Privacy of the UK food hygiene course

In your browser (sent to nobody)

Your progress: the lessons you have read and where you were, so you can carry on.
The test in progress: your answers while you take it, in this tab only, in case you reload.
Your last passed test: the questions and your answers, so you can ask for the certificate without retaking it.
Your study time: the minutes a lesson or the test is open and in use. If you buy the certificate, it is printed on its training record.
The link to your certificate, if you buy one.

All of this sits in your browser’s local storage, on this device. It is not a cookie and nobody else can see it.

The waiting list

We keep your email, the page language and, if you choose, your situation and your percentage for each lesson (never your answers). If you came from an ad, we also note the campaign name that was in the link. Our lawful basis is your consent, which you can withdraw at any time. Opus Vault keeps the list in its own database at Cloudflare, the company that hosts this site; Cloudflare may store it outside the UK. The list does not record your IP address, and we do not sell or share it. We use it only to email you once when the certificate opens, and we delete it a year after you join if the certificate has not opened.

If you buy the certificate

To issue it we keep: your name, the sector you choose, the test score we re-check, the study time your browser measured, the time you ticked the two boxes, the price and the payment references. No identity document is asked for. Our lawful basis is the contract with you.
We do not keep your card, email or address: Stripe, the company that takes the payment, collects and keeps them to charge you, work out VAT and send your receipt.
The public check: anyone with your certificate number or QR code sees your name, the course and its topics, the date and whether it is valid. Nothing else.
Where: in Opus Vault’s database at Cloudflare, which may be outside the UK.
How long: an unpaid order is deleted after 48 hours. An issued certificate is kept while it needs to be checkable. If you ask us to delete it, we do, and it can no longer be checked.

Your rights

You can ask to see, correct or delete your data, object to how we use it, or withdraw consent. Email [email protected]. Controller: Opus Vault, an Australian business, ABN 85 543 288 407. You can also complain to the UK data protection regulator.

Our UK representative

We are based outside the UK, so the law asks us to name a representative in the UK for anyone who wants to contact them instead of us. UK representative: [UK representative to be named before the certificate goes on sale].

A controller outside the UK that offers goods or services to people in the UK must name a representative in the UK in writing, unless its processing is only occasional and low-risk. [S49]

No tracking