Skip to main content

Privacy policy

How we handle your personal data, your rights and our privacy notices.
Last updated

The Food Standards Agency (FSA) , is the ‘Data Controller’ of the personal information we collect from you or which is provided to us.

​​​This Privacy Policy will describe how we collect and use data in relation to our website. It will also list specific Privacy Notices that we provide to you where we collect your personal data for various specific services and purposes in order to carry out our duties. 

Please refer to our Personal Information Charter to understand further about how and why the FSA collects and processes information, what types of information that we collect, how and where we store your data and what your rights are.

We respect and value the privacy of everyone and only collect and use information in ways that are consistent with your rights and our obligations under the law, including the General Data Protection Regulation (GDPR).

Why we need your personal information 

We process your personal data in a number of ways to deliver our Public Services which are set out in law. Unless we tell you otherwise our legal basis for collecting this information under GDPR is our Public Task which includes but is not limited to collecting information:

  • to regulate the operation of food businesses to the highest standards
  • to inform policy and regulation
  • to assess and mitigate risks to food safety
  • to investigate and prevent food crime  
  • to promote awareness and encourage best practice around food standards and safety

When we collect information from you, we:

  • make sure you know why we need it and why we are allowed to hold it where we are required to do so by law
  • only ask for what we need, and not to collect too much or irrelevant information
  • protect it and make sure nobody has access to it who is not permitted to have access under the law
  • make sure we don’t keep it longer than necessary

What information do we collect through our website?

Training

When you register for a training account with us, we will collect personal data from you such as name, email address, job role, employers name and password.

We collect this information for the purpose of educating a range of stakeholders. We will only use this information to enable you to access our training and certificates and to administer your account. When you registered for an account, we may have made you aware one of our specific Privacy Notices relating to the training that you requested which will be accessible through a link at the end of this Policy.

Contact us

In the Contact Us section of the website, we provide channels that you can use to raise a query, report a problem or receive assistance. When we collect information from you whether you are a Business or a Consumer, we will generally require your name and contact information and details of your query, request or any issue that you may be reporting. We need this information to understand why you are contacting us and respond accordingly in accordance with our Public Task.  

For consumers – Report a food problem

If you are reporting a food problem, for example, if you suspect food poisoning, have issues with a food product or wish to report poor food safety and hygiene practices, we may ask you in the webform, or when you contact us, where you encountered the problem so we can direct your report to the Local Authority that is best placed to investigate it. The information reported on the webform will be transferred to and dealt with directly by the Local Authority and the FSA will not hold a record of your contact details. Alternatively, we may just signpost you to other organisations who are better placed to address your query. For example, if you identify a problem with food labelling, we would advise that you contact Trading Standards.

For businesses – Report a food concern

This section of the website is only intended for use by operators of businesses related to the food sector or local authorities and other agencies that we work with so that they can meet their legal obligations. Consumers should not contact us using webforms or other contact details in this area of the Website.

Where you 'Report a Food Safety Incident' on behalf of your organisation – we will collect your name, role, email address and the address of the organisation that you work for as well as details of the Incident. This will be referred directly to our Incidents Team who will follow up the report with your business. We use Notify.gov.uk to confirm that we have received your report and provide you with a reference.

For businesses – Find business services

Where you wish to 'Find Business Services' for example to register your business, apply for food premises approval or make an appeal against a decision by us or a local authority then information with be collected by us either directly or through the website and shared with the Local Authority where required so we can deal with your request. Where we collect information to provide the service, we will provide you with a specific Privacy Notice which will be listed at the end of this Privacy Policy or you will agree to our Terms and Conditions of Service which will include a Privacy Notice.

For businesses and consumers – Report a food crime

If you 'Report a food crime' then the information that you provide will be transferred to and dealt with directly by the National Food Crime Unit (NFCU),  which is a dedicated law enforcement function of the FSA. Information about NFCU can be found on our website. NFCU will process your information safely and confidentially in accordance with GDPR and the Law Enforcement Directive as appropriate. You can access our Privacy notice - National Food Crime Unit and Privacy notice - Criminal Investigation and Prosecution Team through links at the end of this Policy.

For business and consumers – Give us feedback

Whether you are a business contact or a consumer we will use the information that you provide to make a complaint in accordance with the Complaints Policy that is linked to on our website. Please note that in order to progress a complaint investigation your identity may become known to those who the complaint is made about. This will only arise where it is otherwise impossible to prevent, or it is necessary in order to progress the case. Where applicable, we will explain this to you beforehand. A separate Privacy notice for external complaints made against the FSA is provided at the end of this Privacy Policy.

Subscribe to News, Alerts and Consultations

You have a choice about being contacted for food alerts, allergy alerts, our news and consultations. We will collect certain information from you, for example, email and password, to create an account for you, and so that you are able to consent to what you would like to receive from us and how it is delivered.

These may include updates on:

  • information relating to topic/s selected in user subscription preferences
  • general website / service updates
  • our user surveys

Where we are processing your information on the basis that we have your consent, you can withdraw your consent at any time by updating your subscription preferences in your account or by unsubscribing to the service.

FSA Dashboards

The FSA provides a range of dashboards which we compile from information that we hold to inform stakeholders about various aspects of Food and Feed Regulation and Safety. We will collect information from you when you register to access those service including name, email address, job role, employers name and password and provide you with Terms and Conditions and a Privacy Notice at the Point of Service. You can access it on the The Privacy Notice for Users Registering for Access to FSA Dashboards page.

The information we present in a dashboard, and who we share that information with, is dependent on the purpose of the dashboard. We may combine and analyse information obtained in the course of our regulatory functions, for example about sole traders and businesses, together with information we have obtained from public and private sources. We may gather information from publicly available sources such as websites and make use of web scraping software to carry out our legal powers including for the purpose of helping us evaluate risk.

We do this in line with the exercise of official authority vested in us under the Food Standards Act and the performance of a task carried out in the public interest.

Other services accessed through websites that we operate

From time to time we may provide access to other services through our websites or request feedback in survey linked to through our website. Where these involve the collection of personal information, we will provide you with a specific Privacy Notice at the point of service or we may update this Policy.

How and where do we store your data and who may we share it with?

The FSA treats the security of your information very seriously. The majority of the personal data we process is held on our systems in the UK or EEA in accordance with our Information Security Standards and Policies and all our staff get regular training about how to keep information safe.  

For financial, organisational or technical reasons, we may, on occasion, decide to engage third parties to process data on our behalf. We will not transfer your personal information to any such third party unless we are satisfied that they are able to provide an adequate level of protection in respect of your personal information. We take steps to ensure that these organisations have in place suitable technical and organisational safeguards either through the agreements we hold with them or by confirming they operate in accordance with the EU-U.S. Privacy Shield Framework.

The FSA works closely with Local Authorities and Other Competent Authorities, Government Agencies and Industry Bodies both within and outside the UK and has broad powers to share information with those organisations where it is proportionate and necessary to meeting its objectives. We will only share information where we have a legal basis to do so.

Your Rights

You have a legal right to see a copy of the personal data that we keep about you and to require us to correct any inaccuracies, subject to certain exemptions. In some circumstances you may also have the right to:

  • request that we erase any personal data held about you
  • restrict our processing of your personal data (for example to ask to suspend the processing of personal information to establish its accuracy or the reasons for processing it)
  • data portability (i.e. to request the transfer of personal data to a third party)
  • object to our processing of your personal data

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).

About cookies

When we provide services, we want to make them easy, useful and reliable. food.gov.uk puts small files (known as ‘cookies’) onto your computer to collect information about how you browse the site. Find out how we use cookies and how you can control them.

Other websites

Our website contains links to other websites. This privacy policy only applies to this website and websites that we operate. So, if you follow a link to other websites you should read their privacy policy.

Changes to our privacy policy

We will keep our privacy policy under regular review and will place any updates on this web page. This privacy policy was last updated on the 23 October 2020.

Contact Us

If you have any queries concerning this Privacy Policy, your personal information or any questions on our use of the information, please email our Data Protection Officer in the FSA is the Information Management and Security Team Leader who can be contacted at the email address below.

Privacy notices

We provide privacy notices for the following services: