Data Protection Officer in Buckfastleigh

As our DPO, you’ll help shape Riverford’s future.

This is a hands‑on role where you'll help keep Riverford’s data protection and compliance activities running smoothly while we transition to a longer-term solution. You'll be the go‑to person for day‑to‑day privacy matters, providing practical, straightforward advice to teams across the business and making sure we continue to meet our legal obligations. Whether it's supporting Subject Access Requests, investigating data protection incidents, reviewing DPIAs or helping colleagues navigate privacy questions, you'll bring a calm, pragmatic approach that balances compliance with the realities of how the business operates.

Alongside keeping things moving day to day, you'll take a step back to review how we currently manage data protection across Riverford. You'll look at our processes, controls and ways of working, identifying what's working well and where we could do things better. Working closely with stakeholders across the business, you'll recommend practical improvements, help shape a proportionate future operating model and leave us with a clear roadmap that strengthens our approach long after your contract has finished.

This role would suit someone who’s happy working independently, enjoys getting stuck in, and can build trust with people across the business. We’re looking for someone who can explain complex requirements in plain English, take a balanced approach to risk, and leave things in a better place than they found them.

Location – We encourage flexitime and hybrid working, based at Wash Farm, Buckfastleigh, Devon, TQ11 0JU.

Hours – 40 hours per week, Monday to Friday, different working patterns can be considered.

Contract – Initial 6‑month fixed term contract.

What You’ll Be Doing

• Manage day‑to‑day data protection activities, including Subject Access Requests, Right to Erasure requests, CCTV requests, privacy enquiries and data incidents.
• Provide practical data protection advice and support to teams across the business, including completing and reviewing DPIAs and maintaining compliance documentation.
• Help ensure Riverford remains compliant with UK data protection legislation and monitor compliance risks, recommending improvements where needed.
• Review Riverford’s current data protection and compliance arrangements, identifying strengths, gaps, risks and opportunities.
• Recommend practical improvements to processes, controls, governance, training and the overall data protection operating model, supported by a clear implementation roadmap.
• Document key processes, support knowledge transfer and make recommendations on future capability and resource requirements.
• Ensure critical privacy and compliance activities continue smoothly throughout the transition period.

What We’re Looking For

• Strong experience in data protection, privacy or compliance roles.
• Possession of a recognised privacy qualification (e.g. IAPP CIPP/E, CIPM, CIPT, BCS Practitioner Certificate in Data Protection, IBITGQ C‑DPO or equivalent).
• Experience managing Individual Rights Requests, DPIAs and supporting documentation, privacy incidents, Experience of legitimate interest (including LIA), and contract supporting documentation (NDA, ISA, Contract review).
• Experience undertaking compliance reviews, audits or gap assessments.
• Ability to work independently and provide pragmatic, risk‑based advice.
• Strong written communication and reporting skills.

Benefits

• 33 days holiday (pro‑rated, including bank holidays); an ethical and generous company pension scheme; and an annual profit share, where 10% of all profits are split equally among co‑owners.
• Heavily discounted organic breakfasts and lunches, free organic fruit and veg to take home and free parking.
• Opportunities for professional development and tailored training.