Privacy Policy
Last updated: 16 July 2026
Who we are
WDG Agriculture (part of WDG Group) ("we", "us") provides professional drone survey services and this client data portal. We are the data controller for the personal data described in this policy. Contact: use the contact details on your invoice or the "Ask a Question" section of the portal. If you are unhappy with how we handle your data you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.
What we collect
Account data: farm/business name, contact name, email address, phone number, postal address and portal login credentials (passwords are stored only as a secure one-way hash — we can never read them). Farm data you provide: field records, crop and rotation details, yields, operations, machinery, team members, documents you upload, grain store records, subsidy agreements and photos. Survey data: drone imagery, maps, NDVI analysis and reports we produce for you. Billing data: invoices and payment status. Card payments are processed by Stripe — we never see or store your card number. Technical data: portal session tokens and basic usage needed to keep your account secure.
Why we process it (legal bases)
Contract: to deliver the surveys and portal services you have engaged us for, including billing and support. Legitimate interests: keeping the portal secure (rate limiting, session management), improving our services, and communicating about your surveys. Legal obligation: retaining business and tax records (typically 6–7 years under HMRC rules). Consent: optional communications and any processing you explicitly opt into. You may withdraw consent at any time.
Who we share it with
Stripe (payment processing), our hosting and infrastructure provider (Base44), email delivery services, and — only where you use those features — your nominated agronomist. We do not sell your data. We never share one farm's data with another client. Some providers may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
How long we keep it
Portal and farm data: for as long as your account is active. Business records (invoices, contracts): 7 years to meet HMRC obligations. If you close your account we flag your records for deletion review and remove personal data that we have no legal obligation to keep. Drone survey deliverables may be retained as part of our flight compliance records as required by CAA regulations.
Your rights
Under UK GDPR you can: access a copy of your data; correct inaccurate data; ask for erasure; restrict or object to processing; and receive your data in a portable format (much of your data can already be exported from the portal as CSV). To exercise any right, contact us via the portal or your usual contact — we respond within one month. You will not be discriminated against for exercising any right.
Security
Passwords are bcrypt-hashed, portal sessions use expiring random tokens verified on every request, login and account endpoints are rate-limited against brute force, all traffic is encrypted with HTTPS/TLS, and file downloads use time-limited signed links. Data access in our systems is restricted by row-level security so only administrators and you can reach your records.
These documents are provided as a professional starting point for WDG Agriculture and should be reviewed by a qualified solicitor before being relied upon as legal advice.