Privacy Policy
Nidderdale Lavender Limited
Last updated: 16 October 2026
Introduction
Nidderdale Lavender Limited ("we", "us", "our") is committed to protecting and respecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, purchase our products, subscribe to our communications or otherwise interact with our business.
Our websites are:
- https://www.nidderdalelavender.com
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.
Data Controller: Nidderdale Lavender Limited
Location: Nidderdale, North Yorkshire, United Kingdom
Contact email: info@nidderdalelavender.com
Registered office: Bruce House Barn, Top Wath Rd, Pateley Bridge, HG35PG, United Kingdom
Information We Collect From You
We may collect and process the following categories of personal information.
Information you provide to us
This includes information you provide when you:
- Place an order through our online shop.
- Subscribe to our newsletter or Friends of Nidderdale Lavender communications.
- Contact us by email, telephone, website form or social media.
- Enquire about becoming a trade customer or stockist.
- Participate in promotions, competitions or surveys.
- Provide feedback or submit a customer enquiry.
The information collected may include your name, billing and delivery addresses, email address, telephone number, order details, company details and any other information you voluntarily provide.
Information collected automatically
When you visit our websites, we may collect certain technical information, including:
- Internet Protocol (IP) address.
- Browser type and version.
- Device type and operating system.
- Pages visited and products viewed.
- Date, time and duration of website visits.
- Website navigation and interaction information.
- Referral sources and general website usage information.
This information helps us maintain our websites, improve their performance and understand how visitors use our services.
Payment information
When you purchase products from our online shop, payments are processed through our authorised payment service providers.
We do not ordinarily receive or store your complete payment card details. Payment information is handled securely by the relevant payment processor.
Information from third parties
We may receive information from third parties involved in providing our services, including payment processors, delivery companies, website hosting providers and business management platforms.
We use this information only where necessary for legitimate business purposes and in accordance with applicable data protection legislation.
How We Use Your Personal Information
We use personal information only where we have a lawful basis for doing so.
These lawful bases may include:
- Contractual necessity: To process and fulfil orders, arrange deliveries and provide customer services.
- Legal obligations: To maintain appropriate financial, accounting and business records and comply with applicable laws.
- Legitimate interests: To operate and improve our business, respond to enquiries, prevent fraud and maintain website security, provided these interests do not override your rights.
- Consent: Where required, to send marketing communications or use non-essential cookies.
We may use your personal information to:
- Process, manage and deliver orders.
- Communicate with you about purchases and enquiries.
- Provide customer support.
- Manage customer and trade accounts.
- Respond to stockist and wholesale enquiries.
- Improve our products, services and websites.
- Send newsletters, product announcements and promotional information where permitted.
- Maintain financial records and meet our legal obligations.
- Protect our business and customers against fraudulent or unauthorised activity.
We will not use your personal information for purposes incompatible with those for which it was originally collected unless permitted by law.
Marketing Communications
If you subscribe to our newsletter or Friends of Nidderdale Lavender mailing list, we may contact you with information about our lavender farm, products, new collections, seasonal offers and other business developments.
We will only send electronic marketing communications where we have the necessary consent or another lawful permission to do so.
You may unsubscribe at any time by using the unsubscribe link in our emails or by contacting us directly.
We do not sell personal information to third parties for marketing purposes.
Cookies and Website Analytics
Our websites may use cookies and similar technologies to provide essential functionality, improve performance and understand how visitors interact with our content.
Cookies are small text files stored on your device when you visit a website.
We may use the following categories:
- Essential cookies: Necessary for website functionality, including shopping baskets, checkout processes and security.
- Analytics cookies: Help us understand website traffic and visitor behaviour.
- Preference cookies: Remember certain choices and website settings.
- Marketing cookies: May be used to measure the effectiveness of advertising and promotional activity.
Where required by law, we will request your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through our website's cookie controls, where available, or through your browser settings.
Disabling certain cookies may affect the functionality of our website.
Further information about the cookies we use may be provided in a separate Cookie Policy.
Sharing Your Personal Information
We respect your privacy and do not sell your personal information.
We may share personal information with trusted service providers where necessary to operate our business.
These may include:
- Zoho, which provides our e-commerce and business management systems.
- Payment processing providers.
- Delivery and courier companies.
- Website hosting and technical support providers.
- Professional advisers, including accountants and legal advisers.
- Email communication and marketing service providers.
These organisations may process personal information on our behalf or act as independent data controllers, depending on the services provided.
Where organisations process information on our behalf, we require appropriate data protection and security arrangements.
We may also disclose personal information where required by law, regulation or a lawful request from a public authority.
Where We Store Your Personal Information
Our business uses Zoho applications and services, including Zoho Commerce and other Zoho One business management applications, to manage aspects of our website, customer relationships, orders, inventory and financial records.
Personal information may be stored and processed by Zoho and other authorised service providers in accordance with their applicable privacy and security arrangements.
We take reasonable steps to ensure personal information is protected against unauthorised access, loss, misuse or disclosure.
Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place as required by applicable data protection legislation.
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and reporting obligations.
For example:
- Customer order and transaction records may be retained for the periods required by applicable tax and accounting legislation.
- Marketing subscription information will generally be retained until you unsubscribe or we no longer require it.
- Customer enquiries and correspondence will be retained only for as long as necessary for legitimate business purposes.
When information is no longer required, we will securely delete or anonymise it, unless continued retention is required by law.
Your Data Protection Rights
Under UK data protection legislation, you have certain rights concerning your personal information.
Depending on the circumstances, these include:
**Right of access:** You may request a copy of the personal information we hold about you.
**Right to rectification:** You may request correction of inaccurate or incomplete information.
**Right to erasure:** You may request deletion of your personal information where the relevant legal conditions apply.
**Right to restrict processing:** You may ask us to restrict how your information is processed in certain circumstances.
**Right to object:** You may object to processing based on legitimate interests and to the use of your personal information for direct marketing.
**Right to data portability:** You may request that certain personal information be provided in a structured, commonly used and machine-readable format.
**Right to withdraw consent:** Where processing is based on your consent, you may withdraw that consent at any time.
You may also have rights relating to decisions made solely by automated means.
To exercise any of these rights, please contact us at:
info@nidderdalelavender.com
We may ask you to verify your identity before responding to a request.
We will normally respond within one month, subject to any lawful extensions.
You will not normally be charged for exercising your rights, although a reasonable fee may apply in certain circumstances permitted by law.
Keeping Your Information Accurate
We aim to ensure that the personal information we hold is accurate and up to date.
Please contact us if your personal details change or if you believe any information we hold about you is incorrect.
Security of Your Information
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration or disclosure.
These measures may include secure website connections, controlled access to business systems and the use of established service providers with appropriate security arrangements.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Links to Other Websites
Our websites may contain links to external websites, social media platforms and third-party services.
These websites operate independently and may have their own privacy policies.
We encourage you to review their privacy policies before providing personal information.
We are not responsible for the privacy practices of external websites.
hanges to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, services or legal requirements.
Any changes will be published on this page with an updated revision date.
Where appropriate, we may also notify customers of significant changes by email or through our website.
Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, please contact:
Nidderdale Lavender Limited
Nidderdale, North Yorkshire
United Kingdom
Website: https://www.nidderdalelavender.com
Email: info@nidderdalelavender.com
Registered office: Bruce House Barn, Top Wath Rd, Pateley Bridge, HG35PG
Complaints
If you have concerns about how we process your personal information, please contact us first so that we can investigate and attempt to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent authority responsible for data protection.
Information Commissioner's Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
