Legal
Privacy Policy
Last updated: March 2026
1. Who we are
FarmExchange Ltd ("FarmExchange", "we", "us", "our") operates the website at farmexchange.co.uk and the FarmExchange platform. We are registered in England and Wales.
We are the data controller for the personal data we collect through this website. You can contact us at support@farmexchange.co.uk.
2. What data we collect
We collect and process the following categories of personal data:
- Account data: name, email address, phone number, county, farm name, and password (stored as a one-way hash).
- Listing data: information you provide when posting listings, including descriptions, prices, photos, and location (postcode and county).
- Enquiry data: messages sent between buyers and sellers through the platform.
- Usage data: pages visited, search terms, browser type, IP address, and device information collected automatically.
- Payment data: billing information processed by Stripe. We do not store full card numbers.
- Communications: emails you send us and any correspondence.
3. How we use your data
We use your personal data for the following purposes:
- To create and manage your account and provide the FarmExchange service.
- To display your listings to other users and facilitate enquiries.
- To send transactional emails (account verification, enquiry notifications, password resets).
- To process payments for boost features (featured listings and bumps).
- To improve and maintain the platform, and to prevent fraud and abuse.
- To send you service updates and, where you have consented, marketing communications.
- To comply with our legal obligations.
4. Lawful basis for processing
We rely on the following lawful bases under UK GDPR:
- Contract: processing necessary to provide the service you have signed up for.
- Legitimate interests: fraud prevention, platform security, and improving our service.
- Consent: marketing emails and non-essential cookies (you may withdraw consent at any time).
- Legal obligation: where we are required to process data by law.
5. Cookies
We use cookies and similar technologies to operate the platform and, with your consent, to analyse site usage. You can manage your cookie preferences using the banner shown on your first visit, or by clearing your browser cookies.
Essential cookies (required for login and security) cannot be disabled while using the service.
6. Who we share your data with
We do not sell your personal data. We share data only with:
- Other users: your name and listing information are visible to all site visitors. Your email is only shared when you choose to contact or be contacted via the platform.
- Service providers: Stripe (payments), Cloudinary (image hosting), Resend (email delivery), Railway (hosting), and Vercel (frontend hosting). Each is bound by a data processing agreement.
- Legal authorities: where required by law or court order.
7. Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
Listing data may be retained for up to 12 months after expiry for fraud prevention purposes.
8. Your rights
Under UK GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") in certain circumstances.
- Restrict processing of your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at support@farmexchange.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. International transfers
Some of our service providers are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place (such as UK Standard Contractual Clauses or adequacy decisions).
10. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email or by a prominent notice on the website. The date at the top of this page shows when it was last updated.
11. Contact us
For any privacy-related questions, contact our data protection team at support@farmexchange.co.uk or write to:
FarmExchange Ltd, Data Protection Team, England. For our registered address please email support@farmexchange.co.uk.