Illustrated lily pads and a pink flower with ripples on calm dark blue water
Home / Privacy Policy

Legal

Privacy policy

How Ornamental Fish Farm Limited looks after your details, in plain English. Last updated 29 September 2026.

Email us about your data↗Read our cookie policy↗

Fornham All Saints, just off the A14 near Bury St Edmunds. Open seven days.

The short version

The short version

We only collect what we need to answer your enquiry.
We don't keep customer records or a mailing list. What we hold is emails, notes from phone calls and CCTV footage from the shop.
We don't sell your details, and we don't use them for marketing.
This website uses essential cookies only: no analytics, no advertising and no tracking.
You can ask to see, correct or delete your details whenever you like.
This policy was last updated on 29 September 2026.

Who we are

Who we are

This website is run by Ornamental Fish Farm Limited, a company registered in England and Wales, company number 08845741. We trade as Ornamental Fish Farm Pet & Reptile from Tut Hill, Fornham All Saints, Bury St Edmunds, Suffolk, IP28 6LE. Our registered office is shown on the Companies House register.

For data protection law we are the controller of the personal data described on this page. That means we decide how and why it is used. We are registered with the Information Commissioner's Office (ICO). You can reach us by email at ornamentalff@gmail.com or by phone on 01284 703418.

This policy covers this website, the enquiries we receive by form, email and phone, and the CCTV we run in the shop. If we ever collect your information in another way, we will tell you at the time.

Your data

What we collect and why

Here is everything we collect, and what we do with it.

What we collectWhy we use itWhere it comes from
Enquiry form: your name, email address, phone number (optional), what you are interested in and your messageTo read and answer your enquiry, and to keep a record of itYou, when you send the form
Emails and calls: your contact details, whatever you tell us, and any notes we make of a phone callTo reply to you and deal with what you asked, such as calling you back when something you wanted comes inYou, when you get in touch
CCTV in the shop: images of you if you visitTo keep customers, staff and the animals safe, and to prevent and detect crimeOur cameras, when you visit the shop
Technical details: your IP address, browser and device type, and the pages you ask forTo deliver the website and keep it secureYour browser, when it loads a page
Essential cookiesTo keep the website working securelyYour browser (see our cookie policy)

You don't have to use the form. You can phone or email us instead. If you don't give us a name and a way to reach you, we may not be able to reply.

We do not take payments on this website, and we do not use analytics or advertising tools. Please don't put sensitive information, such as health details, in your message. We don't need it to answer you.

The law

Our legal bases for using your details

UK GDPR says we need a valid reason, called a legal basis, to use your personal data. Ours are:

Legitimate interests. We use your details to answer your enquiry, to keep the website secure and running, and, through CCTV, to keep the shop and the people and animals in it safe. That is what you would expect when you contact or visit a business, and we have weighed it against your rights. You can object at any time.
Contract. If your enquiry is about buying or ordering something, we use your details to take the steps you ask for before we agree a sale.
Legal obligation. If the law says we must keep or share a record, we will.
Consent. We do not rely on consent for the enquiry form. If we ever wanted to send marketing emails or use non-essential cookies, we would ask you first.

Sharing

Who we share your details with

We don't sell your personal data. We share it only where we need to:

Webflow, Inc. hosts this website and handles the enquiry form for us. It is our processor, which means it can only use your details on our instructions.
Our email provider. Your enquiry reaches us by email. Our email account is a Gmail account, so Google handles the messages we send and receive.
Advisers and authorities. Our accountants, insurers or lawyers if we need their help, and the police, courts or regulators if the law requires it, which for CCTV can include sharing footage of an incident.

Webflow and Google are US companies, so your details may be transferred outside the UK. Where that happens, we rely on a safeguard that UK law recognises, such as approved standard contractual clauses or the UK-US data bridge.

Our pages link to Facebook, Instagram and Google Maps. Those links take you to their sites, and we don't send them your details. We do not embed their content or maps on our pages. Once you click through, their own privacy policies apply.

Retention

How long we keep your details

We keep your details only as long as we need them. We don't keep customer records or a mailing list, and we never use enquiries for marketing.

Enquiries (form, email, phone messages and notes from calls): up to 12 months after we last dealt with you, then we delete them.
Ongoing matters: if your enquiry turns into something longer, such as an order or a complaint, we keep the records for as long as that needs, and for any period the law requires.
CCTV: recordings are kept for a short time and then overwritten, unless we need to keep footage of a particular incident.
Technical details: held by our website host for a limited time, under its own settings.

Your rights

Your rights

Under UK data protection law, you have the right to:

See your data and get a copy (access).
Correct anything that is wrong or incomplete.
Delete your data, in some situations.
Restrict how we use it, in some situations.
Move it to you or to another organisation, where that applies (portability).
Object to us using it, where we rely on legitimate interests.
Withdraw consent at any time, where we rely on consent.

We don't make decisions about you by automated means.

To use any of these rights, email ornamentalff@gmail.com. We may need to check who you are first. We normally reply within one month, and there is no charge unless a request is clearly unfounded or excessive.

Complaints

How to complain

We'd like the chance to put things right, so please tell us first at ornamentalff@gmail.com. We will acknowledge your complaint within 30 days and look into it without undue delay.

You can also complain at any time to the Information Commissioner's Office (ICO), the UK's data protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

Cookies

Cookies

This website uses essential cookies only, the ones it needs to work securely. There are no analytics, advertising or tracking cookies. Because they are essential, the law doesn't require us to ask for your consent, so you won't see a cookie banner. Our cookie policy has the detail.

Security

Keeping your details safe

This website is served over HTTPS, which encrypts what passes between your browser and the site. We limit who can see enquiries to the people who need to, and we take reasonable steps to protect them. No system is perfectly secure, so please avoid sending sensitive information.

Children

Children

This website isn't aimed at children under 13. If you are under 13, please ask a parent or carer to contact us for you.

Changes

Changes to this policy

We will update this page if we change how we use personal data, for example if we add a new tool or service. The date below shows when it last changed.

Last updated: 29 September 2026.

Get in touch

Contact us

Questions about your details, or want to use one of your rights? Email ornamentalff@gmail.com, call 01284 703418, or write to Ornamental Fish Farm Limited, Tut Hill, Fornham All Saints, Bury St Edmunds, Suffolk, IP28 6LE. You can also use our contact page.

Email us about your data↗Contact us ↗