Privacy

[TO CONFIRM: this policy is a draft pending review by a qualified adviser. Remove this line once reviewed.]

Last updated: [TO CONFIRM: date]

Who we are

Geraldine McGuigan - Beauty Salon School (“we”, “us”, “our”) of 329 Antrim Road, Belfast, BT15 2HF, Northern Ireland is the data controller for the personal information described in this policy.

If you have any questions about this policy or about how we use your information, contact us at info@beautytraining.com or on +44 (0)28 9035 2662.

[TO CONFIRM: ICO registration number, if the school is registered with the Information Commissioner’s Office. Most organisations processing personal data must register and pay the data protection fee.]

What we collect, and why

Course enquiries. When you use our contact form we collect your name, email address and the content of your message. We use this to respond to your enquiry. Our lawful basis is legitimate interests — answering a question you have asked us.

Course applications. When you complete our online application form we collect your name, date of birth, address, telephone number, email address, how you heard about us, your preferred interview date, the courses you are interested in, and any education and career information you choose to give us. We use this to assess your application, arrange an interview, and administer your enrolment. Our lawful basis is that the processing is necessary to take steps at your request before entering into a contract.

Mailing list. If you sign up to our mailing list we collect your name and email address, and use them to send you news about courses and offers. Our lawful basis is your consent, which you can withdraw at any time by emailing us.

Website usage. We use Google Analytics to understand how visitors use the site. [TO CONFIRM: whether analytics runs only after cookie consent, and whether a cookie banner is required. There is currently no cookie banner on this site.]

We do not collect special category data (such as health information) through this website. [TO CONFIRM: whether health or medical information is collected later in the enrolment or salon booking process — for example contra-indication forms — as that is special category data and needs its own lawful basis and a separate condition under Article 9.]

How long we keep it

[TO CONFIRM: retention periods. As a guide, you need a stated period for each of: unsuccessful enquiries, unsuccessful applications, enrolled student records, and mailing list subscribers. These should be based on how long you actually need the information and on any awarding body or accounting requirements — we have not invented figures here.]

We do not keep personal information for longer than we need it. When it is no longer needed it is securely deleted.

Who we share it with

We do not sell your information or share it for marketing purposes. We share it only with the service providers who help us run this website and our courses:

  • Netlify — hosts this website and processes our form submissions.
  • Google — provides reCAPTCHA (which protects our forms from automated abuse), Google Analytics, and the map on our contact page.
  • [TO CONFIRM: any email marketing provider used for the mailing list, and any student records or accounting system that application data is transferred into.]

We may also disclose information where we are required to do so by law, or to our awarding bodies where this is necessary to register you for a qualification. [TO CONFIRM: which awarding bodies student data is shared with — CIBTAC, CIDESCO, BABTAC, VTCT, ITEC — and at what stage.]

Storage and international transfers

Your information is protected by security procedures intended to prevent unauthorised access, as required by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Some of our service providers are based outside the UK. Where your information is transferred outside the UK, we take steps to ensure it receives the same level of protection as it would here, using the safeguards permitted under UK data protection law.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you
  • ask us to correct information that is inaccurate or incomplete
  • ask us to delete your information in certain circumstances
  • ask us to restrict how we use your information
  • object to our using your information where we rely on legitimate interests
  • ask us to transfer your information to another organisation in a portable format
  • withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email us at info@beautytraining.com. We will respond within one month.

If you give us someone else’s information

If you give us information about another person, please make sure they know you are doing so and are happy for their information to be used as described in this policy.

Applicants under 18

Our minimum age for entry to any course is 16. If you are under 18, we may ask for a parent or guardian to be involved in your application. [TO CONFIRM: whether parental consent is required for applicants aged 16-17, and how that is recorded.]

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.