Privacy Policy

Introduction

Mayfield Alpacas ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (www.mayfieldalpacas.com), book one of our experiences, or otherwise interact with our services.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller

The data controller responsible for your personal data is:

Mayfield Alpacas Quicksaw Farm, Fulwood Lane, Ringinglow, Sheffield, S10 4LH United Kingdom Email: info@mayfieldalpacas.com Phone: 0114 263 0033

For data protection enquiries, please contact us via our Contact page.

What Personal Data We Collect

Information You Provide Directly

  • Name, email address, phone number, and postal address (via enquiry forms, contact forms, and the online booking process)
  • Booking details including the experience chosen, date and time, number of guests, and the names and ages of attendees where relevant
  • Dietary requirements, accessibility needs, or other special requests you choose to share
  • Information relating to children's birthday party bookings, including the birthday child's name and age
  • Any additional information you include in form messages or booking notes

Payment Information

  • When you book an experience, payment is processed by our third-party payment provider (Stripe). We do not store your full card details on our servers. We retain a transaction reference, the amount paid, and the last four digits of the card used for our records.

Information Collected Automatically

  • IP address (anonymised where possible)
  • Browser type and version, device type, operating system
  • Pages visited, time spent on pages, referring website
  • Cookie preferences and consent records

Information From Third-Party Sources

  • Google Reviews (publicly available business reviews displayed on our website)

How We Use Your Data

We use your personal data for the following purposes:

  • Processing and fulfilling bookings for our alpaca experiences, farm experiences, children's birthday parties, and other services (Lawful basis: Contract)
  • Sending booking confirmations, reminders, and pre-visit information by email (Lawful basis: Contract)
  • Responding to enquiries and general questions (Lawful basis: Legitimate interest / Consent)
  • Communicating with you about your booking, including changes, cancellations, or follow-up regarding your visit (Lawful basis: Contract)
  • Taking payment for experiences and managing refunds (Lawful basis: Contract)
  • Maintaining records for accounting, tax, and regulatory purposes (Lawful basis: Legal obligation)
  • Website analytics to understand visitor behaviour and improve our site (Lawful basis: Consent via cookie banner)
  • Protecting our website against spam and abuse via reCAPTCHA (Lawful basis: Legitimate interest)
  • Sending occasional marketing emails about our experiences, events, and the farm - only where you have opted in (Lawful basis: Consent)

We will never sell your personal data to third parties.

Cookies

Our website uses cookies to function properly and to analyse how visitors use the site. When you first visit, you will see a cookie consent banner where you can choose which types of cookies to allow.

Necessary Cookies Required for the website to function. These cannot be disabled. They include session management, security, and shopping/booking basket cookies needed to process your booking.

Analytics Cookies Help us understand how visitors use our website by collecting anonymous usage data. We use Google Analytics 4 and Google Tag Manager. These cookies are only loaded after you give consent.

Functional Cookies Enable enhanced features such as embedded videos, maps, and personalised content. These are only loaded after you give consent.

You can change your cookie preferences at any time by clicking the cookie settings button on our website. No tracking scripts run until you accept the relevant cookies via the cookie banner.

Third-Party Services

We use the following third-party services that may process your data:

Stripe - Payment processing for online bookings. Processes payment card details, billing address, and transaction information. Stripe is a PCI-DSS Level 1 certified payment processor. Privacy policy: stripe.com/privacy

Vercel (San Francisco, US) - Website hosting and delivery. Processes IP address and request logs. Privacy policy: vercel.com/legal/privacy-policy

Amazon CloudFront (AWS) - Content delivery network used to serve images and media files. Processes IP address and request logs. Privacy policy: aws.amazon.com/privacy

Google Analytics 4 - Website analytics (with consent only). Processes anonymised IP and browsing behaviour. Privacy policy: policies.google.com/privacy

Google Tag Manager - Tag management (with consent only). Processes browsing behaviour. Privacy policy: policies.google.com/privacy

Google reCAPTCHA - Spam and bot protection on forms. Processes IP address and browser behaviour. Privacy policy: policies.google.com/privacy

Google Maps - Interactive maps showing our location. Processes IP address. Privacy policy: policies.google.com/privacy

Google Reviews / Google Places - Display of publicly available business reviews. Privacy policy: policies.google.com/privacy

Google Services - Data Responsibility - For more information about how Google collects, uses, and shares data when we use their advertising and measurement services (including Google Ads, Google Analytics, Google Tag Manager, and remarketing), please visit Google's Business Data Responsibility Site: business.safety.google/privacy

Embedded content such as videos may set their own cookies when loaded. These are only loaded with your consent via functional cookies.

Website Development and Management

This website is developed and managed by ImDigital (im-digital.co.uk) on behalf of Mayfield Alpacas. ImDigital may access personal data solely for the purposes of website maintenance, security, and technical support. They do not use your data for any other purpose.

International Data Transfers

Some of our third-party service providers (Stripe, Vercel, AWS, Google) process data outside the United Kingdom. Where data is transferred internationally, it is protected by:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
  • The service provider's participation in recognised data protection frameworks
  • The UK's adequacy decisions for relevant countries

Data Retention

We retain personal data only for as long as necessary:

  • Booking records - 7 years from the date of the experience (for accounting and tax purposes)
  • Enquiry and contact form submissions - 2 years from submission
  • Marketing consent records - until you withdraw consent, plus 12 months
  • Cookie consent records - 12 months (then consent is re-requested)
  • Analytics data - As per Google Analytics retention settings (default 14 months)
  • Server/access logs - 30 days (managed by Vercel)

Your Rights

Under UK GDPR, you have the following rights:

  • Right of access - Request a copy of the personal data we hold about you
  • Right to rectification - Request correction of inaccurate or incomplete data
  • Right to erasure - Request deletion of your personal data (where there is no compelling reason to continue processing)
  • Right to restrict processing - Request that we limit how we use your data
  • Right to data portability - Request your data in a structured, machine-readable format
  • Right to object - Object to processing based on legitimate interests
  • Right to withdraw consent - Withdraw consent at any time (e.g. via the cookie settings button, the unsubscribe link in marketing emails, or by contacting us)

To exercise any of these rights, please contact us at info@mayfieldalpacas.com or via our Contact page. We will respond within one month of receiving your request.

Data Security

We take the security of your personal data seriously. Our website uses encrypted connections (HTTPS/TLS) and access controls are in place to limit who can access personal data. Payment information is handled directly by Stripe and never touches our servers in raw form. We regularly review our technical and organisational security measures.

Children's Privacy

Our website and online booking system are not directed at individuals under the age of 16. We do not knowingly collect personal data from children directly. Where bookings include children (for example, children's birthday parties or family experiences), we expect a parent or guardian to make the booking and provide any necessary information on the child's behalf. If you believe we have inadvertently collected data from a child without parental consent, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last reviewed" date. We encourage you to review this policy periodically.

Last reviewed: May 2026

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: ico.org.uk Helpline: 0303 123 1113