Privacy policy

Last updated: 10 November 2026

FCP.nz is operated by ReadyPart Limited. This policy covers our public website, admin and staff workspaces, and installed web app (PWA). Contact our privacy officer at appsupport@certified.nz.

Information we collect

• Accounts and businesses: names, email addresses, password hashes, business details, team membership and permissions.
• Food safety records: staff names, checks, temperatures, equipment, suppliers, deliveries, cleaning, pests, maintenance, training, corrective actions, review decisions, notes and timestamps. Staff sickness entries may contain health information.
• Service information: support correspondence, sign-in and recovery activity, session identifiers, browser and connection information, IP addresses and server logs.

Information may come from you, your business administrator or colleagues who enter records. Your business should tell staff how it uses their information. Please enter only the personal information needed for food safety and avoid unrelated health details in free-text notes. Without the information needed for an account or record, we may not be able to provide that feature.

Why we use it

We use information to provide accounts and business workspaces, store and display records, generate reports, send account and security emails, respond to support requests, diagnose faults and protect the service. We do not sell personal information or use food safety records for advertising.

Who can see it

Your business controls who has access to its workspace. Authorised staff, supervisors and administrators can see information made available by their role. A shared staff workspace is not a private personal account: selecting a staff name attributes an entry but does not prove that person's identity. Keep shared devices and the workspace PIN secure.

Authorised service administrators may access information needed to operate and support FCP.nz. After successful registration, your name, email address and registration time are emailed to our support team to review new accounts. Passwords and workspace PINs are not included. Hosting and email providers process information needed to deliver the service and may process information outside New Zealand. We take reasonable steps to protect information handled for us. We may also disclose information where legally required or permitted, including to address a serious security incident.

Business administrators can download daily PDF reports and share them, for example with a verifier. The business is responsible for handling those copies safely. The current service does not automatically send records to verifiers or regulators.

Cookies, browser storage and devices

Essential cookies keep you signed in. Browser storage remembers interface preferences and installation choices. The public website currently has no advertising or analytics trackers. Installing the PWA does not enable offline recording: records still require a working internet connection. Downloaded PDFs remain on the device until you remove them.

Security

Live connections use HTTPS and account passwords are stored as hashes. The shared workspace PIN has a hash for checking it and an encrypted copy so authorised administrators and designated supervisors can view it. A PIN only reopens a deliberately closed, already signed-in workspace; it is not a replacement for an account password. No system can guarantee absolute security.

Retention and deletion

Food safety records, including earlier versions and review history, do not currently have an automatic expiry. A daily PDF shows the current saved state for that day, not every earlier version. Removing a staff name or closing a workspace does not erase its records.

Account information, support records, logs and recovery backups have different retention needs; there is not currently one fixed deletion period for all of them. We review deletion requests against the purpose of the information and any necessary legal, security or record-keeping requirements. We explain any information we need to retain and the reason. Backups are not instantly erased when active data is removed; deletion requests must also be respected if a backup is restored.

To request account closure or deletion, see Request account deletion. Closing an individual account does not automatically delete a business's food safety records or other users' information.

Access, correction and complaints

Email appsupport@certified.nz to ask for access to or correction of your personal information, or raise a privacy concern. We may verify your identity and coordinate with your business where it controls the records. We respond to access and correction requests as soon as reasonably practicable, normally within 20 working days, and tell you if a lawful extension is needed. You may ask us to attach a statement of correction if we decline a correction.

You can also contact the New Zealand Privacy Commissioner.

Changes

We update the date on this page when this policy changes and will notify account holders of material changes affecting their information.