Food Safety Certificate UK

Privacy Policy

Last updated: 13 November 2026

1. Who we are

Food Safety Certificate UK ("we", "us") operates foodsafetycertificateuk.co.uk. We are the data controller for the personal data described below. You can contact us at support@foodsafetycertificateuk.co.uk.

2. What we collect and why

  • Identity & certificate data — full name, date of birth, an identity reference of your choice (UK National Insurance number, UK passport number, or UK driving licence number), optional job title and company. Collected to issue and verify your training certificate. Lawful basis: performance of a contract (UK GDPR Art. 6(1)(b)).
  • Contact data — email address. Used to deliver the certificate PDF and any service-related communications. Lawful basis: performance of a contract.
  • Payment data — handled by Stripe (PCI-compliant processor). We do not see or store card numbers. Stripe receives only your email and a course identifier from us.
  • Usage data — strictly necessary storage for your lesson progress, plus website analytics (pages visited and course steps reached) through Google Analytics and Microsoft Clarity. Analytics cookies are only set with your consent. See our cookie policy.

3. How long we keep it

Certificate records (name, course, issue date, encrypted identity reference and DOB) are retained for 6 years so that employers can verify a certificate throughout its useful life and to meet UK accounting/limitation-period requirements. You may request earlier deletion under the conditions in section 5; we will honour the request unless we have a legal obligation to retain the record.

4. Who we share it with

  • Stripe — payment processing (UK/EU/US, with UK IDTA in place).
  • Resend — transactional email delivery (EU/US, with SCCs/UK IDTA in place).
  • Cloudflare — hosting and edge data storage (D1) in the EU region.
  • Google (Google Analytics 4, via Google Tag Manager) and Microsoft (Clarity) — website analytics. They receive usage data only, never your name, email, date of birth or ID number; analytics cookies are set only if you accept them.
  • Anyone you provide your certificate ID to may use /verify to see your name, the course and the issue date. No other data is returned.

5. Your rights

Under UK GDPR you have rights to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any of these, email support@foodsafetycertificateuk.co.uk. We will respond within one month. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

6. Security

Your identity reference (NI / passport / driving licence number) is encrypted at rest using AES-256-GCM before being stored. Access to certificate downloads is gated by a per-purchase access token. All traffic is encrypted in transit (TLS 1.2+).