CSACSA FSMSCulinary Strategy AppBack to FSMS
Legal

Privacy

This notice explains the main categories of information Culinary Strategy may handle through this website and the CSA Food Safety Management System, and the purposes for which that information is used.

Effective: 17 October 2026

This is a general privacy notice for the website and FSMS service. Customer contracts or order forms may contain additional data-processing terms for a particular deployment.

Information we may collect

Depending on how you use the service, information may include business and account details, names and contact details, user roles, food-safety records, corrective actions, uploaded photos or documents, support communications, and technical information needed to operate and secure the service.

How information is used

Information is used to provide and administer the FSMS, authenticate users, maintain food-safety records and audit history, provide support, manage subscriptions, secure the service, and improve service reliability and usability.

Customer food-safety records

Food-safety records created within a customer account are operational records for that customer. Access is controlled through the roles and property/group structure configured for the account.

Service providers

Culinary Strategy may use specialist infrastructure and service providers to host, secure, communicate, support or operate the service. Information is shared with providers only to the extent needed for those functions or where required by law.

Support access

Culinary Strategy platform administrators can open a customer's account to set it up and give support. Each entry is recorded, and anything an administrator does is stamped with their name and marked as platform support, so it can't be mistaken for the customer's own record.

Website analytics

This website uses Cloudflare Web Analytics to count visits and see which pages are used. It does not use cookies or track individual visitors across other sites.

Retention

Information is retained for as long as reasonably required to provide the service, maintain account and audit history, meet contractual obligations, resolve disputes, or satisfy applicable legal requirements. Customer-specific retention arrangements may also be set out in a service agreement.

Your requests

For questions about personal information, access, correction or other privacy requests, contact [email protected]. Requests will be handled subject to applicable law and any contractual obligations concerning business records.

Security

For an overview of the service's security and evidence controls, see Data & Security.

Changes

This notice may be updated as the service changes. The effective date above will be revised when material updates are published.