Privacy Policy

Last updated: January 2025

INTRODUCTION

Direct2Farms (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard the information you provide when using our platform.
By accessing or using Direct2Farms, you agree to this Privacy Policy.

THE DATA WE COLLECT

We may collect the following information:

  • Account Information
    • Name
    • Email address
    • Phone number
    • Password (encrypted)
    • Address (optional for buyers, required for farmers)
  • Order Information
    • Products purchased
    • Payment confirmations
    • Delivery/collection details (provided by the farmer)
    • Communication between buyers and farmers
  • Payment Information
    • Payments are processed by Stripe
    • We do not store or access your card details
    • Stripe may collect:
      • Card information
      • Billing address
      • Transaction history
      • Fraud prevention data
  • Device & Usage Data
    • IP address
    • Device type
    • Browser type
    • Pages visited
    • Session duration
    • Cookies for login, security, and analytics

HOW WE USE YOUR DATA

We use your information to:

  • Create and manage your account
  • Facilitate purchases between buyers and farmers
  • Process payments via Stripe
  • Display listings and marketplace content
  • Improve user experience and site performance
  • Prevent fraud and maintain platform security
  • Communicate updates, confirmations, and support messages

LEGAL BASIS FOR PROCESSING

We process personal data under:

  • Contract (to operate the marketplace)
  • Legitimate interest (security, fraud prevention, improving services)
  • Consent (email marketing, optional features)
  • Legal obligation (accounting and compliance)

DISCLOSURE OF YOUR DATA

We may share limited data with:

  • Farmers
    • When you place an order, the farmer receives your name and order details
    • Delivery/collection details are shared based on your selection
  • Payment Provider (Stripe)
    • To securely process transactions
  • Service Providers
    • Hosting providers
    • Mapping services
    • Analytics tools

We do not sell your data to third parties.

DATA RETENTION

We retain:

  • Account data while your account is active
  • Order records for legal and accounting requirements
  • Deleted accounts are anonymised or securely removed

YOUR RIGHTS
Under UK GDPR, you have the right to:

  • Access your data
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to certain uses
  • Request data portability

To exercise your rights, email: direct2farms@gmail.com

COOKIES

Direct2Farms uses cookies for:

  • Login functionality
  • Security
  • User preferences
  • Basic analytics

You can control cookies through your browser settings.

DATA SECURITY

We use appropriate technical and organisational measures to protect your data, including:

  • Encrypted passwords
  • HTTPS secure connection
  • Stripe PCI-compliant payment processing
  • Server-level security and monitoring

CHILDREN

Direct2Farms is not intended for users under 16 years of age. We do not knowingly collect data from children.

CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Continued use of the platform indicates acceptance of the updated policy.

CONTACT

For privacy-related questions: direct2farms@gmail.com