Privacy Policy

1. Who we are

Good Food Hygiene (“we”, “us”, “our”) is the data controller for personal information collected through goodfoodhygiene.co.uk. Good Food Hygiene is a trading name of Elearnment Ltd, a company registered in England and Wales (company number 17458288), so the legal entity responsible for your data is Elearnment Ltd. We are registered with the Information Commissioner’s Office (ICO), registration number ZC248359.

2. What we collect

Depending on your account type, we collect: name, email address and password; for individual learners, date of birth and gender; for business/organisation accounts, the business name, business type, company registration/VAT number, business address, and the name, role and phone number of the person setting up the account. We also record course progress, quiz results and completion certificates. We ask individual learners for their date of birth and gender for one reason: so that an inspector can match a certificate to the right person when they verify it. They are used for nothing else. When you create an account we also record where you first came to us from, such as a Google search, a Facebook post or a link in an email, so we can see which ways of finding us actually help people. We can only tell this if you pressed “Accept” on the cookie notice, or if you came straight to the sign-up page from another website or a tagged link; otherwise it is recorded as not known. If you accepted cookies, WooCommerce (the software that runs our shop and accounts) also saves some details of the visit on which you signed up: the page you arrived on, the address of the site that sent you, how many pages you looked at, and your type of device and browser.

3. How we use it

We use this information to provide your account and course access, issue certificates, process payments, and — only if you opt in — send you marketing emails about new courses or offers. You can withdraw marketing consent at any time via the unsubscribe link in any email or by contacting us. If you choose to fill in our course feedback form, we use your answers, without your name, to review and improve our courses. If you write a reflective practice record, we keep it in your account so that you can print it or save it as a PDF; it is never shown to your employer.

4. Business accounts and staff

Where a business account adds a staff member, that staff member’s own name, email and course progress are visible to the business account holder for training-record purposes. Certificates always show the learner’s real name for regulatory compliance.

5. Data retention

We retain account and certificate records for as long as your account is active, and as needed to meet legal or regulatory record-keeping requirements.

Cookies

We use a small number of cookies. Essential cookies keep you logged in, remember your basket and protect forms from abuse; the site cannot work without them, so they are set automatically. The rest are set only if you press “Accept” on the cookie notice: analytics cookies (Google Analytics), which tell us which pages help people so we can improve them; a cookie called gfh_src, which remembers for up to 90 days the name of the website or link that first brought you here, so that if you create an account we can note where you came from; and WooCommerce’s sbjs_ cookies, which note how you arrived and last only for your visit. If you press “No thanks”, none of these are set. You can change your mind at any time by clearing your browser cookies, after which the notice appears again. We do not use advertising cookies. Your cookie choice itself is stored in a cookie called gfh_consent for one year.

6. Your rights

Under UK GDPR you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. Contact us at [email protected] to exercise these rights.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put things right first, so please contact us before you do.

7. Third parties

We use third-party providers for hosting and payment processing, who process data on our behalf under their own privacy and security obligations. We do not sell your personal data.

8. Contact

Questions about this policy can be sent to [email protected].