Privacy Policy
Northfield Grains Ltd is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you interact with us, including when you contact us, place orders, request information, or otherwise engage with our business operations in the cereal sector.
1. Introduction and company information
This Privacy Policy applies to personal data processed by Northfield Grains Ltd as the data controller.
- Company name: Northfield Grains Ltd
- Address: Northfield Grains, Unit 4, Moorfield Way, Kettering, Northamptonshire NN16 8NF, UK
- Email: [email protected]
- Phone: +44 1536 482 917
We operate in the cereal industry and may process personal data in connection with sales, supply, procurement, logistics, account management, customer service, website enquiries, and compliance with legal and regulatory obligations.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer or business name.
- Contact data: email address, telephone number, postal address.
- Business and transaction data: order details, delivery instructions, payment and invoicing information, purchase history, and communications regarding products or services.
- Technical data: IP address, browser type, device identifiers, log data, and website usage information.
- Communication data: enquiries, feedback, complaints, and correspondence with us.
- Compliance data: records needed for accounting, auditing, tax, fraud prevention, food safety, and legal compliance.
We collect personal data directly from you, from your employer or organisation, from our website or digital platforms, from our business partners and service providers, and from publicly available sources where appropriate and lawful.
Where necessary, we may also process personal data relating to customers, suppliers, transport and logistics contacts, and other business representatives.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and communicate with customers, suppliers, and business partners;
- to manage quotes, orders, deliveries, invoicing, and account administration;
- to provide cereal products and related services;
- to maintain business records and internal administration;
- to improve our website, services, and customer experience;
- to comply with legal obligations, including tax, accounting, food safety, and regulatory requirements;
- to protect our business, systems, staff, customers, and third parties from fraud, misuse, and security threats;
- to establish, exercise, or defend legal claims;
- to send relevant business communications where permitted by law.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the context, this may include:
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation;
- Legal obligation: where processing is required to comply with applicable law or regulation;
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms;
- Consent: where you have given us clear consent for a specific purpose, such as certain marketing communications or optional cookies, where applicable.
When we rely on legitimate interests, these may include operating and improving our business, managing customer and supplier relationships, preventing fraud, maintaining security, and protecting legal rights.
5. Data sharing and third parties
We may share personal data with the following categories of recipients where necessary and lawful:
- service providers acting on our behalf, such as IT support, hosting, cloud storage, communications, and analytics providers;
- professional advisers, including accountants, auditors, insurers, lawyers, and consultants;
- logistics, transport, delivery, and warehousing partners;
- payment processors and banking partners;
- regulatory authorities, government bodies, law enforcement, and courts where required by law;
- business partners, customers, or suppliers where needed to perform contracts or manage business operations;
- third parties involved in a corporate transaction, reorganisation, or transfer of business assets.
We require third parties processing personal data on our behalf to implement appropriate safeguards and to use the data only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it receives a level of protection that is substantially equivalent to that required under applicable data protection law. Such steps may include:
- transfers to countries recognised as providing adequate protection;
- standard contractual clauses or other approved transfer mechanisms;
- additional technical, organisational, or contractual safeguards where necessary.
Where relevant, you may contact us for further information about the safeguards used for international transfers.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including for the fulfilment of contractual obligations, legal compliance, dispute resolution, and enforcement of our agreements.
- customer, supplier, and transaction records are generally retained for the duration of the relationship and for a reasonable period thereafter;
- financial, tax, and accounting records are retained for the periods required by applicable law;
- enquiry and correspondence records are retained for as long as needed to manage the communication and any related follow-up;
- technical and website logs are retained for a limited period unless needed for security, investigation, or legal purposes.
When personal data is no longer required, we will securely delete or anonymise it.
8. User rights
Depending on applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request a copy of the personal data we hold about you;
- Rectification: the right to request correction of inaccurate or incomplete data;
- Erasure: the right to request deletion of personal data in certain circumstances;
- Restriction: the right to request restriction of processing in certain circumstances;
- Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and, where applicable, to have it transmitted to another controller;
- Objection: the right to object to processing based on legitimate interests and, in some cases, direct marketing.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
If you withdraw consent, we will stop processing the relevant data for the applicable purpose unless we have another lawful basis for continued processing.
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so that we may try to resolve the matter.
You may also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. In the UK, this is the Information Commissioner's Office (ICO).
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, system monitoring, backups, and regular review of our security practices.
While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You should also take care when communicating information to us electronically.
12. Contact information
If you have any questions about this Privacy Policy or our handling of personal data, please contact:
- Northfield Grains Ltd
- Address: Northfield Grains, Unit 4, Moorfield Way, Kettering, Northamptonshire NN16 8NF, UK
- Email: [email protected]
- Phone: +44 1536 482 917
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be published with an amended effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northfield Grains Ltd processes personal data.