Allergen Incidents: Building a Response Plan Before You Need It

An allergen incident — a customer having an allergic reaction to your product — is a scenario every food business hopes to avoid. But having a response plan ready before an incident occurs is the difference between a managed crisis and an uncontrolled one.

What an Allergen Incident Response Plan Covers

A well-designed plan should address:

1. Immediate response: What does the person who receives the complaint do first?
2. Escalation: Who is notified internally (management, food safety lead)?
3. Information gathering: What product, what batch, what allergen, what reaction?
4. Product hold: If a labelling error is suspected, how is affected stock held?
5. Authority notification: When and how to notify local authority or FSA?
6. Customer communication: What do you tell the affected customer?
7. Post-incident review: How do you investigate root cause and prevent recurrence?

The Documentation Trail

Every allergen incident should generate a written record. If the incident leads to enforcement action or litigation, this documentation is essential. Include: the date and time, the product involved, the batch or lot code, the customer's account of their reaction, and every action taken.

Product Withdrawal vs Recall

If a labelling error is identified that creates a safety risk across a product line, a product withdrawal (removing from sale) or recall (retrieving from customers) may be required. Have the decision criteria for this defined in advance.

Training Your Team to Recognise an Incident

One of the most overlooked elements of any allergen incident response plan is ensuring that every member of your team — not just management — knows what an incident looks like when it arrives. Allergen reactions can be reported via email, phone, social media messages, or even a review left on your Shopify storefront. If the person who first receives that contact does not recognise it as a potential allergen incident, the response clock does not start. That delay can have serious consequences both for the customer and for your business.

Every front-facing member of your team should be trained to ask two simple questions when any complaint about a food product arrives: "Does this involve a physical reaction after eating the product?" and "Does the customer mention an allergy or intolerance?" If the answer to either question is yes, the complaint should be treated as a potential allergen incident immediately, not passed to customer service as a routine matter. This threshold should be low and consistent, regardless of the severity described, because early-stage reactions can escalate quickly and you rarely have full information at the point of first contact.

Written training records matter here too. If enforcement action follows an incident, regulators will want to know that your staff understood their responsibilities. Keep a log of who received allergen awareness training, when they received it, and what that training covered. Brief annual refreshers that include the incident recognition process will support your compliance posture and give your team the confidence to act correctly under pressure, which is exactly when clarity is most needed.

First Hours: What to Do Immediately After an Incident Is Reported

The first two hours after an allergen incident is reported are the most operationally critical. Your immediate priority is the welfare of the affected customer. Advise them to seek medical attention if they have not already done so, and do not wait for them to describe their symptoms in full before doing this. Record the exact time you received the report and the exact time you gave that advice. These timestamps matter if the incident is later reviewed by a regulator or a court.

Simultaneously, identify the product and batch in question as precisely as possible. Pull your batch records, check your production notes, and cross-reference the allergen information that was live on your Shopify product listing at the time of purchase. If your allergen data is stored accurately and accessibly — for example, through a structured tool like Allergen Matrix — this retrieval should take minutes, not hours. Speed here is not just operationally helpful; it demonstrates to any subsequent investigation that your systems were fit for purpose.

Once you have identified the product and batch, place an immediate internal hold on remaining stock of that batch. This does not mean a public recall has been triggered — it means you are preserving your ability to investigate without selling further units that may be implicated. Notify your food safety lead, or if you are a sole trader, your local authority environmental health contact. Do not wait until you have confirmed the cause before making this notification. Early, voluntary contact with authorities is consistently viewed more favourably than delayed or reactive reporting.

Communicating With the Affected Customer

How you communicate with a customer who has experienced an allergic reaction will shape both their wellbeing and your legal exposure. The instinct to say as little as possible for fear of admitting liability is understandable, but it is usually counterproductive. Customers who feel ignored or dismissed after a serious reaction are far more likely to escalate to regulators, the media, or legal action. Prompt, honest, and human communication is your strongest tool in managing the relationship through a crisis.

Your first communication should focus entirely on the customer's health. Express genuine concern, confirm you take the report seriously, and ensure they have sought or are seeking medical attention. Avoid defensive language, do not immediately query whether they may have misread the label, and do not offer compensation in the same breath — that can create additional legal complications. What you are doing in this first message is establishing trust and demonstrating that your business treats food safety as a priority, not an inconvenience.

As your investigation progresses, keep the customer informed with factual updates at agreed intervals. If you discover a labelling error or a production fault, you will need to decide with legal advice how much detail to share and when. But the principle of keeping communication open and respectful should hold throughout. Document every message exchanged — email threads, call logs, chat records — and store them as part of your incident file. This paper trail protects both parties and provides the clear chronology that any serious investigation will require.

Conducting a Root Cause Investigation

Once the immediate response is complete and the affected customer is receiving appropriate care, your attention should shift to understanding how the incident occurred. A root cause investigation is not about attributing blame internally — it is about identifying the systemic failure that allowed an allergen risk to reach a customer, so that it cannot happen again. Without this step, you may resolve the immediate crisis but leave the underlying vulnerability intact.

Begin by examining every stage at which the allergen information for the implicated product was recorded, reviewed, or communicated. Was the ingredient list on the Shopify product page accurate and current? Did the physical label on the product match what was published online? Were there any recent recipe changes or ingredient substitutions that were not reflected in your allergen data? Each of these questions points to a specific process that either worked correctly or failed, and your investigation should produce a clear answer for each one.

Your root cause investigation should result in a written report, even if it is brief. That report should describe what happened, what the investigation found, and what changes are being made as a result. Changes might include updating your allergen data, adding a review step when recipes change, or implementing a check that ensures your Shopify listings are updated before a reformulated product goes on sale. Share the report with your food safety lead and retain it in your incident documentation. Regulators who subsequently review the incident will look for evidence that you learned from it, and this document is that evidence.

Reviewing and Testing Your Plan Annually

An allergen incident response plan that was written once and never revisited is only marginally better than having no plan at all. Staff change, products change, your sales channels may expand, and the regulatory landscape around allergen labelling continues to evolve. Your plan needs to reflect the business you are operating today, not the one you were running when the document was first drafted. Build an annual review into your food safety calendar, and treat it with the same seriousness as your routine allergen audits.

One of the most effective ways to test a plan is to run a short tabletop exercise with your team. Present a hypothetical scenario — a customer reports a severe reaction to a product that contains an undeclared nut — and walk through each stage of your response plan together. You will quickly discover where the gaps are: the escalation contact who is no longer with the business, the batch record system that nobody knows how to access quickly, or the product hold process that was never clearly assigned to a specific role. These are far better problems to discover in a drill than during a real incident.

After each annual review, update the plan, re-circulate it to everyone with a named role in the response process, and record that you have done so. If you sell food products on Shopify, ensure that your allergen data management process is part of the review. Accurate, up-to-date allergen information on your product listings is one of the most direct ways to reduce the likelihood of an incident occurring in the first place.

---

Try Allergen Matrix free at saltai.app — no credit card required.