top of page

PRIVACY POLICY

1. Introduction

Y.O.U.R Beauty School CIC ("YBS", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use our website (www.yourbeautyschool.co.uk) and our services.
 

By using our website and services, you consent to the collection and use of your personal data as described in this policy.
​

We may update this policy from time to time to ensure compliance with legal requirements. Please review this page periodically for any changes.

​

2. Who We Are (Data Controller)

Y.O.U.R Beauty School CIC is the data controller responsible for your personal data. If you have any questions about this policy, you can contact us:

Postal Address: 28 Sangley Road, Catford, London SE6 2JH
Email: admin@yourbeautyschool.co.uk
Telephone: 020 8698 0345

For data protection inquiries, please contact our Data Protection Representative at: privacy@yourbeautyschool.co.uk

​

3. What Personal Data We Collect

Personal data refers to any information that can identify an individual. The types of personal data we may collect include:

  • Identity Data: First name, last name, username, marital status, title, date of birth, gender.

  • Contact Data: Billing address, home address, email address, telephone number.

  • Course Data: Chosen course, course start date, course duration.

  • Marketing Data: Preferences for receiving marketing communications.

  • Terms & Conditions Data: Confirmation that a student has read and agrees to terms and conditions.

We do not collect any special category data (e.g., race, ethnicity, health data, or biometric data) unless explicitly required and legally justified.
 

4. How We Collect Your Data

We collect personal data through:

  • Direct Interactions: You may provide data by filling in online registration forms, applications, customer portals, or corresponding with us via email, phone, or post.

  • Website & Social Media: Data collected when you interact with our website, register for an account, subscribe to our newsletter, or engage with our social media platforms.

  • Automated Technologies: Information may be collected automatically through cookies and analytics tools (see Section 7: Cookies & Tracking Technologies).

 

5. Legal Basis for Processing Your Data

Under UK GDPR, we rely on the following legal bases for processing personal data:

  • Contractual Obligation: To process applications, enrol students in courses, and provide services.

  • Legitimate Interests: To improve our services, website functionality, and marketing efforts.

  • Consent: Where you have provided explicit consent for marketing or other purposes.

  • Legal Compliance: To comply with legal or regulatory requirements.

You have the right to withdraw consent for marketing communications at any time by contacting us or using the unsubscribe link in emails.

​

6. How We Use Your Data

We use your personal data for the following purposes:

  • Processing course applications and enrolments.

  • Communicating course materials and school updates.

  • Recording ongoing student progress and assessments.

  • Managing student/customer accounts.

  • Sending direct marketing communications (if consent is provided).

  • Improving our website, services, and user experience.

We do not sell or share personal data with third parties for marketing purposes.
 

7. Cookies & Tracking Technologies

Cookies are small files stored on your device that help us improve website functionality and user experience. You can manage or disable cookies through your browser settings.

For more information, refer to our Cookie Policy.
 

8. Data Security

We implement appropriate security measures to prevent unauthorised access, alteration, or loss of your personal data. These include:

  • Secure servers and encrypted communications.

  • Access controls and confidentiality agreements for staff handling data.

  • Regular security audits and data protection assessments.

Despite these measures, no data transmission over the internet is 100% secure. You are responsible for safeguarding your login credentials and personal information.
 

9. Data Retention

We retain personal data only for as long as necessary to fulfil its intended purpose, including legal, accounting, and reporting requirements.

Retention periods are determined based on:

  • The type, sensitivity, and purpose of the data.

  • Legal and regulatory requirements.

  • Whether we can fulfil the purpose without retaining personal data.

After the retention period, data will be securely deleted or anonymised.
 

10. Your Data Protection Rights

Under UK GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.

  • Right to Restriction: Request limitations on data processing.

  • Right to Data Portability: Request a transfer of your data to another provider.

  • Right to Object: Object to processing based on legitimate interests.

  • Right to Withdraw Consent: Withdraw consent for marketing at any time.

To exercise any of these rights, please contact us at privacy@yourbeautyschool.co.uk.

If you are unhappy with how we handle your data, you can lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113

​

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy policies, so we encourage you to review them separately.
 

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to remain compliant with legal obligations. Changes will be posted on this page, and where necessary, notified via email.

bottom of page