International Beauty Academy and Treatment

At International Beauty Academy and Treatment, we are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with us, whether online or in person.

1. Information We Collect

We may collect and process the following types of personal data:

  • Personal Details – such as your name, email address, phone number, and postal address when booking appointments or enrolling in training.

  • Payment Information – used solely for processing transactions securely via trusted providers.

  • Health Information – including allergies, medical conditions, or treatment history, only where relevant and necessary for delivering our services safely.

  • Technical Data – including your IP address, browser type, and website interaction data via cookies and similar technologies.

We only collect data that is necessary and relevant for the purpose of providing our services or meeting legal requirements.

2. How We Use Your Information

Your data may be used to:

  • Book and manage appointments or training courses

  • Personalise your treatment or learning experience

  • Process payments

  • Send booking confirmations and important service updates

  • Respond to your enquiries or requests

  • Improve our services and website performance

  • Comply with legal and regulatory obligations

3. Lawful Bases for Processing (GDPR)

Under the UK GDPR, we rely on the following lawful bases for processing your personal data:

  • Contractual necessity – to deliver services or training you have requested

  • Consent – for optional activities such as email marketing (which you can opt out of at any time)

  • Legal obligation – for record-keeping or reporting as required by law

  • Legitimate interests – such as improving service quality, managing appointments efficiently, or protecting our business

4. Your GDPR Rights

As a data subject, you have the following rights under UK GDPR:

  • Right to Access – Request access to the personal data we hold about you.

  • Right to Rectification – Ask us to correct inaccurate or incomplete data.

  • Right to Erasure – Request deletion of your data where there is no legal reason for us to keep it.

  • Right to Restrict Processing – Request that we limit how we use your data in certain situations.

  • Right to Object – Object to processing based on legitimate interest or for direct marketing purposes.

  • Right to Data Portability – Receive your personal data in a structured, machine-readable format and transfer it to another provider.

To exercise any of these rights, please contact us directly using the contact information provided at the end of this policy.

5. Sharing Your Data

We do not sell, rent or trade your personal information. We may share your data with:

  • Trusted service providers – for essential functions such as payment processing, appointment systems, or IT services.

  • Regulatory authorities – when required by law or to protect legal rights.

All third-party service providers are GDPR-compliant and contractually bound to keep your data secure.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or to meet legal, tax, or regulatory requirements. After this period, your data is securely deleted or anonymised.

7. Cookies and Website Data

Our website uses cookies to enhance functionality and analyse user behaviour. Cookies are small text files stored on your device. You can manage or disable cookies through your browser settings. For more information, please see our Cookie Policy.

8. Data Security

We take appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, or loss. This includes secure storage systems, staff training, and restricted access protocols.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their content or privacy practices. We recommend reviewing the privacy policies of any external websites you visit.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on our website with the date of the latest update.

11. Contact Us

If you have any questions about this Privacy Policy, your rights, or how your data is handled, please contact us:

International Beauty Academy and Treatment
13 Boulevard, Weston-super-Mare, BS23 1NR
Phone: 07802 416468

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk