rules, and accounting obligations;
- to establish, exercise, or defend legal claims;
- to recruit and assess candidates for employment or engagement where applicable.
Because of the nature of our beekeeping business, we may also process information relating to site visits, delivery arrangements, access to premises, and operational communications necessary to manage goods, services, and safety-related matters.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Contract: processing necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: processing necessary to comply with laws and regulatory requirements, including tax, accounting, and record-keeping obligations.
- Legitimate interests: processing necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include business administration, fraud prevention, communications, service improvement, and security.
- Consent: where you have given us clear consent, for example for certain types of marketing communications or non-essential cookies, and you may withdraw that consent at any time.
- Vital interests: in rare cases, where processing is necessary to protect someone’s life or physical safety.
- Public task or official authority: where applicable, if processing is necessary for a task carried out in the public interest or under official authority.
Where we process special category data or criminal offence data, if ever applicable, we will only do so where an additional lawful condition under applicable law applies.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:
- Payment service providers to process payments and prevent fraud;
- Delivery and logistics providers to deliver products and manage shipping;
- IT and cloud service providers to host our website, email, data storage, and business systems;
- Professional advisers such as accountants, auditors, insurers, legal advisers, and consultants;
- Marketing and analytics providers to support communications, website performance, and audience insights;
- Government bodies, regulators, and law enforcement where disclosure is required or permitted by law;
- Business partners and contractors involved in the operation of our beekeeping, production, sales, and customer service activities.
We require third parties who process personal data on our behalf to do so only on our instructions, to use appropriate security measures, and to comply with applicable data protection obligations. We do not sell personal data.
6. Data transfer to third countries
Some of our third-party service providers may be located outside the United Kingdom. Where personal data is transferred to a country that does not provide the same level of data protection as the UK, we will take appropriate safeguards to protect the data. These may include standard contractual clauses, adequacy regulations, transfer risk assessments, and/or other legally recognized mechanisms.
Where required, we will ensure that international transfers are conducted in a manner consistent with applicable privacy laws and that your personal data remains protected.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, reporting, or dispute-resolution requirements.
Retention periods may vary depending on the type of data and the purpose of processing. In general:
- customer and transaction records are retained for the period required to manage the relationship and comply with tax and accounting obligations;
- enquiry and correspondence records are retained for a reasonable period to manage follow-up and service history;
- marketing preference records are retained until you unsubscribe or your consent is withdrawn, and for a limited period thereafter to record your preference;
- supplier and contract records are retained for the duration of the relationship and thereafter as required for legal, operational, or evidential purposes;
- recruitment records are retained for a period appropriate to the recruitment process and legal requirements.
When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices and legal obligations.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request that we restrict processing of your personal data in certain circumstances.
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
- Objection: the right to object to processing based on our legitimate interests or to direct marketing at any time.
These rights are not absolute and may be subject to exemptions, legal limitations, or conditions under applicable law. If you wish to exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal.
If you withdraw consent for marketing communications, we will stop sending such communications to you, although we may still send non-marketing service messages where necessary.
You may withdraw consent by contacting us at [email protected] or by using any unsubscribe mechanism included in our communications where available.
10. Right to complain
If you have concerns about how Honeypot Harvest Ltd handles your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant supervisory authority in the UK, which is the Information Commissioner’s Office (ICO), or with another applicable data protection authority if you are located outside the UK.
We would appreciate the opportunity to address your concerns directly before you approach a regulator, and we will respond to complaints in a timely and appropriate manner.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unlawful access, misuse, alteration, disclosure, or destruction. These measures may include access controls, password protection, role-based permissions, secure storage, staff confidentiality obligations, device security, and routine system maintenance.
While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is entirely secure. Accordingly, we cannot guarantee absolute security, but we continuously review and improve our safeguards to reduce risks.
Where relevant, our staff and contractors are trained to handle personal data appropriately and to report suspected data incidents promptly.
12. Contact information
If you have any questions about this Privacy Policy or about how Honeypot Harvest Ltd processes personal data, please contact us using the details below:
Honeypot Harvest Ltd
Honeypot Harvest, Unit 4, Mill Road Industrial Estate, Mill Road, Hailsham, East Sussex BN27 2RZ, UK
Email: [email protected]
Phone: +44 1323 847 965
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, legal requirements, technology, or data processing practices. Any updates will take effect when the revised policy is published on our website or otherwise made available to you.
We encourage you to review this Privacy Policy periodically to stay informed about how Honeypot Harvest Ltd protects your personal data. Where changes are material, we may provide additional notice where appropriate.
Last updated: 14 July 2026