Book a course

Legal

Privacy Policy

Last updated [date]

What personal data we collect, why, who we share it with and your rights under UK data protection law.

Who We Are

[Entity Name Ltd] (trading as LV Hair Academy), company number [Company number], registered address [Registered address], is the controller of your personal data. Contact us about privacy at [Contact email].

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What We Collect

  • Enquiry form: your name, phone number, city and the course you're interested in. We also record where the enquiry came from (for example which page) and when you sent it.
  • Bookings and payments: your name, email address, phone number, billing details, the course you booked and payment status. Payments are processed by Stripe. We never see or store your full card details.
  • WhatsApp, email and phone: your number or email address and the messages you send us.
  • Course information: attendance, certificate details and anything you tell us about access needs, allergies or health that affects your training. We only collect health information where you choose to share it so we can keep you safe.
  • Website data: our hosting provider (Cloudflare) processes basic technical data such as IP address and browser type to deliver and protect the site.

How and Why We Use It

Purposes and lawful bases
PurposeLawful basis
Replying to your enquiry and helping you choose a courseSteps before a contract, at your request; legitimate interests
Taking bookings, payments and sending course detailsPerformance of a contract
Issuing certificates and keeping training recordsPerformance of a contract; legitimate interests
Accounting and tax recordsLegal obligation
Health or access information you choose to shareYour explicit consent
Sending offers or course newsYour consent (you can withdraw it at any time)
Keeping our website secureLegitimate interests

Who We Share It With

We don't sell your data. We share it only with service providers who help us run the academy, under contracts that require them to protect it:

  • Cloudflare — hosts this website and stores enquiry form submissions in our Cloudflare account.
  • Stripe — processes card payments and, where you choose it, Klarna instalments. Stripe and Klarna are also controllers of some data under their own privacy policies.
  • WhatsApp (Meta) — if you message us or we contact you on WhatsApp.
  • Cloudflare — hosts and protects this website.
  • Our trainers and venues, only as needed to run your course.
  • Professional advisers, or authorities where the law requires it.

Some of these providers process data outside the UK (for example in the USA). Where they do, they use safeguards recognised under UK law, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

Cookies and Analytics

This website does not currently use advertising or analytics cookies. If we add them, we'll update this policy and ask for your consent where the law requires it. Stripe may use cookies on its checkout pages for security and fraud prevention.

How Long We Keep It

  • Enquiries that don't lead to a booking: up to 12 months from your last contact.
  • Booking, payment and certificate records: 6 years after the end of the financial year of your course, to meet tax and legal requirements and to verify certificates.
  • Health or access information: deleted once your course is complete, unless we need it to deal with an incident.
  • Marketing consent: until you withdraw it.

Your Rights

You have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted, where there's no good reason for us to keep it;
  • restrict or object to how we use your data, including objecting to marketing at any time;
  • receive your data in a portable format; and
  • withdraw consent where we rely on it.

To use any of these rights, contact us at [Contact email]. We'll respond within one month. It's free in most cases.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can try to fix it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to This Policy

We may update this policy. The date at the top shows when it last changed.

Terms Privacy Refunds