RoSPA accredited · CPD certified · Instant digital certificate — Browse courses →
0800 852 7229

Legal

Privacy Policy

Last updated: 14 June 2026

Who we are

Food Hygiene Certificate is a trading name of Online CPD Academy ("we", "us", "our"). We are the data controller for the personal information collected through this website. If you have any questions about how we use your data, please contact us:

What data we collect

We collect personal data about you when you purchase a course, create an account, or contact us. This may include:

  • Identity data: your name and, where relevant, the name of your organisation.
  • Contact data: your email address and telephone number.
  • Order data: details of courses purchased, dates of purchase and order values.
  • Course progress data: your progress through course modules, assessment scores and date of certificate issue.
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, and other technology on the devices you use to access our website.
  • Marketing preferences: your preferences in receiving marketing from us.

How we use your data

We use your personal data for the following purposes:

  • To process your order and provide you with access to purchased courses.
  • To issue your certificate on successfully completing a course.
  • To provide customer support and respond to enquiries.
  • To send you important information about your course or account (e.g. access details, certificate availability).
  • To send you marketing communications, where you have consented to receive them.
  • To comply with our legal and regulatory obligations.
  • To improve our website and services.

Lawful bases for processing

We rely on the following lawful bases under UK GDPR:

  • Contract: processing your order, providing course access and issuing certificates are necessary to perform the contract between us.
  • Legitimate interests: improving our services, fraud prevention, and communicating with you about courses you have previously purchased.
  • Legal obligation: keeping financial and transaction records as required by law.
  • Consent: sending you marketing emails, where you have opted in. You can withdraw consent at any time by clicking "unsubscribe" in any marketing email or by contacting us.

Payment data

Payments are processed securely by our payment provider. We do not store or have access to your full card details — these are handled entirely by the payment provider, which is subject to its own privacy policy and is compliant with the Payment Card Industry Data Security Standard (PCI DSS).

Cookies & analytics

We use cookies and similar technologies on this website. For full details of what cookies we use and how to manage them, please see our Cookie Policy.

Data sharing

We do not sell your personal data to third parties. We may share your data with:

  • Accreditation bodies: RoSPA and CPD, for the purposes of verifying course completion and accreditation.
  • Service providers: companies that help us run our business (e.g. our email provider, hosting provider, payment processor), all of whom are contractually required to keep your data secure and to use it only for the purposes we specify.
  • Regulators and authorities: where we are required to do so by law.

Data retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting or reporting requirements.

  • Order and certificate records are retained for seven years for accounting and audit purposes.
  • Course progress data is retained for the lifetime of your account.
  • Marketing preferences are retained until you withdraw consent.

You can request deletion of your account and associated data at any time — see "Your rights" below.

Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: you can request a copy of the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate or incomplete data.
  • Right to erasure: you can ask us to delete your data in certain circumstances.
  • Right to restriction: you can ask us to restrict how we use your data.
  • Right to data portability: you can ask us to provide your data in a structured, machine-readable format.
  • Right to object: you can object to our processing of your data where we rely on legitimate interests.
  • Rights related to automated decision-making: we do not make solely automated decisions that have a legal or significant effect on you.

To exercise any of these rights, please contact us at info@foodhygienecertificate.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

How to contact us

If you have any questions or concerns about this policy or about how we handle your personal data, please contact us: