1. Who we are
Food Safe 360 Ltd, trading as Food Safe 360, is the data controller for the personal data described in this notice. You can reach us at support@foodsafe360.co.uk for any privacy question or request.
2. What we collect and why
- Account data (name, email, password credentials, role) — to create and secure your account. Legal basis: performance of our contract with you.
- Business data (business name, address, phone, contact person, local authority) — to provide premises-specific records and reports. Legal basis: contract.
- Records you enter (temperatures, checks, corrective actions, allergen details, staff sign-offs, inspection notes) — to deliver the Service. Legal basis: contract.
- Local authority officer data (name, email, authority) — to give officers read-only access to businesses in their area. Legal basis: contract and legitimate interests.
- Support messages — to answer your questions. Legal basis: legitimate interests.
- Usage and technical data (device identifiers, IP address, log and error data) — for security, fraud prevention and improving the product. Legal basis: legitimate interests.
- Legal and accounting records — where we must keep them. Legal basis: legal obligation.
3. Who we share data with
- Service providers and subprocessors that host our database, run the app and provide support tooling.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
- Local authority officers, where you or your authority link a premises — officers see compliance records for the premises in their area only.
- Professional advisers such as legal and accounting firms.
- Authorities or regulators where we are required to disclose by law.
We do not sell personal data.
4. International transfers
Some providers may process data outside the UK or EEA. Where that happens we rely on UK adequacy regulations or Standard Contractual Clauses with appropriate safeguards.
5. How long we keep data
We keep account and compliance records for as long as your account is active, and afterwards only as long as needed for legal, tax or dispute purposes — normally up to six years for financial records. Other personal data is deleted or anonymised when it is no longer needed.
6. Your rights
Under UK GDPR you have the right to access, rectification, erasure, restriction, data portability, objection, and to withdraw consent where we rely on it. Contact support@foodsafe360.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
7. Security
We use appropriate technical and organisational measures including encryption in transit, encrypted storage, role-based access controls and row-level database rules so each business only sees its own records.
8. Cookies and local storage
We use essential cookies and browser storage to keep you signed in, remember your premises and let the app work offline. These are required for the Service to function. We do not use advertising cookies. You can clear cookies and storage in your browser settings, though doing so will sign you out.
9. Changes
We may update this notice; the date at the top shows the latest version.
