Privacy Policy

Who we are

The Beauty Shed & Academy (“we”, “us”, “our”) is the data controller for the personal information described in this notice when you browse our website, make an enquiry or purchase training/services.

How to contact us

For any privacy questions or to exercise your rights, please contact us using the details on our Contact page. If you need to contact a supervisory authority, see “Your rights & complaints” below.

Personal data we collect

• Identity & contact: name, email, phone number, business details (if provided).
• Booking & purchase: courses purchased, dates, price/amount, communication history.
• Payment: processed securely by Stripe; we do not store card numbers. See Stripe’s Privacy Policy.
• Technical: IP address, browser/user‑agent and basic device information necessary for site security and delivery.
• Cookies: essential cookies for core functionality and consent preferences. Optional analytics cookies are off by default and will only run if you choose “Accept”.

Purposes and legal bases (UK GDPR / EU GDPR)

• Provide services & fulfil bookings (Contract): to process your order, deliver training, issue receipts/certificates and provide customer support.
• Communication (Legitimate interests): to respond to enquiries and keep records of our correspondence.
• Security & fraud prevention (Legitimate interests): to protect our site, accounts and customers.
• Marketing (Consent): we will only send direct marketing if you explicitly opt in; you can withdraw consent at any time.
• Legal/Regulatory (Legal obligation): accounting, taxation and compliance with applicable laws.

Sharing your data

We share personal data only with trusted providers where necessary: payment processing (Stripe), email and web hosting, IT/security support and professional advisers. These processors may only use your data under our instructions and must keep it secure. We do not sell your personal data.

International transfers

Some providers may process data in countries outside the UK/EEA. Where this occurs, we use appropriate safeguards such as adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We retain enquiry records for up to 24 months and purchase records for up to 7 years to meet tax and accounting obligations, unless a longer period is required by law or necessary to resolve disputes.

Cookies

Essential cookies keep the site working (for example, remembering your cookie choice). Optional analytics cookies are currently not enabled. If we add analytics in future, the banner will give you a clear choice to accept or reject them.

You can change your choice at any time via the Manage cookies link in the footer.

Your rights & complaints

Under UK GDPR / EU GDPR you have the right to:

• Request access to your personal data and receive a copy;
• Request correction of inaccurate data;
• Request erasure in certain circumstances;
• Object to or request restriction of processing in certain circumstances;
• Request data portability for information you provided to us;
• Withdraw consent at any time where we rely on consent.

To exercise your rights, contact us using the details on our Contact page. If you are in the UK, you can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the EU, you can complain to your local supervisory authority; see the EDPB list.

Children

Our services are intended for adults. We do not knowingly collect personal data from children.

Changes to this notice

We may update this policy from time to time. Material changes will be highlighted on this page. Please check back periodically.