Last updated: May 2026  · 

We take your privacy seriously at Cross Bank Farm. This policy explains what personal information we collect when you use our website, buy from our shop, subscribe to eggs, book an experience, or get in touch — and what we do with it.

We will never sell your data, and we will never use it for anything other than what is described in this policy.

1. Who we are

The data controller for Cross Bank Farm is:

As a small business based in England, we operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect and why

We only collect information that is necessary for the purpose it is needed for.

When	What we collect	Why / Legal basis
You buy something from our shop	Name, delivery address, email, phone number, payment details (processed securely — see section 5)	To fulfil your order and process payment. Legal basis: contract.
You sign up for an egg subscription	Name, delivery address, email, phone number, payment details	To manage and fulfil your subscription. Legal basis: contract.
You book an experience day	Name, email, phone number, number in your party	To confirm and manage your booking. Legal basis: contract.
You contact us	Name, email, phone number (if provided), the content of your message	To respond to your enquiry. Legal basis: legitimate interests.
You visit our website	Anonymised usage data (pages visited, time on site, browser type) via Google Analytics	To understand how our website is used and improve it. Legal basis: legitimate interests / consent via cookies.

3. How we use your information

We use the information we collect to:

• Process and fulfil orders from our shop
• Manage egg subscriptions and arrange deliveries
• Confirm and manage experience day bookings
• Respond to questions, messages and enquiries
• Understand how our website is used so we can improve it
• Meet our legal obligations (for example, financial records)

We do not currently send marketing emails. If we introduce a newsletter in future, we will ask for your explicit consent before adding you to any mailing list.

4. Cookies

Our website uses cookies — small text files stored on your device. We use two types:

Essential cookies

These are necessary for the website to work — for example, keeping track of what is in your shopping basket. You cannot opt out of these without affecting how the site functions. These are set by Squarespace, our website platform.

Analytics cookies

We use Google Analytics to understand how visitors use our site — for example, which pages are most popular. This data is anonymised and does not identify you personally. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect how the website works.

5. Who we share your information with

We do not sell your data to anyone. We share it only with the trusted third-party services that help us run the website and process orders:

Squarespace

Our website is built on Squarespace, which hosts the site, processes orders and manages subscriptions. Their privacy policy is at squarespace.com/privacy.

Stripe

Payment card details are processed securely by Stripe via Squarespace Commerce. We never see or store your full card details. Stripe is PCI DSS compliant. Their privacy policy is at stripe.com/gb/privacy.

Google Analytics

We use Google Analytics to collect anonymised website usage data. Their privacy policy is at policies.google.com/privacy.

Facebook

We have a presence on Facebook and our website may interact with Facebook's tools. Facebook may collect data about your visit in accordance with their own privacy policy at facebook.com/privacy/policy.

We do not share your personal data with any other third parties unless required to do so by law.

6. How long we keep your information

• Order and subscription records — kept for 6 years for financial and tax purposes, in line with HMRC requirements
• Experience booking records — kept for 2 years after the booking date
• Contact enquiries — kept for 12 months, or longer if the enquiry leads to an ongoing relationship
• Website analytics data — kept for up to 26 months by Google Analytics

When data is no longer needed we delete it securely.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access — you can ask us for a copy of the personal data we hold about you
• The right to correction — you can ask us to correct any inaccurate or incomplete data
• The right to erasure — you can ask us to delete your data in certain circumstances
• The right to restrict processing — you can ask us to limit how we use your data
• The right to object — you can object to us processing your data where we rely on legitimate interests
• The right to data portability — you can ask us to provide your data in a transferable format

To exercise any of these rights, please contact us at info@crossbankfarm.co.uk or by calling 07518 377243. We will respond within one calendar month.

8. Keeping your data safe

We take reasonable steps to protect your personal data from unauthorised access, loss or misuse. Our website is hosted on Squarespace, which uses SSL encryption (the padlock you see in your browser). Payments are handled entirely by Stripe, which is fully PCI DSS compliant.

No method of transmission over the internet is 100% secure. While we do our best to protect your information, we cannot guarantee absolute security.

9. Links to other websites

Our website may contain links to other websites, for example Facebook or Instagram. This privacy policy only covers our own website. We are not responsible for the privacy practices of any third-party sites you visit via links from our site.

10. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page.

11. How to make a complaint

If you have a concern about how we have handled your personal data, please contact us first at info@crossbankfarm.co.uk and we will do our best to resolve it.

If you are not satisfied with our response, you have the right to complain to the UK's data protection regulator: