1. Introduction
This Privacy Policy explains how Hospitality Passport Ltd ("HP", "we", "our") collects, uses, and protects your personal data.
2. Data We Collect
Candidates
- Name
- Email address
- Date of birth
- Training progress
- Certificate data
- Payment information (processed by third-party provider)
Operators
- Name
- Organisation details
- Candidate compliance data
3. How We Use Your Data
We use your data to:
- create and manage your account
- deliver training modules
- store certificates
- provide operator compliance dashboards
- process payments
- send renewal reminders
- improve platform performance
4. Legal Basis
We process data under:
- Contractual obligation (providing the passport service)
- Legitimate interest (compliance tracking for operators)
- Consent (marketing communications, optional)
5. Data Sharing
We share data only with:
- accredited training providers (for enrolment and completion)
- operators you explicitly link your passport to
- payment processors
- technical partners providing secure hosting and analytics
We do not sell your data.
6. Data Storage & Security
Data is stored securely in the UK/EU using encrypted services. Access is restricted to authorised personnel only.
7. Cookies
We use cookies for:
- login sessions
- analytics
- platform performance
You can manage cookie preferences in your browser.
8. Retention
Candidate data is retained for the duration of your passport and any renewal period. Operator data is retained while the organisation maintains an active account.
9. Your Rights
Under GDPR, you have the right to:
- access your data
- correct inaccuracies
- request deletion
- restrict processing
- request data portability
Contact us to exercise these rights.
10. Contact
Hospitality Passport Ltd Email: privacy@hospitalitypassport.co.uk