How I Use the Food Safety Policy Statement Template with Customers in Pilla

I'm Liam Jones, NEBOSH-qualified health and safety consultant, Level 3 Food Safety, and founder of Pilla. This is how I approach food safety policy statements in a food safety management system, based on close to twenty years in frontline operations and advising hundreds of businesses on compliance. You can email me directly; I read every email.

The food safety policy statement is the document most businesses write first and revisit last. I've reviewed hundreds of food safety management systems, and the policy statement is usually a page of corporate language that was copied from a template years ago. Nobody reads it. Nobody knows what it commits the business to. And when an EHO asks the kitchen manager what the policy actually says, the answer is usually a blank look.

That matters more than most people think. Your policy statement is the foundation of your entire food safety management system. Every procedure, every check, every training requirement traces back to it. If the policy is vague, the rest of the system is built on sand. This article walks you through what your food safety policy statement needs to cover, gives you a ready-made template you can edit for your operation, and explains what I look for when I'm reviewing one with a customer.

Key Takeaways

  • What is a food safety policy statement? It's the top-level document in your food safety management system that sets out your business's commitment to food hygiene and safety, your aims and objectives, and the standards you hold yourself to. Everything else in the system flows from it
  • Why do you need one? Regulation (EC) 852/2004 requires food business operators to put food safety procedures in place and maintain them. Your policy statement is the foundation that ties those procedures together, and it's one of the first things an EHO will ask to see
  • How do you set it up in Pilla? Use the knowledge hub template below, edit it to match your operation, and share it with your team through the app so everyone has access and you can track who's read it
  • How do you automate the follow-up? Set up Poppi to chase staff who haven't acknowledged the policy and flag when it's due for review

Article Content

Understanding What's Required of You

Your food safety policy statement is the single document that sits at the top of everything. It's a formal commitment from the business to maintain the highest standards of food hygiene and safety. It covers what the business will do, what it expects from staff, and how it will support them.

The legal basis comes from Regulation (EC) 852/2004, which requires food business operators to put in place, carry out, and maintain a permanent procedure based on HACCP principles. Your policy statement is where you declare that commitment. It's not optional, and it's not a nice-to-have. It's the document that proves to an enforcement officer that your business takes food safety seriously at the leadership level.

When an EHO inspects your premises, the policy statement is usually one of the first things they look at. They want to see that management has made a clear, written commitment. They want to see that the policy covers hazard elimination and risk control, staff training and supervision, prerequisite programmes, and HACCP adherence. A weak or generic policy tells them the rest of the system is probably weak too.

I've sat in kitchens where the owner couldn't tell me what their own policy committed them to. That's a problem. If the person who signed the policy doesn't know what it says, staff have no chance. The policy statement should be something the whole team understands, not just something that lives in a folder for inspection day.

The contamination types your policy needs to address are microbiological, allergenic, physical, and chemical. Your aims and objectives section should make clear that food handlers will be trained to recognise all four, with particular attention to cross-contamination. Most policies I see cover the microbiological risk well but barely mention the other three.

Setting It Up as a Knowledge Hub Entry

I've built a food safety policy statement template in Pilla covering the management commitment, aims and objectives for training and competency, prerequisite programmes, and HACCP principles. It gives you a structured starting point that you should edit to reflect your own business.

In the knowledge hub, create a new entry and tag it with "Food Safety Management System". Use the same tag across all of your food safety policies so they are grouped together and Poppi can track them as a set. Assign the entry to all teams so that everyone in the business can access it.

The template is designed to be edited, not just filed. Read through every section. Where it says "the company", replace it with your business name. Where it lists prerequisite programmes, check each one against what you actually have in place. If you don't run sous vide, take that reference out. If you have specific procedures beyond what's listed, add them. The EHO wants to see that your policy reflects your operation.

Knowledge Hub Template·Food Safety Management System Policy Statement

Food safety management system policy statement

The company will deliver the highest standards of food hygiene and safety in all of its operations.

The company takes food safety very seriously and has fully committed to fulfil all of its duties to take all reasonable precautions and exercise all due diligence to avoid any food safety incidents occurring or harm, illness or injury befalling its customers or clients.

The company will ensure that where possible any hazards are eliminated or removed and where not possible, any remaining risks will be controlled or managed as far as reasonably practicable.

The company will support the management and staff with a range of measures designed to assist with this duty.

Aims and objectives in regard to food safety and hygiene

  • Food handlers will be given information, instruction, training and be supervised to ensure that all relevant and critical practices and procedures are maintained to the highest levels
  • Food handlers are fully informed, trained and competent in regard to the main hazards in food safety namely contamination, multiplication of bacteria and the survival of bacteria
  • Food handlers are fully informed, trained and competent regarding all forms of contamination and how it can occur, can be avoided and how it can be controlled, particular attention will be given to cross contamination. Staff will recognize all forms of contamination - microbiological, allergenic, physical and chemical
  • Food handlers are fully informed, trained and competent to understand the mechanisms that allow micro-organisms to multiply, the importance of that time and temperature and the dangers of spores and toxin formation. Staff will understand and be competent in the control of these hazards
  • Food handlers are fully informed, trained and competent to understand the mechanisms involved in the survival of micro-organisms and how they can ensure that these hazards are eliminated or controlled to ensure safe food
  • Food handlers are fully informed, trained and competent to understand the main processes involved in a HACCP based system, namely receipt and delivery, storage, cooking, preparation, reheating, cooling, hot holding, defrosting, also sous vide controls when applicable. Staff will understand and be competent in monitoring procedures and recording, they will also understand what constitutes safe target levels, what a critical limit is and what corrective actions must be taken to bring things back under control
  • Food handlers will be trained in all aspects of their role including food safety training as well as training in specific procedures regarding allergen control, handwashing procedures, cleaning and disinfection procedures, safe handling, safe working methodology and safe working procedures, as well as any other training specific to their role
  • Food handlers will understand the importance of prerequisite programs in regard to the overall picture of good food hygiene and safety. They will understand the importance of having approved audited suppliers, having robust cleaning and disinfection regimes, the importance of good personal hygiene and understanding the fitness to work policy, pest control and management, good waste management, stock rotation, planned maintenance of equipment, safe potable water and ice, effective labelling procedures as well as traceability and recall procedures amongst many others

The company will also ensure that the 7 main principles of HACCP are adhered to robustly and review the FSMS on an annual basis or whenever a major change occurs, or a food safety complaint or incident occurs.

They will take all possible measures to ensure that at all control procedures are monitored rigidly and that safe target levels are maintained at all times, any deviations above the critical limits will be dealt with according to current catering best practices. They will maintain robust records of all monitoring activity.

This is a preview of the template. In Pilla, you can edit this to match your business.

What I'd want to see when reviewing this:

The opening commitment is the most important part. It needs to be specific and genuine. "The company will deliver the highest standards of food hygiene and safety in all of its operations" is a strong start, but I want to see that backed up by the rest of the document. The commitment to take all reasonable precautions and exercise all due diligence is the legal language that matters. Those are the words an EHO looks for, and they're the words that protect you if something goes wrong.

The aims and objectives section is where most of the substance lives. I'd want to see that it covers all three core hazards: contamination, multiplication of bacteria, and survival of bacteria. It should make clear that food handlers will be trained in all the main processes, from receipt and delivery through to cooking, cooling, hot holding, and reheating. The template covers these, but check that they match what your business actually does.

The prerequisite programmes list should read like a checklist of everything that underpins your food safety system: approved suppliers, cleaning regimes, personal hygiene, pest control, waste management, stock rotation, planned maintenance, safe water and ice, labelling, and traceability. If you can tick each one off and point to a corresponding procedure, you're in good shape.

Common mistakes I see:

The most common mistake is leaving the policy as a generic statement with no connection to the rest of the system. The policy says "food handlers will be given information, instruction, training and be supervised" but there's no training plan, no training records, and no supervision structure. The policy makes promises the business isn't keeping.

I see businesses that list prerequisite programmes in their policy but haven't actually set up half of them. The policy mentions traceability and recall procedures, but when I ask to see their traceability records, there's nothing there. Your policy should only commit to things you can evidence.

The HACCP section often says the business will "adhere to the 7 main principles" without anyone on site being able to name them. If your policy references HACCP, at least the manager responsible for food safety should understand what that means in practice: hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification, and record keeping.

The annual review commitment is in the template, but I rarely see businesses that actually do it. The policy says you'll review the system annually, after major changes, or after incidents. Put a date in your calendar. If the review doesn't happen, the commitment is meaningless, and an EHO will ask when it was last reviewed.

Automate the Follow-Up with Poppi

Writing the policy is one thing. Making sure your team has actually read it is another. Poppi can handle the chasing so you don't have to.

If you mark the knowledge hub entry as mandatory, Poppi will track who's read it and who hasn't. You can set up automations to chase staff who are behind, notify managers when someone completes the policy, and get a regular report showing where the gaps are.

Here are three automations I'd set up for any knowledge hub policy:

Overdue training reminders

Automatically chase team members who have mandatory policies they haven't read yet. Poppi sends the reminder so you don't have to.

Poppi
Poppi

Tom, you have 2 overdue policies to read and acknowledge

Video completion alerts

Get notified when a team member finishes reading or watching a policy, so you can track progress without chasing.

Poppi
Poppi

Emma has completed a mandatory policy

Training gap analysis

Get a regular AI report showing which team members are behind on mandatory policies and where the gaps are across your team.

Poppi
Poppi

Training Report: 87% team completion. Tom and Sarah behind on 2 mandatory policies, due 3 days ago.

What does your food safety policy need to say about HACCP?

Your food safety policy should clearly outline your commitment to the Hazard Analysis and Critical Control Points (HACCP) system by detailing how hazards will be identified, evaluated, and controlled.

Read more →
How should your food safety policy address reviews and updates?

Your food safety policy should specify the frequency of reviews and the procedure for updates to ensure it remains relevant to current regulations and operational changes.

Read more →
How should a food safety policy describe risk management?

A food safety policy should clearly outline how risks are identified, assessed, and managed in a busy kitchen.

Read more →
What should your food safety policy say about staff training?

A comprehensive food safety policy should specify that all staff members receive thorough initial training on food safety practices when they join and ongoing training to keep up with the latest food safety standards and practices. It should also define the responsibility of management to provide this training and ensure compliance.

Read more →
How long should a food safety policy statement be?

A food safety policy statement should be sufficiently lengthy to cover all necessary safety aspects relevant to your business yet concise to ensure readability and understanding.

Read more →
What is a food safety policy statement?

A food safety policy statement is a written commitment by a hospitality business to uphold safe food handling, preparation, and storage practices.

Read more →
What should the opening commitment of a food safety policy include?

The opening commitment of a food safety policy should explicitly state the company's dedication to the highest standards of food safety, outlining adherence to laws and regulations and prioritising customer and staff health and safety. This is fundamental for establishing the importance of food safety within the company.

Read more →
What supporting systems should be included in a food safety policy?

A comprehensive food safety policy should include systems such as cleaning schedules, pest control measures, and supplier checks.

Read more →
When should you write or update a food safety policy?

Every business in the hospitality sector should have a written food safety policy from the outset.

Read more →