Last updated: 12 Jan 2026 Harvyst respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal information when you use our website at harvyst.co.uk, place an order, work with us as a supplier, or interact with us in any way. If you have any questions, please contact us using the details at the end of this policy. 1. Who We Are Harvyst is an online marketplace and logistics platform connecting independent food producers with local customers through shared popup collection hubs. For the purposes of data protection law, Harvyst is the data controller of your personal data. 2. What Information We Collect We may collect and process the following types of personal information: a) Information you provide to us Name Email address Phone number Billing and delivery details Supplier business details Messages and enquiries you send to us Account registration information Feedback and survey responses b) Transaction and operational information Orders placed and order history Payment references (we do not store full card details) Collection attendance and fulfilment records Supplier onboarding and compliance information c) Photography and media Photographs and video captured at popup events, supplier premises, and promotional activity Images may include individuals (suppliers, founders, team members, customers with consent) and working environments We only capture and use imagery where we believe it is appropriate and respectful, and where consent or legitimate interest applies. d) Technical information IP address Browser type and device information Pages visited and interaction data Cookies and similar technologies 3. How We Use Your Information We use personal data to: Operate and improve the Harvyst platform Process orders and payments Coordinate collections and supplier fulfilment Communicate with customers and suppliers Provide customer support Send service updates and relevant communications Maintain safety, quality and compliance Create marketing materials and storytelling content (where appropriate) Analyse website performance and usage Meet legal and regulatory obligations We only use your data where we have a lawful basis to do so. 4. Lawful Bases for Processing Under UK GDPR, we rely on the following lawful bases: Contract – to provide our services and fulfil orders Legitimate interests – to operate and improve the platform, promote the service, prevent fraud, and grow the community Consent – for marketing communications or certain photography where required Legal obligation – for accounting, tax and regulatory compliance You may withdraw consent at any time where consent is used. 5. Who We Share Data With We may share personal data with trusted third parties where necessary, including: Payment processors Website hosting and infrastructure providers Email and communication platforms Analytics providers Professional advisors (accountants, legal) Delivery or logistics partners (if introduced later) We only share what is necessary and expect all partners to comply with data protection law. We never sell personal data. 6. Photography and Marketing Use Harvyst may use photography and video to tell the story of local food, suppliers and community popups. This may include: Supplier premises and production environments Founder and team portraits Event activity and collaboration moments Where individuals are identifiable, we aim to: Obtain consent where appropriate Use imagery respectfully and proportionately Honour reasonable requests for removal or limitation Suppliers may also have additional image permissions outlined in separate agreements. 7. How Long We Keep Data We retain personal data only for as long as necessary to: Provide services Meet legal obligations Resolve disputes Maintain records Retention periods vary depending on data type and legal requirements. 8. Your Rights You have the right to: Access your personal data Request correction of inaccurate data Request deletion of data (where applicable) Restrict or object to processing Request data portability Withdraw consent You can exercise these rights by contacting us. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). 9. Cookies We use cookies and similar technologies to operate and improve the website. Please see our Cookie Policy for details. 10. Data Security We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure. No system is completely secure, but we continually review our safeguards. 11. Changes to This Policy We may update this Privacy Policy occasionally. Any changes will be posted on this page with an updated date. 12. Contact Us If you have any questions or requests regarding your personal data, please contact: Harvyst hello@harvyst.co.uk