Privacy Policy

This Privacy Policy explains how we collect, use and protect your information when you visit our website. We are committed to safeguarding your personal data and complying with UK GDPR and the Data Protection Act 2018.

By using this website, you agree to the terms of this policy.

1. Who We Are

We operate this website and are responsible for your personal data (referred to as “we”, “us” or “our”).

If you have any questions about this policy or your data, please contact us:

  • Email: info@yeabridgefarm.co.uk
  • Address: Yeabridge Farm Hideaway, Wigborough, South Petherton, Somerset, TA13 5LP

2. Information We Collect

2.1 Information you give us

  • Details submitted through contact forms (such as your name, email address, phone number and message).
  • Account registration details, where applicable.
  • Order or booking information, if relevant to this website.

2.2 Information collected automatically

When you visit our website, certain information is collected automatically by WordPress and our plugins. This may include:

  • IP address
  • Browser type and device information
  • Pages visited and links clicked
  • Referring website or source
  • Dates and times of access

2.3 Information from cookies

Our website uses cookies and similar technologies to:

  • Ensure the site functions correctly
  • Improve performance and loading speed
  • Provide usage statistics and analytics
  • Remember your preferences where applicable

You can control cookies through your browser settings. More detail is set out in the Cookie and Data Retention section below.

3. How We Use Your Information

We use your information for the following purposes:

  • To respond to enquiries submitted through contact forms.
  • To provide services you request, such as bookings or user accounts.
  • To improve the performance, layout and content of the website.
  • To monitor security and protect against malicious activity.
  • To analyse website traffic and visitor behaviour using tools such as Google Analytics via Site Kit.

We do not sell your personal data or share it with third parties for their own marketing purposes.

4. Plugins and Tools That May Process Data

Our site runs on WordPress and uses several plugins that may process limited personal data. These include:

Advanced Custom Fields (ACF and ACF Extended)

Used to manage custom fields inside WordPress. These plugins do not directly collect visitor data, but may store any information you submit through forms that use ACF fields.

Analytics and SEO (Beehive Pro, Site Kit by Google, SmartCrawl Pro)

These plugins connect to services such as Google Analytics and Google Search Console to provide anonymous or pseudonymised statistics about how the site is used. Data that may be processed includes IP addresses, device information and browsing behaviour. Google and similar providers handle this data under their own privacy policies.

Email Delivery (Post SMTP)

Post SMTP is used to send emails from the website, for example contact form confirmations and admin notifications. Email logs may include email addresses, IP addresses and message content.

Security (Wordfence Security, Security Optimizer)

Security plugins help protect the website from unauthorised access and attacks. They may log IP addresses, attempted logins and details of suspicious activity. This information is used for security and is not used for marketing.

Forms (WPForms)

If you submit a form through WPForms, the information you provide (such as name, email, phone number and message) may be stored securely in our WordPress database and sent to us by email so that we can respond.

Performance and Visual Tools (Speed Optimizer, Font Awesome, Coming Soon or Maintenance Mode, WPMU DEV tools, Yoast Duplicate Post)

These plugins help with performance, design, maintenance and content management. They do not normally collect identifiable personal data from visitors beyond what is required for the site to function.

5. Sharing Your Information

We may share your information with trusted third parties, but only when necessary, for example with:

  • Our website hosting provider.
  • Email and newsletter services, where used.
  • Analytics and security service providers such as Google and Wordfence.
  • Professional advisers where required by law.

We only share the minimum data necessary and always for a lawful reason, such as providing the service, running the website or meeting legal obligations.

6. Data Storage and Security

We take reasonable technical and organisational measures to protect your data, including:

  • Secure hosting and server configuration.
  • Use of HTTPS and SSL encryption.
  • Regular updates to WordPress, themes and plugins.
  • Limited access to admin areas and user accounts.

Your data may be stored within the UK or European Economic Area. Some third party providers, such as Google, may process data outside the UK. In these cases, appropriate safeguards are used, such as standard contractual clauses.

7. Data Retention

We keep your personal data only for as long as we reasonably need it. Typical retention periods are:

  • Contact form entries: up to 12 months after our last communication, unless a longer period is required for legal or contractual reasons.
  • Email logs: up to 12 months, depending on server and Post SMTP settings.
  • Analytics data: retained according to Google Analytics settings, which are usually between 14 and 50 months.
  • Security logs: normally between 30 days and 12 months, depending on the plugin configuration.
  • User accounts and order records: kept for as long as necessary to provide services, support accounting records and comply with legal obligations.

When data is no longer needed, it is deleted or anonymised.

8. Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website. We use cookies for the following purposes:

  • To operate core parts of the website.
  • To remember your preferences and settings.
  • To measure website traffic and performance.
  • To help maintain security and prevent abuse.

You can control or delete cookies using your browser settings. If you disable cookies, some parts of the site may not work correctly.

If required, we can provide a more detailed cookie list on request.

9. Your Rights

Under UK data protection law you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data, where there is no good reason for us to continue processing it.
  • Object to certain types of processing, such as direct marketing.
  • Request restriction of processing in some circumstances.
  • Request transfer of your data to you or another provider.
  • Withdraw consent where we rely on consent to process your data.

To exercise any of these rights, please contact us using the details in section 1.

10. External Links

Our website may contain links to other websites. We are not responsible for the content or privacy practices of those sites. We recommend that you read the privacy policies of any external websites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services or the way we process your data. Any updates will be posted on this page and will take effect as soon as they are published.

Please check this page regularly to stay informed about how we protect your information.