Privacy & Terms

Hygiene Intelligence is a service of TECH-HYGIENE LIMITED, registered in England and Wales under company number 15440260.

For data protection purposes, our role depends on the activity. We are the controller for website enquiries, our account security and normal business administration. For client-directed portal contacts and service records, our role will also be set out in the client contract and data-processing terms.

• Enquiry information: name, work email, organisation, workplace, timing and the message you send, so we can respond.
• Account information: name, work email, organisation, role, sign-in and security information, so we can provide and protect private access.
• Service information: client and site links, agreed scope, meeting dates, selected-surface records, issue history and permitted supporting photographs, so we can prepare and preserve private monthly briefs.
• Technical information: limited request, security and consent records and, if you allow it, Google Analytics information about public-page visits, referral source, browser and device details, approximate location and selected guide actions. Private platform activity, reports, account details and form contents are excluded from Google Analytics.

We do not intentionally need health, HR, special-category, criminal-offence or employee-performance information. Clients and users should not put this information in notes or photographs.

The monthly service is not used for public profiling, employee monitoring, provider scoring, automated decisions, safety certification or advertising profiles.

We use legitimate interests where necessary to respond to business enquiries, provide the requested workplace evidence service, administer authorised users, keep accurate business records, and protect the service from abuse. These are limited business and security purposes which people using a commercial service can reasonably expect.

We may use contract where processing is necessary to take a step an individual asks us to take before entering a contract, or to deliver a contract directly with that individual. We may use legal obligation where UK law requires us to keep or disclose particular records.

We rely on your consent for optional Google Analytics and its related browser storage.

Optional website analytics stays off unless you allow it. You can change that choice through the cookie settings.

We use Vercel for hosting and request logs, Supabase for the database and private file storage, Resend for service and enquiry email, and—only after optional consent—Google Analytics for public-website measurement. We may also share information with professional advisers, authorities where legally required, and client-approved recipients.

We do not sell personal information. Some providers may process information outside the UK. Where that happens, we require an applicable lawful transfer mechanism and provider safeguards.

Private issued briefs and supporting records are available only through authorised account and client workflows. We do not publish public evidence profiles, scores, badges or raw readings.

• Website enquiries: up to 24 months after the last update, unless a longer period is needed for an active client relationship or legal reason.
• Optional Google Analytics event-level information: the shortest practical setting available in the Analytics account and never more than 14 months.
• Cookie-consent records: up to 12 months.
• Used reset and invite tokens: up to 7 days; expired tokens and expired onboarding drafts: up to 30 days after expiry.
• Account activity and security logs: up to 24 months.
• Client, site, issued-brief, evidence and permitted photograph records: for the service term and the retention period agreed in the client contract, with access removed at offboarding and periodic review for deletion or anonymisation.

We may keep the minimum information needed for legal, accounting, insurance, security or dispute purposes. We delete or minimise information when its purpose and any required retention period end.

• ask for a copy of personal information we hold about you
• ask us to correct inaccurate or incomplete information
• ask us to delete or restrict information where the law allows
• object to processing based on legitimate interests
• stop direct marketing at any time
• complain to the Information Commissioner’s Office

We may need to confirm your identity and the organisation or workplace involved before acting on a request. Some rights depend on the lawful basis and circumstances.

Hygiene Intelligence records factual information from agreed selected surfaces and prepares private monthly briefs. Each record is limited to the surface, time, method and context recorded.

The service does not assess every surface or represent the whole workplace. It does not prove whether a particular cleaning task happened, identify pathogens, certify safety, sterility, health outcomes or legal compliance, judge contractor performance, or replace the client’s professional, contractual or legal responsibilities.

A signed order form, service agreement or data-processing agreement takes priority where it sets more specific terms for a client.

Email contact@techhygieneltd.com for a privacy request, correction, complaint or service question.

You can also complain to the Information Commissioner’s Office.

Read our Cookie and Local Storage Notice.