Privacy Policy

Last Updated: September 28, 2026

1. Introduction & Data Controller

Welcome to passyoureho.com. We respect your privacy and are committed to protecting your personal data.

This website (passyoureho.com) is operated by H@ME EVENTS LIMITED (“we”, “us”, “our”, or “the Company”), trading as Pass Your EHO. Our services include Environmental Health Officer (EHO) consultancy, pre-inspection support, and compliance advice for restaurants, food businesses, and commercial properties under the direction of Olga Wylde (Managing Director).

H@ME EVENTS LIMITED is the Data Controller responsible for your personal data collected through this website.

Trading Name: Pass Your EHO
Website: passyoureho.com
Company Legal Name: H@ME EVENTS LIMITED
Company Registration Number: 06613183 (Registered in England & Wales)
VAT Registration Number: GB 489 872 608
Managing Director: Olga Wylde
Registered Address: Summit House, Horsecroft Road, Harlow, CM19 5BN, United Kingdom
Contact Email: Olgawylde@gmail.com
Contact Phone: +44 7938 909614

2. Information We Collect About You

We may collect, use, store, and transfer different kinds of personal data depending on how you interact with our website:

Identity Data: First name, last name, business or trading name, job title, and role (e.g., Restaurant Owner/Manager).
Contact Data: Email address, telephone numbers, billing address, and property/premises addresses requiring inspection.
Booking & Service Data: Details of services requested, booked inspection dates, property size, venue type, notes provided during booking, and records of communication with Olga Wylde or our consultancy team.
Financial & Transaction Data: Details about payments made for services, invoice records, VAT documentation, and payment details (processed securely via our third-party payment provider).
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and hardware information.
Usage Data: Information about how you navigate and interact with our website, blog posts, and booking schedules.

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

Direct Interactions: You give us your Identity, Contact, Financial, and Booking details when you:
- Book an inspection or consultation with Olga Wylde.
- Contact us directly by email, WhatsApp or telephone.
- Ask us to provide a quotation or arrange consultancy support.
- Request marketing or advice materials.
Automated Technologies: Our hosting service uses technical logs to operate and protect the website. Optional analytics and advertising are controlled by your cookie choices; browsing to another page does not give consent.

4. Lawful Basis for Processing Your Data

Under UK GDPR and UK tax legislation, we must have a lawful basis to process your personal data:

Purpose / Activity	Type of Data	Lawful Basis for Processing
Booking & Consultation: Processing bookings for Olga Wylde, conducting premises inspections, and managing service delivery.	Identity, Contact, Booking, Financial	Contract: Necessary to perform the contract entered into with you.
Payment & VAT Processing: Charging for inspections, issuing VAT invoices, and maintaining accounting records.	Financial, Transaction, Contact	Legal Obligation & Contract: Compliance with HMRC tax/VAT laws and contractual obligations.
Customer Support: Responding to website enquiries and managing client communications.	Identity, Contact, Service Data	Legitimate Interest: To efficiently answer business enquiries and manage client relationships.
Business Communications: Responding to service enquiries and, where permitted, sending relevant B2B service information.	Identity, Contact	Consent: Where you have explicitly opted in. Legitimate Interest: For direct B2B marketing to existing commercial clients (with opt-out at any time).
Website Security: Operating and protecting the website and preventing misuse.	Technical, Usage	Legitimate Interest: To operate a secure, reliable website. Optional analytics and advertising, when enabled, use consent.

5. How We Share Your Data

We do not sell your personal data. We only share your personal data with trusted third parties necessary to operate our business and deliver services:

Service Providers: IT, web-hosting and email providers used to operate the website and respond to enquiries; payment providers where used for agreed services.
Professional Advisors & HMRC: Accountants, auditors, tax authorities (HMRC for VAT and statutory filing purposes), and legal advisors.
Regulatory Authorities: Statutory bodies where required by law.

All third-party processors are required to handle your personal data in accordance with UK GDPR and process it strictly under our instructions.

6. International Data Transfers

Where we use third-party service providers (such as cloud hosting or booking tools) based outside the United Kingdom, we ensure appropriate safeguards (such as UK International Data Transfer Agreements or Adequacy Decisions) are in place to afford personal data the same protection as in the UK.

7. Data Security

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. Access to your data is restricted to authorized personnel (including Olga Wylde and core operational staff) who have a direct business need to know.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Booking, Inspection & VAT Records: Retained for 6 years following the end of the financial year to comply with HMRC tax/VAT rules and legal claims.
General Enquiries: Retained for up to 2 years if no booking or service is completed.
Marketing Records: Retained until you opt out or request deletion.

8A. EHO Rating Checker and Uploaded Reports

When you use the Check My EHO Rating service and select a business, we record limited information from the public Food Standards Agency record: the business name, postcode, establishment ID, current rating, rating date, local authority and the time of selection. This private activity record is retained for up to 30 days. We do not retain your raw search words or IP address in that activity log. A one-way technical identifier may be used temporarily to control request rates and avoid duplicate entries.

If you submit an enquiry, we record your contact details, business details, requested help, preferred language and contact arrangements, enquiry explanation, email-notification status and whether a report was attached in the private checker lead log for up to 90 days. This helps Olga respond and follow up reliably. The enquiry email and any attachment may then be retained under our general enquiry period above.

Uploading an EHO inspection report, letter or action list is optional. An uploaded document is not displayed publicly. It is transmitted over HTTPS and processed as a temporary upload, without being added to the public media library or public uploads directory. It is attached to the enquiry email sent to Olga and the temporary file is deleted after processing. If email sending fails, the report is not retained; your enquiry details remain in the private log and you will be asked to contact Olga to arrange another way to share it. Please remove unnecessary personal information about staff, customers or other individuals before uploading.

The checker retrieves official published rating information from the Food Standards Agency and relevant local authorities. We process checker activity and enquiries on the basis of our legitimate interests in providing the service, preventing misuse and responding to potential clients, and on the consent you give when submitting the enquiry form. The checker does not create automatically indexed pages for individual businesses.

8B. Visit Quote Calculator

When you request a visit estimate, our server sends your business postcode to Postcodes.io and approximate route coordinates to the OSRM routing service operated by FOSSGIS. These providers may log technical requests under their own privacy terms. We do not send your name, email address, enquiry or uploaded report to these lookup services. Postcode lookups may be cached for 30 days and route calculations for 7 days. A temporary one-way identifier is used to limit excessive requests. These functions support your requested estimate and website security; they are separate from advertising.

If you choose to carry the estimate into an enquiry, the selected service, postcode and estimate are held in your browser’s session storage for a handover valid for 30 minutes, then removed when used. Nothing is sent as an enquiry until you submit the contact form.

9. Your Legal Rights

Under the UK GDPR, you have rights regarding your personal information:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no legal reason for us continuing to hold it.
Right to Restrict Processing: Request us to suspend processing your personal data.
Right to Data Portability: Request transfer of your data to another party.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at Olgawylde@gmail.com.

10. Cookies

You can browse, check ratings, calculate a visit estimate and enquire without accepting optional cookies. We use necessary cookie preferences to remember your choices. The homepage does not display an automatic notice; other pages offer Accept optional, Reject optional and individual choices. Moving between pages is not consent. Use Cookie settings or our Cookie Policy to change or withdraw your choice.

With your Statistics consent, we use Google Analytics to understand page visits, visit sources, approximate location and browser or device information, and to improve this website. Google processes this information for us; processing may take place outside the UK, including in the United States, under the safeguards in Google’s applicable data-processing terms. Our user-level and event-level retention settings are two months, without resetting the user retention period on a new visit. Aggregated reports may remain available for longer.

Analytics cookies and their lifetimes are listed in our Cookie Policy. You can refuse or withdraw Statistics consent in Cookie settings. Automatic form-interaction and site-search measurement are disabled. We do not intentionally send enquiry text, contact details or uploaded EHO reports to Analytics. See how Google uses information from sites that use its services.

Google Ads and retargeting remain inactive. We will update these notices before enabling advertising tracking, which will require Marketing consent separately from submitting an enquiry.

11. Complaints & Contacting the Regulator

If you have any questions or concerns regarding this Privacy Policy or how H@ME EVENTS LIMITED handles your data, please contact us first at Olgawylde@gmail.com or +44 7938 909614 so we can assist you directly.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: www.ico.org.uk
Helpline: 0303 123 1113

12. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. Any updates will be posted on this page with an updated “Last Updated” date.