Privacy Policy

Effective from: 29 July 2025

1. Who we are

Hazrd is a UK-based digital health and safety platform, operated from Glasgow. We provide incident reporting and compliance tools to businesses in the hospitality sector.

2. What information we collect

We may collect and process the following information when you use our platform:

• Your full name
• Email address
• Organisation and venue details
• Information submitted via incident reports (e.g. names of individuals involved, injuries, time, location, and attached evidence such as images or CCTV)
• Account activity, including IP addresses and login timestamps
• Subscription and payment status (via Stripe)

3. How we collect your data

Your data may be collected in the following ways:

• When you register for an account
• When you submit forms or incident reports
• When you complete a payment using our third-party provider, Stripe
• When you access or use our platform

4. How we use your information

We process your data for the following purposes:

• To create and manage your user account
• To provide you with access to the Hazrd platform and its features
• To support health and safety reporting and compliance functions
• To process subscription payments securely
• To respond to any support requests or queries
• To comply with our legal and regulatory obligations

5. Our lawful basis for processing

Under the UK GDPR, the lawful bases we rely on for processing your personal data are:

• Contractual necessity – to deliver our services and fulfil our agreement with you
• Legitimate interests – to ensure platform security and service improvement
• Legal obligation – where required by law

6. Data security and storage

We store your data on secure, GDPR-compliant servers and apply appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. This includes encryption, access restrictions, and regular platform security reviews.

7. Who we share your data with

We do not sell or rent your data. However, we may share it with trusted third parties, where necessary, to operate our service:

• Stripe – for secure payment processing
• Our email provider – to send account-related communications
• Regulators, courts, or law enforcement – if required to do so by law

8. Data retention

We retain your personal data only for as long as necessary for the purposes set out above. This includes maintaining records for legal or regulatory purposes, or until you request its deletion (where applicable).

9. Children’s data

While our platform is intended for adult users only, certain incident reports may include details about individuals under the age of 18. This data is collected only where strictly necessary for incident reporting purposes and handled in accordance with applicable data protection legislation.

10. Your rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

• Request access to your personal data
• Ask us to correct inaccurate or incomplete data
• Request erasure of your data (in certain circumstances)
• Object to or restrict certain types of data processing
• Request that we transfer your data to another service provider (data portability)
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled

11. Contact us

If you have any questions about this policy or wish to exercise your rights, please contact us at:
privacy@hazrdapp.com