Privacy Policy

This notice explains what personal data we collect through this website, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. We have tried to write it in plain English rather than legal boilerplate.

Who we are

Moulton Bulb Co. Ltd is the data controller for the personal data described in this notice. We are registered in England, company number 793018, at Long Lane, Moulton, Spalding, Lincolnshire, PE12 6PP.

For anything to do with your personal data, contact us at info@oldershawgroup.co.uk or on +44 (0)1406 370380, or write to us at the address above.

What this notice covers

This notice covers www.oldershawgroup.co.uk. It does not cover personal data we hold about our employees, growers, suppliers or customers under separate agreements, which is dealt with in the notices and contracts that apply to those relationships.

What we collect, and why

We only collect personal data where you give it to us, or where it is needed to run the site. Here is every place on this website where that happens.

Enquiries

If you use the contact form we collect your name, email address, the organisation you are from, which best describes you (customer, grower, candidate or other) and your message. Our lawful basis is legitimate interests: you have asked us a question and we need to answer it.

Your enquiry is emailed to our head office through Resend, our email delivery provider, and lands in a Microsoft 365 inbox where the relevant team picks it up. We also store it as a record in this website’s own admin system, which only signed-in Oldershaw Group staff can see. Alongside your enquiry we keep a note of whether it has been dealt with, who is handling it, and our own notes on how we answered it. We do this so an enquiry cannot be lost if the email fails to arrive, and so we can manage our workload and see what is still waiting on an answer. That is a separate legitimate interest from answering you, and we rely on it for keeping the record. We do not record your IP address when you use this form.

Job applications

If you apply for a vacancy we collect your first and last name, email address, phone number, your answer about residency and right to work, your CV, any covering note you write, and where you first came to the site from, so our recruitment team knows which channels are working. Your CV must be a PDF or Word document of 10MB or less.

Applications go into Agriable, our own HR system, and are mirrored into Zoho Creator, which our recruitment team uses to manage vacancies. Our lawful basis is your consent, which you give with the tick box on the application form, together with taking steps at your request before entering into a contract of employment. You can withdraw your consent at any time by emailing us, and we will delete your application.

We ask you to confirm your right to work in the UK at application stage. We do not ask for and do not want documents proving it until a later stage of the process, and we do not collect any special category data, such as health or ethnicity, through this website.

Job alerts

If you sign up for job alerts we collect your email address and your preferred language, and nothing else. Our lawful basis is your consent. Every alert carries an unsubscribe link, and unsubscribing removes your address.

Certificates and document requests

Our certificates and policies are published openly on the documents page and need no sign-in. If you email us to ask for a document we do not publish, we hold that email in the ordinary way.

Password-protected form packs

Some pages holding recruitment and agency paperwork sit behind a shared password. When you enter it correctly we set a cookie so you do not have to enter it again for 30 days. The cookie records only that access was granted, not who you are.

Analytics

If, and only if, you accept analytics cookies, we use Google Analytics 4 to understand how the site is used. IP addresses are anonymised. We also record a small number of events that tell us the site is doing its job: a certificate being downloaded, a document being requested, and a click on an email address or phone number. If you decline, Google Analytics is never loaded and none of this is collected. Full detail is on our cookies page.

Information your browser sends

Like any website, our hosting provider records technical information such as IP address, browser type and the pages requested, in server logs used to keep the site running and secure. We also keep a small amount of information in your browser rather than on our servers: your language choice on the careers pages, your motion preference, whether you have seen the intro animation, your cookie choice, and the page or campaign that first brought you here. That last one is held only until you close the browser.

Who we share it with

We do not sell personal data, and we do not share it for anyone else’s marketing. We use a small number of suppliers who process personal data on our behalf, under contract and on our instructions:

• Railway, which hosts this website.
• Resend, which delivers enquiry emails from the contact form to us.
• Microsoft, which hosts the Microsoft 365 mailbox those enquiries arrive in.
• Zoho, which our recruitment team uses to manage applications.
• Google, for analytics, and only where you have consented.
• Cloudflare, which provides our domain and network protection.

We will also disclose personal data where the law requires it, or to establish or defend legal claims.

Where your data is held

This website and its data are hosted in the European Union. Resend, which delivers enquiry emails from the contact form, is a United States company and your enquiry is processed there in the course of being delivered to us.

Where a supplier processes data outside the UK we rely on the UK government’s adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps the same protection it has here.

How long we keep it

• Enquiries through the contact form: 24 months. This covers both the email and the record held in this website’s admin system, including our notes on how the enquiry was handled.
• Unsuccessful applications: 6 months from the close of the vacancy, unless you agree to us keeping your details on file for future roles.
• Successful applications: transferred to your employment record and kept under our employee privacy notice.
• Job alert subscriptions: until you unsubscribe.
• Analytics: 14 months.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, which does not affect anything we did before you withdrew it.

To exercise any of these, email info@oldershawgroup.co.uk. We will respond within one month. There is no charge.

If you are not happy with how we have handled your personal data, we would rather you told us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

We keep cookies to a minimum and set no advertising or marketing cookies at all. What we do use, and how to change your mind, is set out on our cookies page.

Security

This site is served over HTTPS. Applications are passed to our HR system over an authenticated connection, and access to the systems holding personal data is restricted to the people who need it. Enquiry records are readable only by signed-in Oldershaw Group staff and are not available through any public part of this website. No system is perfect, but we take this seriously and review it.

Children

This site is not aimed at children and we do not knowingly collect personal data from anyone under 16.

Changes to this notice

If we change how we handle personal data we will update this page and change the date at the top. This version is dated 11 September 2026.