Privacy Policy

Last updated: 2026 · GDPR · Ireland / EU

Farm2You respects your privacy. This policy explains what personal data we process, why, and your rights under the EU General Data Protection Regulation (GDPR) and Irish law.

1. Who controls your data

Farm2You is the data controller for account, marketplace, and platform operations data. Individual farms may also process your contact details as independent controllers when fulfilling your order.

2. What we collect

• Account data: name, email, password hash, county, phone (optional), role (customer/farmer/admin).
• Order data: items purchased, fulfilment details, addresses, payment status, guest checkout contact details.
• Technical data: IP address, user agent, session/cookie identifiers, security logs.
• Communications: help-chat messages, notification preferences, support emails.
• Farmer data: farm profile, verification documents, payout-related records.

3. Why we process it (legal bases)

• Contract: to create your account, take orders, and provide the marketplace.
• Legitimate interests: security, fraud prevention, service improvement, and basic analytics of how the site is used.
• Consent: optional cookies/marketing where required; you can withdraw consent anytime.
• Legal obligation: tax, accounting, and regulatory record-keeping where applicable.

4. Sharing

• With Sellers whose products you buy (so they can fulfil the order).
• With payment processors (e.g. Stripe) to take payment.
• With hosting/email providers that process data on our instructions.
• With authorities if required by law.

We do not sell your personal data.

5. Where data is stored

Primary storage is intended for the EU (Ireland / AWS eu-west-1 when deployed on AWS). Some processors may transfer data outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).

6. Retention

We keep account and order records while your account is active and for a reasonable period afterwards for disputes, security, and legal retention. Soft-deleted records may be retained in backup systems for a limited time.

7. Your rights

You may request access, correction, erasure, restriction, portability, or object to certain processing. In Farm2You you can:

• Export your data from Account / Settings (GDPR export).
• Request account deletion (soft-delete) from Settings.
• Update profile and email (email changes require confirmation).

You can also complain to the Data Protection Commission (Ireland).

8. Children

Farm2You is not directed at children under 16. Do not create an account for a child without appropriate adult authority.

9. Contact

Privacy requests: use Settings, the help chat, or the published contact email for Farm2You.