Privacy notice

Last updated 30th September 2026.

This notice explains how we use personal data: yours if you email us, including to be told when we open, or apply through our supplier form, and the business contact details of people at suppliers, wholesalers, carriers and other businesses we get in touch with. It also covers visits to this website, and what you can do about any of it.

Who we are

Yard & Field is a trading name of West Park Labs Ltd, a company registered in England and Wales with company number 17490221. Our registered office is Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. West Park Labs Ltd is the controller of the personal data described here.

You can contact us about anything in this notice at hello@yardandfield.co.uk or by post at the address above.

If you'd rather not hear from us

Reply to any email from us saying so, or email hello@yardandfield.co.uk. We'll stop straight away and add your address to our do-not-contact list, so we don't get in touch again.

If you email us

When you email us, we hold your name, email address and what you've written, so we can reply. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): answering the people who write to us.

If you ask to be told when we open, we'll send you one email when the first ranges go on sale, and nothing else. Our lawful basis for that is your consent (Article 6(1)(a)), and you can withdraw it at any time by telling us. We delete the list once that email has gone, or after 12 months if we haven't opened by then.

Suppliers and trade contacts: what we hold and where it comes from

• Your name, job title and the business you work for.
• Your business email address and phone number.
• What we've said to each other: emails, voicemail messages, quotes and trade terms.

We collect these from the places a business publishes them: your company's own website, trade directories and exhibitor lists, and the Companies House register. After that, from what you send us.

If you apply through our supplier form, we collect what you enter there, from you: your business's name, company number and website, your name and email address, your answers about your range, deliveries and product data, and anything else you write. Cloudflare stores each application for us until we copy it into our own records, usually within a day, and then it's deleted from Cloudflare.

Suppliers and trade contacts: why we use it, and our lawful basis

We use your details to ask about your products, prices and trade terms, to set up and run a trading relationship if we both want one, and to keep a record of who has asked us not to get in touch.

Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Our interest is finding suppliers and running a business with them. We only use business contact details, only for that purpose, and you can object at any time. Where we end up trading together, some records are kept because the law requires it (Article 6(1)(c)).

Who we share it with

We don't sell your details or pass them to anyone for their own marketing. The providers we use to run the business process data on our behalf under contract:

• Our email and office software provider, which stores our email.
• Software providers that help us draft and organise our correspondence.
• Our mail-handling and phone providers, for post and voicemail.
• Cloudflare, which hosts this website and our domain, runs the spam check on our supplier form and holds applications until we copy them.

Some of these providers process data outside the UK, including in the United States. Where they do, it's covered by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK's International Data Transfer Agreement or Addendum. Email us for a copy of the safeguards that apply.

How long we keep it

• Emails from shoppers and the public: up to two years after our last contact, then deleted, unless they become part of an order.
• Supplier enquiries and applications that don't lead anywhere: up to two years after our last contact, then deleted.
• If we trade together: for as long as we do, then six years, which is how long business and tax records must be kept.
• Our do-not-contact list: for as long as we trade, holding only your email address, name and business, so we can keep honouring your request.

Visiting this website

This site sets no cookies of its own. Cloudflare, which serves it, processes your IP address and basic request details to deliver the pages and protect the site from abuse.

We also count visits with Cloudflare Web Analytics. A small script from Cloudflare records which page you viewed, the website that sent you here, your browser, device type and country, and how quickly the page loaded. It sets no cookies, stores nothing on your device and doesn't identify you or follow you across other websites. We only ever see totals. Cloudflare does this for us as our processor.

Our lawful basis for both is legitimate interests: keeping the site working and secure, and understanding how people find it.

Besides that analytics script, the supplier application page is the one page that loads anything from another website: Cloudflare Turnstile, a security check that keeps spam off the form. To run it, Cloudflare processes information about your browser and device on that page. Cloudflare is our processor for the check itself, and a controller when it uses that information to improve its bot detection; its Turnstile privacy addendum explains how. The check is strictly necessary to protect the form, and our lawful basis is legitimate interests: keeping the form secure.

Automated decisions

We don't make decisions about you that have legal or similarly significant effects by automated means alone, and we don't profile you.

Automated checks screen the supplier form for spam. If they stop an application, you can send the same details by email instead.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, and object to our using it. Email us at the address above and we'll reply within a month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

If the business behind Yard & Field changes, for example when a separate company is formed to run it, we'll update this notice to name it, and the records described here will move to that company for the same purposes.