Privacy Policy

Northfield Grains Ltd is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you interact with us, including when you contact us, place orders, request information, or otherwise engage with our business operations in the cereal sector.

1. Introduction and company information

This Privacy Policy applies to personal data processed by Northfield Grains Ltd as the data controller.

We operate in the cereal industry and may process personal data in connection with sales, supply, procurement, logistics, account management, customer service, website enquiries, and compliance with legal and regulatory obligations.

2. Data collection and processing

We may collect and process the following categories of personal data:

We collect personal data directly from you, from your employer or organisation, from our website or digital platforms, from our business partners and service providers, and from publicly available sources where appropriate and lawful.

Where necessary, we may also process personal data relating to customers, suppliers, transport and logistics contacts, and other business representatives.

3. Purpose of data processing

We process personal data for the following purposes:

4. Legal basis for processing

We process personal data only where we have a lawful basis to do so. Depending on the context, this may include:

When we rely on legitimate interests, these may include operating and improving our business, managing customer and supplier relationships, preventing fraud, maintaining security, and protecting legal rights.

5. Data sharing and third parties

We may share personal data with the following categories of recipients where necessary and lawful:

We require third parties processing personal data on our behalf to implement appropriate safeguards and to use the data only in accordance with our instructions and applicable law.

6. Data transfer to third countries

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it receives a level of protection that is substantially equivalent to that required under applicable data protection law. Such steps may include:

Where relevant, you may contact us for further information about the safeguards used for international transfers.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including for the fulfilment of contractual obligations, legal compliance, dispute resolution, and enforcement of our agreements.

When personal data is no longer required, we will securely delete or anonymise it.

8. User rights

Depending on applicable law, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw consent, we will stop processing the relevant data for the applicable purpose unless we have another lawful basis for continued processing.

10. Right to complain

If you have concerns about how we process your personal data, we encourage you to contact us first so that we may try to resolve the matter.

You may also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. In the UK, this is the Information Commissioner's Office (ICO).

11. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, system monitoring, backups, and regular review of our security practices.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You should also take care when communicating information to us electronically.

12. Contact information

If you have any questions about this Privacy Policy or our handling of personal data, please contact:

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be published with an amended effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northfield Grains Ltd processes personal data.

7/14/2026 Home