Upper Farm Henton

Privacy Policy

Last updated: July 2026

1. Who We Are

Mr G Collins & Mrs A Collins, trading as Upper Farm Henton (“we”, “us” or “our”), Upper Farm, Henton, Chinnor, Oxfordshire, OX39 4AQ, is the Data Controller responsible for your personal data.

We are committed to protecting your privacy and handling your personal data responsibly, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, please contact us:

By post: Upper Farm, Henton, Chinnor, Oxfordshire, OX39 4AQ
By email: privacy@upperfarmhenton.co.uk

2. What Personal Data We Collect

Depending on how you interact with us, we may collect and hold the following categories of personal data:

Contact and Identity Information

Name and title
Postal address
Email address
Telephone number

Booking and Transaction Information

Details of products or services purchased (holiday lets, fishing sessions, equestrian services)
Booking dates and duration of stay
Number of guests in your party
Special requests or requirements
Correspondence relating to your booking or query

Financial Information

Payment records (amounts paid, dates)

Please note: we do not store credit or debit card details. Card payments are processed directly and securely by our payments provider.

Marketing and Communications

Email newsletter subscription status
Marketing communication preferences

Website Usage Data

Pages visited, time spent on site, referring URL
Cookie identifiers and IP address

See Section 7 for more information about cookies.

User-Generated Content & Public Submissions

Catch Reports: Customer name, details of the catch (e.g., weight, species, date), and any photographs you submit to us.
Guest Reviews: Guest name, your written review, and any voluntary guest or accommodation photographs you choose to share with us.

3. How and Why We Use Your Personal Data

We process your personal data under the following lawful bases:

a) Contract Performance

To fulfil bookings, reservations, and service agreements — including processing payments, confirming reservations, and managing your stay or session. Without this data we cannot provide the services you have booked.

b) Legal Obligation

To comply with our legal obligations, including HMRC record-keeping requirements and VAT obligations.

c) Legitimate Interests

We process some data on the basis of our legitimate business interests, where those interests are not overridden by your rights. This includes:

Customer service and handling queries
Fraud prevention and security
Improving our services based on customer feedback
Retaining records in case of legal disputes during the applicable limitation period

d) Consent

We rely on your explicit, freely given consent to publish specific user-generated content on our public website. You provide this consent when you voluntarily submit content to us via our online submission forms.

Catch Reports: We process and publicly display your name, the details of your catch, and any accompanying photographs to showcase angling success and monitor fishery trends.
Guest Reviews: We process and publicly display your first name, the first letter of your surname, your written review text, and any voluntary accommodation or estate photographs you choose to share to help prospective guests.

Withdrawing your consent: Because this processing is based entirely on your consent, you have the absolute right to change your mind. If you want a catch report or a review removed from our website, simply email privacy@upperfarmhenton.co.uk with a link or description of the post, and we will take it down promptly (normally within 72 hours).

4. How Long We Keep Your Data

We will not keep your personal data for longer than is necessary for the purposes for which it was collected. Our standard retention periods are:

Booking and financial records: 6 years from the date of the transaction or stay, in line with HMRC record-keeping requirements and the Limitation Act 1980.
General enquiry correspondence (where no booking was made): 2 years from the date of last contact.
Marketing data (where consent was given): until you withdraw your consent or we determine the data is no longer current, with a review no less than every 3 years.
Website analytics and cookie data: in line with the retention periods set by our analytics provider (typically 13–26 months).

After the applicable retention period, your data will be securely deleted or anonymised.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with the following categories of third parties, only where necessary and always under confidentiality obligations:

Payment processors: to securely process card transactions.
Booking and property management systems: to manage reservations (e.g. Eviivo Suite, Wix, iBookfishing).
Email marketing providers: to send newsletters and communications to subscribers.
IT and website service providers: to maintain and operate our website and systems.
Feedback and review platforms: to invite customers to leave reviews.
Legal and professional advisers: where necessary to defend or pursue legal claims.
Regulatory authorities, law enforcement, or the courts: where we are required to do so by law.

If we sell or transfer part or all of our business, your data may be transferred to the prospective buyer under appropriate confidentiality terms.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 1.

Right of Access

You may request a copy of the personal data we hold about you (a “Subject Access Request”). We will respond within one month. There is no charge for this.

Right to Rectification

If any data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it.

Right to Erasure (“Right to Be Forgotten”)

You may ask us to delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent. Please note that we may be required to retain certain data for legal or financial compliance purposes (see Section 4), in which case we will inform you.

Right to Restrict Processing

In certain circumstances, you may ask us to limit how we use your data (for example, while a complaint is being investigated).

Right to Data Portability

Where processing is based on your consent or a contract and is carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on our legitimate interests, and to the use of your data for direct marketing (including profiling for marketing purposes). We will stop processing your data for marketing purposes immediately on receipt of such a request.

Opting Out of Marketing

You may unsubscribe from email marketing at any time by:

Clicking the “Unsubscribe” link at the bottom of any marketing email
Emailing us at privacy@upperfarmhenton.co.uk
Writing to us at the address in Section 1

Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

Website: www.ico.org.uk
Helpline: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, welcome the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

7. Data Storage and Security

Your personal data is stored on secure systems managed by us or on our behalf by reputable service providers. We implement appropriate technical and organisational security measures including:

Username and password authentication with two-factor authentication where available
Data encryption in transit and at rest where appropriate
Access controls limiting who can view your data

Please be aware that no method of internet transmission is completely secure. Whilst we take all reasonable steps to protect your data, we cannot guarantee absolute security of data transmitted to our website.

8. Cookies

Our website (www.upperfarmhenton.co.uk) uses cookies — small text files stored on your device — to help the site function and to understand how it is used.

Types of cookies we use:

Essential cookies: required for the website to function correctly.
Analytics cookies: help us understand how visitors use our site so we can improve it. This information is aggregated and anonymous.
Marketing cookies: used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

When you first visit our website, you will be asked to consent to non-essential cookies via our cookie banner. You may withdraw or change your consent at any time via the cookie settings link on our website.

You can also control cookies through your browser settings. For more information, visit www.allaboutcookies.org.

9. Third-Party Websites

Our website contains links to third-party websites. We are not responsible for the privacy practices of those sites and we encourage you to read their privacy policies before submitting any personal data to them.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated via our website. The date at the top of this document indicates when it was last updated.

Upper Farm Henton • Upper Farm, Henton, Chinnor, Oxfordshire, OX39 4AQ • privacy@upperfarmhenton.co.uk