Why we collect your information

This system collects personal information to manage kitchen bookings, recipes, and food technology class activities for authorised staff and students.

What information we collect

• Staff: Name, email address, role, login activity
• Students: Name, class enrolment, medical/dietary conditions where required for safety
• Activity: All system actions are logged for security and audit purposes

How we protect your information

• All data is encrypted in transit using HTTPS/TLS
• Student medical information is encrypted at rest using AES-256-GCM
• Access is restricted by role — staff only see data relevant to their function
• All access to sensitive data is logged and auditable
• Passwords are stored using bcrypt hashing and never in plain text

Who we share it with

Information is not disclosed to third parties. AI recipe generation features do not transmit any student or personal information to external services.

Data retention

Inactive student medical information is retained for at least 7 years from its last update before secure removal. Staff login, notification, reminder and audit records are normally retained for 1 year. Short-lived authentication records are removed sooner. Legal holds, active investigations or statutory requirements may pause deletion.

Your rights

You have the right to access and request correction of personal information held about you. To make a request, contact your system administrator.