Privacy Policy
​
Who we are
The Beauty Room & Academy (“we”, “us”, “our”) is the data controller for the personal information described in this notice when you browse our website, make an enquiry, or purchase training/services.
How to contact us
For any privacy questions or to exercise your rights, please contact us using the details on our Contact page. If you need to contact a supervisory authority, see “Your rights & complaints” below.
Personal data we collect

Identity & contact: name, email, phone number, and business details (if provided).


Booking & purchase: courses purchased, dates, price/amount, and communication history.


Payment: processed securely by Stripe; we do not store card numbers. See Stripe’s Privacy Policy.


Technical: IP address, browser/user-agent, and basic device information necessary for site security and delivery.


Cookies: essential cookies for core functionality and consent preferences. Optional analytics cookies are off by default and will only run if you choose “Accept”.

Purposes and legal bases (UK GDPR / EU GDPR)

Provide services & fulfill bookings (Contract): to process your order, deliver training, issue receipts/certificates, and provide customer support.


Communication (Legitimate interests): to respond to enquiries and keep records of our correspondence.


Security & fraud prevention (Legitimate interests): to protect our site, accounts, and customers.


Marketing (Consent): we will only send direct marketing if you explicitly opt in; you can withdraw consent at any time.


Legal/Regulatory (Legal obligation): accounting, taxation, and compliance with applicable laws.

Sharing your data
We share personal data only with trusted providers where necessary: payment processing (Stripe), email and web hosting, IT/security support, and professional advisers. These processors may only use your data under our instructions and must keep it secure. We do not sell your personal data.
International transfers
Some providers may process data in countries outside the UK/EEA. Where this occurs, we use appropriate safeguards such as adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep your data
We retain enquiry records for up to 24 months and purchase records for up to 7 years to meet tax and accounting obligations, unless a longer period is required by law or necessary to resolve disputes.
Cookies
Essential cookies keep the site working (for example, by remembering your cookie choice). Optional analytics cookies are currently not enabled. If we add analytics in the future, the banner will give you a clear choice to accept or reject them.
You can change your choice at any time via the Manage cookies link in the footer.
Your rights & complaints
Under UK GDPR / EU GDPR, you have the right to:

Request access to your personal data and receive a copy;


Request correction of inaccurate data;


Request erasure in certain circumstances;


Object to or request restriction of processing in certain circumstances;


Request data portability for information you provided to us;


Withdraw consent at any time where we rely on consent.

To exercise your rights, contact us using the details on our Contact page. If you are in the UK, you can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the EU, you can complain to your local supervisory authority; see the EDPB list.
Children
Our services are intended for adults. We do not knowingly collect personal data from children.
Changes to this notice
We may update this policy from time to time. Material changes will be highlighted on this page. Please check back periodically.