Henry's Honey Website Privacy Policy

PRIVACY POLICY

1. Who We Are

Henry's Honey (“we”, “us”, or “our”) is a small honey and apiculture business operating in the United Kingdom. We are the data controller responsible for your personal data collected through this website.

• Business Name: Henry's Honey

• Contact Email: privacy@henryshoney.uk 

• Postal Address: Sidbury House, Everleigh, Wiltshire, SN8 3EY

2. The Personal Data We Collect

Because our website is a static information site hosted via Google Sites, we collect minimal personal data.

• Direct Interactions: When you contact us via email using the address or email link provided on our website, we collect your email address, your name (if provided), and any personal details contained within your message.

• Technical & Usage Data: Our website is built on Google Sites. Google may automatically collect standard technical logs (such as IP addresses, browser types, and access times) to serve and secure the website infrastructure.

3. How and Why We Use Your Personal Data

We only process your personal data when we have a valid legal basis under UK Law:

We do not use your personal data for automated decision-making or profiling, nor do we build marketing mailing lists from general email inquiries unless you explicitly ask to join one.

4. Cookies and Analytical Tracking

Our website does not use advertising pixels, profiling cookies, or third-party analytics software (such as Google Analytics).

To deliver and protect our website, essential functional and security cookies are loaded automatically:

• Google Sites: Uses essential functional cookies strictly necessary for page layout, image rendering, and maintaining server sessions.

• Cloudflare: Uses essential security cookies (such as __cf_bm) to detect automated bot traffic, prevent malicious attacks, and route web requests efficiently.

Because these cookies are strictly necessary for the technical delivery and security of the website, user consent via a cookie banner is not legally required under UK PECR regulations

5. Sharing Your Personal Data

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We only share personal data with external service providers where strictly necessary:

• Service Providers: Google LLC (which hosts our website platform and manages our business email hosting via Google Workspace). Data managed by Google is handled securely in accordance with their strict privacy standards.

• Cloudflare, Inc.: Manages our Domain Name System (DNS), SSL encryption, and web security routing.

• Legal Requirements: If required to do so by UK law enforcement, tax authorities (HMRC), or regulatory bodies.

6. International Data Transfers

Our website host (Google) operates global infrastructure. Where your data is processed outside the UK, appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum to EU Standard Contractual Clauses) are in place to ensure your personal data receives the same level of protection as it does within the UK.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for—including satisfying any legal, accounting, or statutory reporting requirements.

• General Inquiry Emails: Retained for up to 12 months after our last communication to ensure we can resolve follow-up questions, after which they are deleted.

• Transaction Records: If an inquiry leads to a order or commercial transaction, relevant invoice and contact details are retained for 6 years following the end of the tax year to satisfy UK tax (HMRC) compliance.

8. Your Legal Rights

Under UK data protection laws, you have rights including:

• Access: The right to request copies of your personal data.

• Rectification: The right to ask us to rectify inaccurate or incomplete information.

• Erasure: The right to ask us to erase your personal data in certain circumstances.

• Restriction & Objection: The right to object to or restrict processing under certain conditions.

To exercise any of these rights, please contact us at privacy@henryshoney.uk. You do not need to pay a fee to access your data.

9. How to Complain

If you have any concerns about our use of your personal data, you can contact us directly using the details above so we can resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection issues:

• Website: www.ico.org.uk

• Helpline: 0303 123 1113