1. Introduction
SmartHaccp Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our food safety management platform and related services.
We are registered in England and Wales. Our registered address is Innovation House, Manchester, M1 1AB.
2. Information We Collect
2.1 Information you provide
- Account information: Name, email address, business name, and contact details when you register.
- Business data: Food safety records, HACCP plans, temperature logs, allergen information, cleaning schedules, and incident reports you create using the platform.
- Staff information: Names, email addresses, and roles of staff members you add to your account.
- Payment information: Billing details processed securely through our payment provider. We do not store full credit card numbers.
2.2 Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the platform.
- Device information: Browser type, operating system, and device identifiers.
- Log data: IP address, access times, and referring URLs.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the SmartHaccp platform.
- Process transactions and manage your subscription.
- Send important service notifications (e.g., overdue checks, subscription renewals).
- Respond to support requests and enquiries.
- Generate anonymised, aggregated analytics to improve our service.
- Comply with legal obligations.
4. Data Storage and Security
Your data is stored on secure cloud infrastructure hosted in UK data centres. We implement industry-standard security measures including:
- End-to-end encryption in transit (TLS 1.3) and at rest (AES-256).
- Regular automated backups with encrypted storage.
- Role-based access controls for all internal systems.
- Regular penetration testing and security audits.
5. Data Sharing
We do not sell your personal data. We may share information with:
- Service providers: Trusted third parties who assist in operating our platform (hosting, payment processing, email delivery), bound by data processing agreements.
- Legal authorities: Where required by law, regulation, or legal process.
- Business transfers: In the event of a merger, acquisition, or sale of assets, with appropriate notice.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention requirements).
- Object to or restrict processing of your data.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, contact us at privacy@smarthaccp.co.uk.
7. Data Retention
We retain your data for as long as your account is active, plus 30 days after account closure to allow for data export. Certain records may be retained longer where required by law (e.g., food safety records under food hygiene regulations).
8. Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Continued use of SmartHaccp after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: privacy@smarthaccp.co.uk
Address: SmartHaccp Ltd, Innovation House, Manchester, M1 1AB