Privacy Policy

Last updated: 10/01/2026

Farm Urban is committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains how personal information is collected, used, stored, and shared by Farm Urban.

This policy applies to: 

  • Farm Urban CIO (Charity registered in England and Wales - Charity No. 1183584) 

  • Farm Urban Ltd (Company registered in England and Wales - Company No. 08828403).

Together referred to in this policy as “Farm Urban”, “we”, “us”, or “our”.

1. Who we are

Farm Urban operates through a dual-entity structure:

  • Farm Urban CIO delivers charitable activities focused on research, education, and public benefit.

  • Farm Urban Ltd delivers innovation, consultancy, research delivery, and operational activity including food growing and vertical farming.

Both entities act as data controllers for the personal data they collect and process.

2. What personal data we collect

We may collect and process the following types of personal data:

  • Contact information: name, email address, postal address, phone number

  • Professional information: organisation, job title, role

  • Engagement information: event registrations, workshop participation, programme involvement

  • Communications: emails, enquiries, feedback, correspondence

  • Website data: IP address, browser type, pages visited, cookies (see Cookies section)

  • Research and evaluation data: responses to surveys, interviews, and evaluation activities (where applicable)

  • Financial data: donation records or payment details (processed securely via third-party providers)

We do not knowingly collect personal data relating to children without appropriate consent.

3. How we collect personal data

Personal data may be collected:

  • Directly from you (for example, when you contact us, sign up to a newsletter, attend an event, or take part in a programme)

  • Through our website and online forms

  • Via email, phone, or written correspondence

  • Through research, evaluation, or consultation activities

  • From trusted partners where appropriate and lawful

4. How we use your personal data

We use personal data to:

  • Deliver our charitable programmes, research, education, and events

  • Respond to enquiries and communicate with you

  • Manage relationships with funders, partners, suppliers, and collaborators

  • Administer donations, contracts, and agreements

  • Conduct research, monitoring, evaluation, and learning

  • Improve our website, services, and communications

  • Meet legal, regulatory, and governance obligations

We will only use your data where there is a lawful basis to do so.

5. Lawful bases for processing

Under UK GDPR, we rely on one or more of the following lawful bases:

  • Consent – where you have given clear permission

  • Contract – where processing is necessary for a contract or agreement

  • Legal obligation – where required by law

  • Legitimate interests – where processing is necessary for our legitimate interests and does not override your rights

  • Public task – where processing supports our charitable purposes and public benefit

6. Sharing your personal data

We do not sell your personal data.

We may share personal data with:

  • Staff, trustees, and directors where necessary

  • Trusted service providers (e.g. IT systems, event platforms, payment processors)

  • Research partners or evaluators (where appropriate and anonymised where possible)

  • Regulators or authorities where legally required

All third parties are required to handle data securely and lawfully.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements.

Retention periods are reviewed regularly and data is securely deleted when no longer required.

8. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure. These include secure systems, access controls, and data handling policies.

9. Your rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of your data (where applicable)

  • Object to or restrict processing

  • Withdraw consent at any time (where processing is based on consent)

  • Request data portability

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details below.

10. Cookies

Our website may use cookies to improve functionality and understand how visitors use our site. You can manage or disable cookies through your browser settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.

12. Contact us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Farm Urban
Email: info@farmurban.co.uk
Address: Farm Urban 401 Tower Street, L3 4BJ

You can also contact the Information Commissioner’s Office at www.ico.org.uk.