Privacy Policy

Last updated: 29 June 2026

VanGuard ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use, and protect information when you use our food safety compliance app at vanguardapp.co.uk.

1. Who We Are

VanGuard is operated as a sole trader business in England, UK. You can contact us at hello@vanguardapp.co.uk.

2. Data We Collect

We collect the following personal data when you use VanGuard:

• Account data: your name, email address, and business name (provided at registration)
• Profile data: unit type, local authority, LPG status, and EHO hygiene rating
• Compliance records: temperature logs, cleaning records, van checks, LPG logs, water logs, and pitch logs you create within the app
• Payment data: payment processing is handled by Stripe — we do not store card details
• Usage data: basic analytics to help us improve the service

3. How We Use Your Data

We use your data to:

• Provide and operate the VanGuard compliance service
• Send you transactional emails (account confirmation, password reset, payment receipts)
• Improve and maintain the app
• Comply with our legal obligations

We do not sell your data to third parties or use it for advertising.

4. Legal Basis for Processing

We process your data on the basis of:

• Contract: to provide the service you have signed up for
• Legitimate interests: to improve our service and prevent abuse
• Legal obligation: where required by law

5. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL), hosted on AWS infrastructure in the EU. We use industry-standard encryption (TLS/SSL) for all data in transit. Access to your data is protected by Row Level Security — only you can access your records.

6. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication (Privacy Policy)
• Stripe — payment processing (Privacy Policy)
• Resend — transactional email (Privacy Policy)
• Netlify — hosting and serverless functions (Privacy Policy)

7. Data Retention

We retain your account and compliance records for as long as your account is active. If you delete your account, your data will be permanently deleted within 30 days. You may request earlier deletion at any time.

8. Your Rights (UK GDPR)

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request we restrict processing of your data

To exercise any of these rights, contact us at hello@vanguardapp.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

VanGuard uses only essential cookies and browser local storage to keep you signed in. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email or in-app notice for any significant changes. Continued use of VanGuard after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries, contact us at hello@vanguardapp.co.uk.