Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• • We have a legitimate interest in using relevant personal information to manage, deliver, develop and improve our professional services; maintain accurate records of advice, consultancy, inspections, audits and training provided; respond effectively to client needs; investigate food safety, hygiene, health and safety or related complaints and incidents; maintain the security of our systems and information; and protect our business and our clients in the event of disputes, claims, fraud or misuse. We only use personal information where it is necessary and proportionate for these purposes. We consider the reasonable expectations, rights and interests of the individuals involved and do not use personal information where our interests are outweighed by an unjustified risk or impact on them.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• We have a legitimate interest in using relevant personal information to provide existing and prospective business clients with information about our professional services, food safety updates and other information that may be relevant to their business. We only use information where the communication is relevant and proportionate, and where the individual would reasonably expect to receive it in the context of their professional role or previous relationship with us. We consider the potential impact on individuals and provide a clear and easy way to object to or opt out of direct marketing at any time.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to comply with legal requirements:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for recruitment purposes are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We have a legitimate interest in using relevant personal information to assess candidates’ suitability for roles, verify experience and qualifications, obtain and consider references where appropriate, and make fair and informed recruitment decisions. This processing helps us recruit people who are suitably qualified, competent and appropriate for the role, particularly where they may work independently or attend client premises. We only use information that is necessary and proportionate for the recruitment process, and we consider the rights, expectations and potential impact on candidates before using their information.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We have a legitimate interest in using relevant personal information to respond to enquiries, investigate complaints, resolve disputes, maintain appropriate records and establish, exercise or defend legal claims where necessary. This processing helps us respond fairly and accurately, protect the interests of the individuals and organisations involved, and maintain appropriate evidence of the advice and services we have provided. We only use information that is necessary and proportionate for these purposes and consider the rights, expectations and potential impact on the individuals involved before using their information.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.