Privacy Policy

FarmShopHub is the trading name of Cub's Den Ltd, a company registered in England & Wales (Company No. 04271749), whose registered office is c/o Barnbrook Sinclair, 30 St. Johns Road, Woking, Surrey, GU21 7SA. Cub's Den Ltd is the data controller for the personal data described in this policy, and is registered with the Information Commissioner's Office under registration reference C2037206.

For privacy questions or to exercise any of your rights, contact us at privacy@farmshophub.co.uk.

Information you give us

When you create an account we take your name and email address. When you place an order — whether you have an account or are checking out as a guest — we take the name, email and delivery or collection details needed to get your shopping to you. You can also save delivery addresses, mark favourite farm shops, and message farms directly (including photos or PDFs you attach). Farm managers give us their business details — addresses and contact information, co-manager emails, business registration and VAT numbers, and any accreditation or certification documents they want displayed or verified.

Information collected automatically

Like most websites we receive technical data such as your IP address, browser and device type, and which pages you visit. If you use the "near me" search, we ask your device for your approximate or precise location — only when you allow it, and you can withdraw that permission at any time. We never track your location in the background. Cookies and local storage entries are listed in full in the Cookie Policy.

Information from other services

Our payment provider, WorldPay, tells us whether a payment succeeded and gives us limited card details — the card brand, funding type and last four digits — so we can show you your order and manage refunds and recurring payments. If you sign in with Google, we receive your name and email address from Google to set up your account. We never receive or store your full card number or your Google password.

We only use your data for the purposes below, each tied to a lawful reason under the UK GDPR.

We do not ask for and do not set out to collect special category data — health, biometric, or similar sensitive information. If you volunteer something sensitive in an order note or a message to a farm (for example an allergy), we treat it carefully and only use it for that order or conversation.

The farm you order from receives your name, contact details and the delivery or collection information needed to fulfil your order — nothing more than a farm needs to hand over your shopping. Each farm is responsible for how it handles your data once it is in their hands. We also share data with WorldPay (payments), the couriers farms use to deliver orders, and the service that delivers our transactional emails. Google Analytics receives usage data only if you have consented — you can check or change this in cookie settings. We never sell your personal data.

Card payments are handled entirely by WorldPay. Your card details go straight to WorldPay and are never seen or stored by FarmShopHub. For recurring payments (product subscriptions and farm subscriptions), WorldPay keeps a secure token for your card and charges it on the agreed schedule — we hold only the limited card summary described above.

We only use your location to show you nearby farm shops and produce. If you prefer, you can set a postcode instead — or browse without any location at all. Your location choice is saved on your device (see the Cookie Policy), not on our servers, unless you place a delivery order that needs an address.

We keep personal data only as long as we need it. Account data is kept while your account is active. Order and payment records are kept for six years, the period HMRC requires for financial records. Messages between you and a farm are kept while the conversation is active. Farm accreditation documents are kept while the farm is listed. Anything you ask us to delete that we are not legally required to keep, we delete.

UK GDPR gives you rights over your personal data: to see it (access), to fix it (correction), to have it deleted (erasure), to limit how we use it (restriction), to object to uses based on our legitimate interests, and to receive a copy of it to take elsewhere (portability). Where we rely on your consent — such as analytics — you can withdraw it at any time without affecting what came before.

To use any of these rights, email privacy@farmshophub.co.uk. We will respond within one month and will not charge you, unless a request is unusually complex. We may need to verify who you are before handing over data — a security measure for your protection.

If you are unhappy with how we have handled your data, you can complain to us at privacy@farmshophub.co.uk or directly to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. Some of the services we rely on (for example, hosting and analytics) may process data outside the UK; where that happens we make sure protections such as the UK's international data transfer safeguards are in place.

Changes to this policy

If we change this policy we will update the date above and, for anything significant, let you know. Questions are always welcome at privacy@farmshophub.co.uk.