Legal

Privacy Policy

Last updated: 25 August 2026

1. Who We Are

Old Castle Farm Hives (“we”, “us”, “our”) is the data controller responsible for your personal data.

Old Castle Farm Hives
Old Castle Farm, Fairyland Road, Tonna, Neath, SA11 3QB
Telephone: 01639 645333 | 07973 890227
Email: info@oldcastlefarmhives.com
VAT Registration Number: 984292283

2. Scope of This Policy

This policy explains how we collect, use, disclose, and protect personal data when you use our website, create an account, make a purchase, contact us, sign up to our newsletter, leave a review, or submit custom clothing measurements.

3. What Data We Collect

We collect:

Account and Identity Data: Name, username, password (hashed), contact details (email, phone, billing/shipping address).
Order and Customer Service Data: Order details, delivery preferences, communications with us.
Custom Clothing Measurement Data: Body measurements and any notes you provide for custom-fit garments.
Marketing Preferences: Newsletter opt-in status and related preferences.
Reviews: Your name (or display name), email, review content.
Contact Form: Name, email, and message.
Technical Data: IP address, browser type, cookies, and usage data.

4. Why We Use Your Data and Legal Basis

We process your data for the following purposes:

To create and manage your account — This allows you to register, log in, and manage your details. Legal basis: Contract (to provide your account) and Legitimate Interests (security and fraud prevention).
To process and deliver your orders — Including payment, shipping, and returns. Legal basis: Contract and Legal Obligation (tax and accounting).
To fulfil custom clothing orders — We use your measurements to produce and deliver your garments and provide after-sales support. Legal basis: Contract and Legitimate Interests (repeat orders and support).
To respond to enquiries — Via contact forms, email, or phone. Legal basis: Legitimate Interests and Contract (where related to an order).
To publish and manage reviews — Legal basis: Legitimate Interests (helping customers make informed choices). Where you submit a product review, your chosen display name and review content may be published publicly on our website.
To send marketing emails — Only if you opt in. Legal basis: Consent (you can withdraw at any time).
To improve our website and services — Through analytics and performance monitoring. Legal basis: Consent where cookies or similar technologies are used.
To comply with legal obligations — Such as tax and accounting requirements.
To maintain security and prevent fraud — Legal basis: Legitimate Interests and Legal Obligation where applicable.

5. Email Marketing

We use Brevo as our email marketing platform. If you subscribe to our newsletter, your email address and preferences will be processed by Brevo. You can unsubscribe at any time via the link in our emails or by contacting us.

Brevo Privacy Policy: brevo.com/legal/privacypolicy

6. Payment Processing

Payments can be made by card, Apple Pay or Google Pay via our payment provider, Worldpay, or by direct bank transfer. We do not store or process your card details directly — Worldpay only sends us confirmation of payment status. For bank transfer payments, we retain the transaction reference and payment confirmation as part of your order record.

7. Cookies

We use cookies to enable website functionality, store shopping cart preferences, and, if you consent, provide analytics and marketing. You can manage your preferences via our cookie banner or browser settings. See our Cookies Policy below for details.

8. Data Sharing

We may share personal data with:

Website hosting and technical support providers.
Payment processors (including Worldpay).
Delivery and logistics providers.
Email marketing provider (Brevo).
Professional advisers, insurers and accountants.
Government authorities, regulators or law enforcement where required by law.
A potential purchaser of the business, subject to appropriate confidentiality obligations.

9. International Transfers

If data is processed outside the UK/EEA, we use lawful safeguards such as Standard Contractual Clauses and the UK Addendum.

10. Data Retention

Account data: While your account remains active and for as long as required to comply with legal, accounting and tax obligations.
Order records: 6 years (UK tax law).
Custom measurements: Retained for your ongoing relationship and typically deleted after 3 years of inactivity or sooner on request.
Contact enquiries: 24 months.
Marketing data: Until you withdraw consent.
Reviews: Until removed on request.

11. Your Rights

You have the right to:

Access, correct, or delete your data.
Withdraw consent for marketing.
Request data portability.
Object to processing.
Restrict processing in certain cases.

12. Customer Accounts

You can create an account or checkout as a guest. Account deletion is available on request.

13. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is completely secure.

14. Changes

We may update this policy and will post changes here.

Cookies Policy

Last updated: 25 August 2026

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function properly, improve user experience, and provide information to site owners. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (stored until they expire or you delete them).

How We Use Cookies

We use cookies for the following purposes:

Essential Cookies

These are necessary for the website to function, such as enabling secure login, remembering your shopping cart, and preventing fraudulent use of accounts.

Analytics Cookies

These help us understand how visitors use our website so we can improve performance and user experience. We only use these cookies if you consent.

Marketing Cookies

These are used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These cookies are only set if you consent.

Third-Party Cookies

In addition to our own cookies, we may use third-party cookies from trusted providers for analytics and marketing purposes. Examples include:

Google Analytics (website usage statistics)
Brevo (email marketing performance tracking)

Each third-party provider has its own privacy policy. Please review their policies for more details.

Your Choices

You can manage your cookie preferences at any time:

Via our Cookie Banner: Non-essential cookies will only be set if you opt in.
Via your browser settings: You can delete cookies or block them entirely. Please note that blocking essential cookies may affect site functionality.

Retention

Cookies remain on your device for varying periods:

Session cookies: Deleted when you close your browser.
Persistent cookies: Typically last between 30 days and 12 months, depending on their purpose.

More Information

For more details about cookies and how to manage them, visit:

AllAboutCookies: allaboutcookies.org
Network Advertising Initiative: networkadvertising.org

Privacy and your personal information