Privacy Policy

Last updated: 16 July 2026

1. Who we are

Food Safety Certificate UK ("we", "us") operates foodsafetycertificateuk.co.uk. We are the data controller for the personal data described below. You can contact us at support@foodsafetycertificateuk.co.uk.

2. What we collect and why

  • Identity & certificate data — full name, date of birth, an identity reference of your choice (UK National Insurance number, UK passport number, or UK driving licence number), optional job title and company. Collected to issue and verify your training certificate. Lawful basis: performance of a contract (UK GDPR Art. 6(1)(b)).
  • Contact data — email address. Used to deliver the certificate PDF and any service-related communications. Lawful basis: performance of a contract.
  • Payment data — handled by Stripe (PCI-compliant processor). We do not see or store card numbers. Stripe receives only your email and a course identifier from us.
  • Usage data — strictly necessary cookies for session/security and aggregated analytics on lesson progress. See our cookie policy.

3. How long we keep it

Certificate records (name, course, issue date, encrypted identity reference and DOB) are retained for 6 years so that employers can verify a certificate throughout its useful life and to meet UK accounting/limitation-period requirements. You may request earlier deletion under the conditions in section 5; we will honour the request unless we have a legal obligation to retain the record.

4. Who we share it with

  • Stripe — payment processing (UK/EU/US, with UK IDTA in place).
  • Resend — transactional email delivery (EU/US, with SCCs/UK IDTA in place).
  • Cloudflare — hosting and edge data storage (D1) in the EU region.
  • Anyone you provide your certificate ID to may use /verify to see your name, the course and the issue date. No other data is returned.

5. Your rights

Under UK GDPR you have rights to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any of these, email support@foodsafetycertificateuk.co.uk. We will respond within one month. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

6. Security

Your identity reference (NI / passport / driving licence number) is encrypted at rest using AES-256-GCM before being stored. Access to certificate downloads is gated by a per-purchase access token. All traffic is encrypted in transit (TLS 1.2+).