Privacy Notice
Last updated: 13 October 2026
1. Who we are
Hoof and Habitat Ltd, trading as Hoof & Habitat, is responsible for deciding how and why personal information is used for its business.
Contact us about this notice or your personal information at:
Email: [email protected]
Telephone: 0333 772 3897
Address: 30 Holmes Lane, Soham, Ely, CB7 5JP
This notice applies to our Wix website, our Thinkific learning site at learn.hoofandhabitat.co.uk, and our sales, courses, consultancy, webinars, workshops and related communications.
2. Personal information we use
Depending on how you interact with us, we may use:
Contact and identity details, such as your name, email address, telephone number and billing or delivery address.
Order, payment and transaction information, including products or services purchased and payment status. Card and wallet payments are handled through the payment provider selected at checkout; we do not intend to receive or store full card security details.
Account and course information, such as registration details, course access, progress, participation and communications with us.
Information you provide in enquiries, consultancy requests, workshop bookings, feedback, complaints or refund requests.
Marketing choices and records of consent or opt-out.
Website and device information, such as IP address, cookie identifiers, browser information and how visitors use our sites, where permitted by your cookie choices.
Photos, video, audio or other participant information only where relevant to a particular event, testimonial, research activity or service.
Please avoid sending sensitive personal information unless it is necessary for the service and we have agreed how to handle it.
3. Why we use information and our lawful bases
We use personal information for the purposes below. The lawful basis depends on the particular activity.
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries, providing consultancy, fulfilling orders, delivering courses or events, and handling payments | Taking steps at your request before a contract, and performing our contract with you |
| Keeping transaction, tax and business records | Legal obligation |
| Handling complaints, disputes, refunds, fraud prevention and protecting our legal rights | Legitimate interests, and where relevant legal obligation |
| Sending service messages about an order, booking, course or account | Contract |
| Sending direct marketing by email | Consent, or the products-and-services soft opt-in where its legal conditions are met |
| Website analytics or advertising cookies and similar technologies | Your consent where required |
| Recording an event, using a testimonial, or using information for a particular research activity | Legitimate interest and were applicable, consent. |
Where we rely on legitimate interests, those interests include running and improving our business, providing customer support, preventing misuse and keeping appropriate business records. You can ask us for more information about a legitimate-interest assessment.
Marketing is optional and is not a condition of buying from us. You can unsubscribe using the link in a marketing email or contact us. We keep a limited record of opt-outs so we can respect them.
4. Where information comes from
We usually collect information directly from you when you visit our sites, place an order, enrol in a course, book a service, contact us or attend an event.
We may also receive information from the platforms and payment services used to complete your order or deliver a service, such as a payment confirmation or course-enrolment record.
5. Who may receive information
We share only the information needed for the relevant purpose. Depending on the service and your choices, recipients may include:
Wix, which provides our main website and may provide store, account, form, payment, marketing or site-management features.
Thinkific, which hosts our learning site and course accounts and may provide store, account, form, payment, marketing or site-management features.
MailerLite, for email communications and marketing where applicable.
Make.com, where we use an automation to transfer information between services.
Shippo, for posting physical product orders where applicable.
Payment providers, such as Stripe and PayPal, and digital-wallet payment options such as Apple Pay or Google Pay where offered at checkout. The provider and information involved depend on the payment option you select.
Google, for analytics if enabled and consented to, and other Google services if used.
Meta, if we use its advertising or tracking tools and you have made the relevant cookie choice.
Delivery suppliers, professional advisers, insurers, auditors and IT or business-support providers where needed.
Regulators and public authorities, including the Animal and Plant Health Agency or other relevant authorities, where we are required or permitted to provide information.
Some providers may process information on our instructions for particular services. Others may use information as independent controllers for their own purposes, such as payment security, legal compliance or account administration. Their roles can vary by service. Please refer to the relevant provider’s privacy information for its own processing.
6. Cookies, analytics and advertising
Our sites use cookies and similar technologies. Some are needed for core functions such as security, sign-in or remembering a basket. Optional analytics or advertising technologies are used only as described in our Cookie Policy and according to the choices available on the relevant site.
Our Wix site and Thinkific learning site have separate cookie controls. You can review or change your choices using the cookie settings on the relevant site.
Read our Cookie Policy: https://www.hoofandhabitat.co.uk/cookie-policy
7. International transfers
Some of the providers we use may process your information outside the UK. This includes platform hosting, automation, and marketing infrastructure providers located primarily in the United States and the European Economic Area (EEA).
To ensure your data remains protected to a standard equivalent to UK data protection laws, we confirm that these transfers are secured by appropriate safeguards. Depending on the specific provider, these legal mechanisms include relying on the UK Extension to the EU-US Data Privacy Framework (where the provider is self-certified) or executing the UK Information Commissioner’s Office (ICO) Addendum to the EU Standard Contractual Clauses (SCCs).
You can directly review the security parameters, transfer mechanisms, and specific safeguards relied upon by our third-party sub-processors using the links in the table below:
| Provider | Purpose | Safeguards & Legal Parameters |
|---|---|---|
| Cloud Hosting & Analytics | View the Google Cloud Data Processing Addendum | |
| Meta | Marketing & Infrastructure | View the Meta European Data Transfer Addendum |
| Wix | Website Hosting | View the Wix Data Processing Agreement |
| Make.com | Workflow Automation | View the Make.com Privacy Notice |
| Thinkific | Course Platform | View the Thinkific Data Processing Addendum |
| Mailerlite | Email Marketing | View the MailerLite Data Processing Agreement |
| Shippo | Shipping & Logistics | View the Shippo Data Processing Addendum |
You can also obtain a copy of the specific safeguards relied upon for any of our providers by contacting us directly at [email protected]
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, regulatory and reporting requirements.
Our current retention periods or criteria are:
Orders, delivery and seed records: Three years to comply with Animal and Plant Health Agency (APHA) regulation requirements.
Financial and tax records: Six Years
Course, consultancy and event records: three years after the end of the contract.
Marketing information: until you unsubscribe or withdraw consent; we may retain a minimal suppression record to ensure we do not contact you again.
Enquiries and complaints: 1 year
Cookie and consent records: 2 years. You may also set or amend your web browser controls to accept or refuse cookies.
9. Your rights
Depending on the circumstances and the lawful basis, you may have the right to request access to, correction or deletion of your personal information, restriction of its use, or a copy in a portable format. You may also have the right to object to certain processing and to withdraw consent where we rely on consent. You can object to direct marketing at any time.
To exercise a right, email [email protected]. We may need to verify your identity before responding. We will respond within the period required by data protection law. Some rights are subject to exceptions.
10. Complaints
Please contact us first if you have a concern about how we use your personal information. You can also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/
11. Changes to this notice
We may update this notice when our services or use of personal information changes. The latest version will be available on this page.