Privacy notice

Last updated 15 May 2026.

This notice explains how Food Hygiene Ratings handles visitor data. The records we display about food premises concern businesses, not natural persons, so most of UK GDPR doesn't bite on them.

1. Who we are

Food Hygiene Ratings is operated by Oliver Wakefield-Smith, a sole trader based in London, United Kingdom. For the purposes of UK GDPR I am the data controller for personal data processed on this site.

Contact: contact@foodhygieneratings.com

We are not the Food Standards Agency. The official UK food hygiene rating record is at ratings.food.gov.uk.

2. The data we display is about businesses, not people

The records on this site (restaurants, takeaways, retailers, schools, mobile caterers, etc) describe food businesses, not natural persons. They list the trading name of the business, its address, its hygiene rating, and inspection details. They do not list individual employees, owners, or directors. As a result, this data largely falls outside UK GDPR's scope - UK GDPR governs personal data about identified or identifiable living individuals, and a business premise isn't one.

In the rare edge case where a business is a sole trader and the business name isthe trader's personal name, we still consider the public-task / legitimate-interest basis (the FSA publishes this data on a statutory basis under the Food Safety Act regulations) sufficient. The FSA itself, as data controller of the source dataset, has no Article 14 obligation when publishing the ratings, and neither do we.

3. What we do collect about visitors

  • Server access logs. IP address and user-agent, retained for up to 30 days for security and abuse detection.
  • Aggregate analytics via Google Analytics 4 with IP-anonymisation enabled (see section 6).

We do not use advertising cookies, do not sell visitor data, and do not build behavioural profiles of identified individuals.

4. Visitor rights

Under UK GDPR you have the standard data-subject rights regarding the limited personal data we hold about you (server logs, GA4 cookies):

  • Right of access (Art. 15) - ask us what we hold
  • Right to erasure (Art. 17) - ask us to delete it
  • Right to object (Art. 21) - ask us to stop processing
  • Right to complain to the ICO at ico.org.uk or 0303 123 1113

Email contact@foodhygieneratings.com to exercise any of these.

5. Where the data comes from

All hygiene rating data shown on this site is sourced directly from:

This data is made available by the FSA under the Open Government Licence v3.0, which permits free use including for commercial purposes.

The FSA, as the publisher of this dataset, is the data controller for the source record. We mirror it.

6. Cookies and tracking

Google Analytics 4. We use Google Analytics 4 to understand which pages are popular and how the site is performing. GA4 sets two first-party cookies (_ga, _ga_J0X4F09DD1) which contain a randomly generated client identifier, used to distinguish unique sessions. We have enabled IP-anonymisation, so the last octet of your IP is dropped before Google stores any data. We do not use Google Signals, ad personalisation, or remarketing audiences. Data is processed under our legitimate interest (Article 6(1)(f) UK GDPR) in understanding site usage at an aggregate level. You can opt out by installing the official Google Analytics opt-out browser add-on or by blocking googletagmanager.com in your browser settings.

Cloudflare. Cloudflare sits in front of the site for DDoS protection, caching, and TLS termination. Cloudflare may set operational cookies (e.g. __cf_bm bot-management) that do not personally identify you and are not used for tracking.

No advertising or third-party trackers. We do not run advertising on this site, do not embed third-party social widgets, and do not sell or share visitor data with brokers.

7. Changes to this notice

We may update this notice from time to time. The “last updated” date at the top of this page will change accordingly.

Related