Privacy Notice

Date of last revision: January 2022


1.    Who we are and how to contact us

2.    What personal information we collect and why

3.    How we use your information

4.    How we will keep your information safe.

5.    What third parties will be involved.

6.    Third country transfers

7.    How long we will keep your data

8.    Your rights


The Privacy of Your Personal Information and Grow Your Own Potatoes (GYOP)

At Potato House Limited (PHL), we take the privacy and security of your personal information very seriously. We will never sell your data to third parties. How we use your information and take care of it is explained here.

  1. Who we are and how to contact us:

    The Grow Your Own Potatoes (GYOP) project is run by PHL. The information you provide will be held by PHL, we are a family farm involved in the breeding and production of seed potatoes for farmers and gardeners and you can find out more about us . If you have a query, you can contact Sue at E:  or T: 01382 320220. Alternatively, you can write to the Data Protection officer (DPO). Potato House Limited, 4 North Balloch, Alyth, PH11 8HG

  2. What personal information we collect and why:

    When you sign up for your schools growing kit, the personal information we collect will be your title, first name, surname, job title, contact telephone number and school mailing address and email address to enable us to administer the Grow Your Own Potato project.

  3. How we will use your personal information:

    We will use your personal information to post you your growing kit and enable us to keep you up to date with the project during the 14-week process. As well as notifying you by telephone if your school is a competition winner. We will also contact you to invite you to register for GYOP in future years.

    We may also use your personal information to ask for your feedback on the GYOP project, any changes we make or the resources we produce. We will do this in order to improve GYOP and our resources for your use.

  4. How we will keep your information safe:

    We ensure that there are appropriate technical controls in place to protect your personal information. For example, we use encryption and we store data within PHL’s secure network and cloud environment.

    Where we use third party suppliers or partners to process personal data we put a contract or data sharing agreement in place that sets out our expectations and requirements, especially regarding how they manage the personal data and fully comply with all applicable UK Data Protection legislation.

  5. What third parties will be involved:

    GYOP uses a third party email platform to send out our regular email updates during the programme. All our GYOP growing kits are fulfilled and dispatched by a specialist agency, who are licenced to handle live seed. These third parties will treat your personal information as fully confidential.

    We will never sell your personal information to third parties and we will not release your personal information to any companies outside PHL for their mailing or marketing purposes.

  6. Third country transfers:

    PHL's own systems and storage are within the European Economic Area (EEA).

  7. How long we will keep your data:

    While you are taking part in the GYOP project we will retain your personal information. You will still need to re-register each year to take part in the project and receive your growing kit. Once you stop participating, we will delete your details after 36 months.

  8. Your Rights:

    By law you have certain rights over your personal data that we hold – see guidance on your rights. You have the right to ask us to correct any errors, the right to ask for a copy of the personal data we hold about you, and the right to object (based on your specific situation) to
    PHL’s processing, and the right to erasure where the personal data is no longer necessary for the purpose it was originally collected. To enquire about exercising any of these rights please contact us via the Contact Us page. We may need to verify your identity before implementing your request.