Cholderton Rare Breeds Farm Privacy Policy

 

 

PRIVACY NOTICE FOR CHOLDERTON RARE BREEDS FARM LLP (CRBF)

INTRODUCTION

At CRBF, we value your trust when sharing your personal data with us and recognise that you may be concerned about the information provided to us and about how we handle that information.

If you are reading this Privacy Policy it is because you may have visited a Website, a Mobile App or any other place within any Social Media (all of them referred to hereinafter as "Sites") operated by any of the European entities of Cholderton Rare Breeds Farm Group ("CRBF" or "us" or "we") or, because you may have contacted us directly by phone or in writing.

This Privacy Policy sets out (in full transparency and in accordance with applicable laws and regulations, especially the General Data Protection Regulation - Regulation (EU) 2016/679- "GDPR"), the basis on which we process your Personal Data ("Personal Data") when you access our Sites or contact us.

SPEED READ ON KEY CRBF DATA PROCESSING 

CRBF collects and uses Personal Data which you provide or which we collect about you when you navigate through our Sites for the purposes of advertising, supplying you with our products and services, making contact with you for marketing or other commercial purposes, answering your enquiries regarding our products, facilitating your participation in our offers and promotions, analysing and improving the quality of our products or services.

Your access to and use of our Sites is subject to the terms and conditions of our Privacy Policy and all applicable laws. Your Personal Data processing will be limited to what it is necessary in relation to the purposes abovementioned. We will be collecting your expressed consent only where necessary by opt-ins so that you exert full control on the information we process and hold about you. Otherwise, we will only process your Personal Data if necessary for the performance of a contract with you, for compliance with a legal obligation of CRBF and/or for the purposes of legitimate interests of CRBF.

We may change this Privacy Policy from time to time by posting the updated version of the Privacy Policy on our Sites. We will inform of any material change so that you can fully understand the changes that are actually implemented. Please visit frequently this Privacy Policy to stay informed about how we use your personal data.

This Privacy Notice is dated 6/5/2019.

WHAT PERSONAL DATA DO WE COLLECT FROM YOU?

The type of information and Personal Data that we collect about you when you visit our Sites or interact with us may include the following:

Personal details provided by you - such as your name, postal address and other contact details, such as your telephone number and email address, your requests, any complaints you may have and any other data we receive if we communicate with you via email, online or via social media, and any other information you provide - for example, when you register with our Sites, sign up for our newsletters, participate in our offers and promotions, provide customer feedback, reply to surveys or purchase our products or services;

Payment information - including data to make purchases, such as your payment account details, credit card and debit card numbers, expiration date, shipping and billing address;

Account login information - including any information that is required for you to establish a user account, such as user name, password and security question and answer;

Information collected automatically - including information about your computer, IP address, and browser, that we may collect, for example, when we use in our Sites our own cookies or cookies owned by 3rd parties, web beacons and similar technologies that collect information about your use of our Sites or about your interaction with us by emails. See our Cookie Policy for further information.

WHY DO WE COLLECT YOUR PERSONAL DATA?

We collect and use your Personal Data for the purposes below and on lawful basis. Please know that insofar we already hold information about you, we may use that information for the same purposes.

For legitimate commercial interests: we may use your Personal Data (both on an aggregated and on an individual basis), such as your contact details, your account and electronic identification data, information regarding your purchases in our facilities and online, for the purpose of advertising and for analysing and improving the quality of our products or services, as well as, to understand you as a customer.

This also means that we may analyse the information that you provide to us together with your use of our Sites or of our products and services and we use all this information to improve the same and to give you a better user experience (for example, we may analyse what web pages you visit, which products and services you use and like, how you use these products and services).

We may also use your Personal Data, for legitimate commercial interests such as, to generate aggregated statistics about the users of our products and services; to assist in security and fraud prevention; for system integrity purposes; to remind you per email of your abandoned cart or send you an order confirmation; to facilitate our business operations, to operate company policies and procedures; to enable us to make corporate transactions, such as any merger, sale, reorganization, transfer of CRBF's assets or businesses, acquisition, bankruptcy, or similar event; and for other legitimate business purposes permitted by applicable law, on which we would provide the relevant information at the time.

For the performance of the terms and conditions of a contract: to purchase our products or services or to develop a contest, competition or promotion in which you may have entered, to conduct the promotion and contact to you if you became a winner, to be able to answer to any information request performed by email marketing@choldertoncharliesfarm.com

We may also use your information based on your consent, where granted, for instance for marketing purposes and for tailoring our communications with you based on your profiles via email, SMS, other electronic means or otherwise. You can withdraw your consent any time; see below. 

To comply with our legal obligations, such as maintaining appropriate business records, handling complaints made to our customer service, complying with lawful requests by public authorities and with applicable laws and regulations or as otherwise required by law.

HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We will only retain your Personal Data for as long as it is necessary to satisfy the purpose for which it was provided by you or collected by us (for example, for the time necessary for us to answer queries or resolve problems).

We may therefore retain your Personal Data for a reasonable period after your last interaction with us. When the Personal Data that we collect is no longer required in this way, we destroy or delete it in a secure manner. We may, instead of destroying or erasing your Personal Data, make it anonymous so that it cannot be associated with or tracked back to you. In certain cases, we may have legal or regulatory obligations that require us to retain specific records for a set period of time.

WHO MIGHT WE SHARE YOUR PERSONAL DATA WITH? 

We may share your Personal Data with:

CRBF entities. Your Personal Data could be shared between the responsible CRBF companies that may use your Personal Data as described in this Privacy Policy.

Service Providers and Processors. We may engage third party vendors, agents, service providers, and affiliated entities to provide services to us on our behalf, such as support for the internal operations of our websites, Mobile Apps or online stores (including social media services providers, payment processors, brand activation agencies, data analytics providers and third parties we use for sending your orders to your home address, such as postal courier vendors) or for the technical processing (for example, hosting services or data storage) or for customer relationship management services, as well as related offline product or promotional support services, (for example, competitions, sweepstakes and contests organizers, winner draws providers, events management agencies, prize or compensation packages vendors) and, other related services.

In providing their services, they may access, receive, maintain or otherwise process Personal Data on our behalf. Our contracts with these service providers do not permit use of your information for their own purposes, including their marketing purposes. Consistent with applicable legal requirements, we take commercially reasonable steps to require third parties to adequately safeguard your Personal Data and only process it in accordance with our instructions.

Partners. We may sometimes offer you a service or application in co-operation with partners (for example, co-sponsors or licensors, licensees or distributors of our branded products). We may therefore need to disclose your Personal Data to those partners. Consistent with applicable legal requirements, we take commercially reasonable steps to require third parties to adequately safeguard your Personal Data and only process it in accordance with our instructions or as co-controllers. In those cases in which the disclosure of your Personal Data with third partners takes place based on your consent or your request to do so, where relevant, we will clearly notify you of the sharing, and you will have the choice not to participate or to otherwise object to such sharing.

Third parties in case of legal requirement. We may also disclose your Personal Data if we believe we are required to do so by law, or that doing so is reasonably necessary to comply with legal processes; when we believe necessary or appropriate to disclose Personal Data to law enforcement authorities, such as to investigate actual or suspected fraud or violations of law, breaches of security, or breaches of this Privacy Policy; to respond to any claims against us; and, to protect the rights, property, or personal safety of CRBF, our customers, or the public.

Third Parties in case of a corporate transaction. In addition, information about our customers, including Personal Data, may be disclosed as part of any merger, sale, reorganization, transfer of CRBF's assets or businesses, acquisition, bankruptcy, or similar event.

WHAT WE DO WITH YOUR PERSONAL DATA:

In order to purchase tickets and related services through our CRBF website, you must provide us with certain information such as your name, your payment information (including debit or credit card number and expirations dates, and your billing address), your telephone number, your email address and your residential address.

We need this information for many reasons, including:

Personal identification

To complete your booking/reservation(s) and also to confirm your booking to you

To allow us to contact you for customer service purposes (if necessary)

To make improvements to our CRBF site.

To send marketing communications, updates, special offers, new CRBF events, products or services and other relevant information if you have opted in to receive these. You may choose to opt-out of receiving these types of email communications at any time by emailing marketing@choldertoncharliesfarm.com

Your Personal Information will also be used by us in order to facilitate delivery of your tickets by email.

Your Personal Data is used by us to contact you by post, telephone or email when necessary in connection with transactions entered in to by you on our CRBF website. We may retain your Personal Data for a reasonable period after your last interaction with us, and when your Personal Data is no longer required, we will destroy or delete it in a secure manner, or anonymise it so that it cannot be associated or tracked back to you.

We sometimes have to share your Personal Data with third parties to undertake the abovementioned business activities. When we do so, we always confirm that they meet our security standards. Examples of such sharing are:

We use a third party ticketing company, DigiTickets, to fulfill your ticket purchase. We will disclose your name, billing address, residential address, email address, telephone number and payment details to this company, and they will only retain, store or use your Personal Data for the purpose of billing for the tickets.

Additionally, your Personal Data may be retained, stored and used by a third party, Mailchimp, to send out marketing communications on our behalf if you have opted in to receive them, up until a point that you opt out.

We also collect anonymous 'click-through' data from our website in a log file that helps us develop a picture of users of our website. This data is not linked to any personally-identifiable information. We use it only for broad statistical purposes. For information about how we use cookies on this website, please read our Cookie Policy.

In addition to the circumstances described above, we may disclose your Personal Information if required to do so by law, court order, as requested by other government or law enforcement authority, or in good faith belief that disclosure is necessary or advisable including, without limitation, to protect the rights or properties of CRBF or its affiliated companies or where we have reason to believe that disclosing the information is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone could be harmed by these activities.

HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?

We use a variety of physical, technical and administrative security standards, technologies and procedures to help protect your Personal Data from loss, misuse, alteration, destruction or damage to an appropriate level depending on the sensitivity of the information.

We take steps to limit access to your Personal Data to those persons who need to have access to it for one of the purposes listed in this Privacy Policy. Furthermore, we contractually ensure that any third party processing your Personal Data equally provide for confidentiality and integrity of your data in a secure way.

WHAT RIGHTS DO YOU HAVE REGARDING THE PERSONAL DATA WE HOLD ABOUT YOU?

You have the following rights:

to obtain a copy of your Personal Data together with information about how and on what basis that Personal Data is processed;

to rectify inaccurate Personal Data (including the right to have incomplete Personal Data completed);

to erase your Personal Data in limited circumstances where it is no longer necessary in relation to the purposes for which it was collected or processed;

to restrict processing of your Personal Data where:

the accuracy of the Personal Data is contested;

the processing is unlawful, but you object to the erasure of the Personal Data;

we no longer require the Personal Data for the purposes for which it was collected, but it is required for the establishment, exercise or defense of a legal claim;

you challenge the processing which is justified on the basis of a legitimate interest;

to object to decisions which are based solely on automated processing, including profiling;

to receive a portable copy of your Personal Data, or to have a copy transferred to a third party controller where technically feasible and this does not involve unreasonable costs;

In case you may have a complaint about how we process your Personal Data, you can send it by emailing marketing@choldertoncharliesfarm.com

Alternatively, you have the right to lodge a complaint with the supervisory data protection authority.

If you have any question regarding the processing of your Personal Data, this Privacy Policy or if you wish to exercise any of the above mentioned rights, please contact us either you can send it by emailing marketing@choldertoncharliesfarm.com. Whenever reasonably possible and required, we will strive to grant your rights within one month.

You may revoke your consent for receiving newsletter or marketing communications at any time, free of charge by following the instructions in any marketing communication.

SOCIAL MEDIA AND OTHER WEBSITES

When you participate in any of our CRBF profiles or wherever CRBF is present in any of the various social media forums like Facebook, Twitter, Instagram, Youtube, etc., you should be familiar with and understand the tools provided by those sites that allow you to make choices about how you share the Personal Data in your social media profile(s).

For these forums the privacy practices or policies of these third parties apply, so we encourage you to read the applicable privacy notices, terms of use and related information about how your Personal Data is used in these social media environments.

Subsequently our Sites may contain links to third-party websites; if you follow these links, you will exit our websites and mobile applications. While these third-party websites are selected with care, CRBF cannot accept liability for the use of your Personal Data by these organisations. For more information and details, please consult the Section Data Privacy Notices of third parties and the privacy statement of the website you are visiting (if such a statement is provided).

HOW DO WE PROCESS CHILDREN'S PERSONAL DATA?

In general terms, our Sites are not intended to Children under 18 years old. Above that age, as we take the protection of children's privacy seriously, we operate our Sites in compliance with all applicable law in each corresponding Jurisdiction. Any time children under the age of 16 years old or below, as per the appropriate applicable law for each Site, should have a parent/guardian's consent before providing any Personal Data to us to the website. If we determine upon collection that a user is under said age and has not provided a parent/guardian's consent before providing any Personal Data, we will not use or maintain his/her Personal Data without the parent/guardian's consent. Without such consent, though, the child may not be able to participate in certain activities. However, in certain circumstances, we may maintain and use such information (in accordance with the rest of this Notice and applicable law) in order to notify and obtain consent from the parent/guardian and for certain safety, security, liability and other purposes permitted under applicable law. A parent/ guardian can review, remove, change or refuse further collection or use of their child's Personal Data by contacting us by emailing marketing@choldertoncharliesfarm.com, including child's name, address and e-mail address.

 

 

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026