Last updated Friday 23 October 2026
Scope
This policy applies to the Blossom School Catering web application for Family, Student, Admin, Kitchen, and Delivery users.
Data used
- Account information such as name, username, phone number, and email.
- Family and student linkage data.
- Student-school linkage data for ordering and delivery.
- Order, billing, payment proof, rating, and delivery records.
Purpose
- To provide registration, login, ordering, billing, rating, delivery, and reporting functions.
- To maintain operational accuracy and role-based access control.
Security
- Passwords are stored as hashes, never as plain text.
- Admin actions are recorded in audit logs.
- Payment proof and other protected files are only accessible through authenticated flows.
User responsibility
- Keep your login details private.
- Keep any registration confirmation details safely.
- Contact support quickly if wrong family, student, or school details are shown.