Legal
Privacy Policy
Last updated: October 2026
ABC Food Law Limited ('we', 'us', 'our') is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website at www.abcfoodlawcompliance.com, subscribe to our services, or otherwise interact with us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is ABC Food Law Limited, a company registered in England and Wales. Our registered office is at Centrum, Norwich Research Park, Norwich, Norfolk, NR4 7UG. You can contact us about data protection matters by email at [email protected] or by telephone on 01603 319863.
2. What personal data we collect
We may collect and process the following categories of personal data: (a) Identity data — your name; (b) Contact data — your email address and telephone number; (c) Account data — your login credentials (email address and hashed password) and subscription status; (d) Transaction data — details of payments made for subscriptions, processed via our payment provider Stripe; (e) Usage data — information about how you use our website, including pages visited, webinars accessed, quiz results, and completion certificates generated; (f) Technical data — your IP address, browser type and version, time zone, operating system, and device information collected automatically when you visit our site; (g) Communications data — messages and enquiries you send us via our contact form or by email.
3. How we collect your personal data
We collect personal data through the following means: directly from you when you register for an account, subscribe to our services, complete our contact form, or communicate with us; automatically via cookies and similar technologies when you browse our website; from our payment processor Stripe when you complete a subscription purchase; and from your use of our on-demand webinar platform, including quiz submissions and completion records.
4. How we use your personal data
We use your personal data for the following purposes and on the following lawful bases: (a) To provide and manage your subscription account — lawful basis: performance of a contract; (b) To process payments and prevent fraudulent transactions — lawful basis: performance of a contract and legitimate interests; (c) To give you access to on-demand webinars, course materials, and certificates — lawful basis: performance of a contract; (d) To respond to your enquiries and provide customer support — lawful basis: legitimate interests; (e) To send you service-related communications, such as account confirmations and subscription renewal reminders — lawful basis: performance of a contract; (f) To improve our website and services through analysis of usage data — lawful basis: legitimate interests; (g) To comply with our legal and regulatory obligations — lawful basis: legal obligation.
5. Cookies and tracking technologies
Our website uses cookies and similar technologies. Essential cookies are necessary for the site to function and cannot be switched off. These include session cookies used to keep you logged in to your account. We also use analytics cookies to understand how visitors interact with our site; these are only set with your consent. You can manage your cookie preferences using the cookie consent banner displayed when you first visit our site. For more information about the cookies we use, please contact us at [email protected].
6. Sharing your personal data
We do not sell your personal data. We may share your data with the following categories of third parties where necessary: (a) Stripe — our payment processor, for the purpose of handling subscription payments securely. Stripe processes payments in accordance with PCI DSS standards and its own privacy policy; (b) Hosting and infrastructure providers — who host our website and data on our behalf, under data processing agreements; (c) Professional advisers — including lawyers, accountants, and auditors, where necessary; (d) Regulatory authorities — where we are required to do so by law. All third parties are required to respect the security of your personal data and to treat it in accordance with the law.
7. International transfers
Some of our third-party service providers are based outside the UK. Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place, such as the use of the UK International Data Transfer Agreement (IDTA) or adequacy decisions made by the UK Secretary of State. If you would like further information about international transfers, please contact us.
8. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Account and subscription data is retained for the duration of your subscription and for six years thereafter, in line with our legal obligations. Enquiry and communications data is retained for three years from the date of last contact. Usage and technical data is retained for up to two years. When data is no longer required, it is securely deleted or anonymised.
9. Your rights under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data: (a) Right of access — to request a copy of the personal data we hold about you; (b) Right to rectification — to request correction of inaccurate or incomplete data; (c) Right to erasure — to request deletion of your personal data in certain circumstances; (d) Right to restriction of processing — to request that we limit how we use your data in certain circumstances; (e) Right to data portability — to receive your data in a structured, commonly used format; (f) Right to object — to object to our processing of your data where we rely on legitimate interests; (g) Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You will not normally be charged a fee. If your request is complex or numerous, we may extend this period by a further two months, and we will notify you accordingly.
10. Right to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. The ICO can be contacted at www.ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance at [email protected].
11. Security
We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include encrypted data transmission (HTTPS), hashed password storage, and access controls limiting who can view personal data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
12. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data to them.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically. Where changes are material, we will notify you by email or by a prominent notice on our website.
14. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: by email at [email protected]; by telephone on 01603 319863; or by post at ABC Food Law Limited, Centrum, Norwich Research Park, Norwich, Norfolk, NR4 7UG.