Last updated: 1 September 2026
1. Who is responsible for personal data
Apron Recruit Ltd, trading as Profit Point Hospitality and HACCP Made Simple, is the data controller responsible for the personal information described in this Privacy Notice.
Registered in England and Wales. Company number 11628487.
2. Information that may be collected
Product-enquiry and contact information
Name, business name, email address, business type, number of sites and information included in an enquiry.
Account and user information
Where software access is provided, this may include a user’s name, work email address, role, account identifier and authentication or session information.
Site and business information
Information supplied to configure the service around a hospitality operation, such as site details, equipment, suppliers, processes, responsibilities and operating controls.
Use of the service and operational records
Where applicable, this may include user-attributed checks, corrective actions, timestamps, verification, review information and audit history entered or generated through use of the configured service.
Technical and security information
Where produced by the service or its infrastructure, this may include device, browser, network, access, security and diagnostic information needed to operate, protect and troubleshoot the service.
3. Why information is processed
- To manage product requests and answer enquiries.
- To provide, configure, secure and support authorised use of the service where access is available.
- To preserve attributable operational records and audit history where those functions are implemented.
- To diagnose faults, prevent misuse and maintain service security.
- To meet applicable legal obligations and establish, exercise or defend legal claims where necessary.
4. Lawful basis
We process personal information only where a lawful basis applies. Depending on the purpose and circumstances, this may include responding to a request, providing the service, meeting legal obligations, pursuing legitimate interests or obtaining consent where required.
5. Who information may be shared with
Information may need to be shared with authorised personnel and service providers that support hosting, authentication, communications, security, storage or software operations. It may also be disclosed where required by law.
6. International transfers
If personal information is transferred outside the UK, appropriate safeguards required by applicable data-protection law will be used.
7. Data retention
Personal information should be kept only for as long as needed for the relevant purpose, subject to legal, security and record-keeping requirements.
8. Security
Reasonable technical and organisational measures are used to protect information against unauthorised access, alteration, loss or disclosure. No online service can promise absolute security.
9. Data-protection rights
Depending on the circumstances and lawful basis, individuals may have rights to be informed, access their information, correct inaccurate information, request erasure or restriction, object to processing, and receive or transfer certain information. Some rights are subject to legal limits.
To make a request, email haccp@profitpointhospitality.co.uk.
10. Complaints
Please raise privacy concerns using the contact address above. Individuals may also complain to the UK supervisory authority, the Information Commissioner’s Office.
11. Contact
Email: haccp@profitpointhospitality.co.uk
12. Updates to this notice
This notice may be updated as the service, legal arrangements and processing activities are confirmed. Material changes should be communicated through an appropriate channel.