```html

Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you interact with our Beauty & SPMU Training Academy. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all personal data collected through our website (if applicable), booking systems, training courses, social media, and in-person interactions.

2. Who We Are

We are a UK-based Beauty & SPMU Training Academy providing professional beauty and semi-permanent makeup training courses.

For the purposes of data protection law, we are the Data Controller of your personal data.

Contact details:

• Business name: EML Training Academy
• Email address: [email protected]
• Phone number: +44 7549 612300

3. Personal Data We Collect

We may collect and process the following personal data:

• Full name
• Email address
• Phone number
• Postal address
• Payment information (processed securely by third-party providers)
• Booking and course information
• Medical information and consent forms (where required for treatments or training)
• Photographs and videos, including before-and-after images (with consent)
• Communication records (emails, messages, social media DMs)

4. How We Collect Your Data

We collect personal data when you:

• Book a course or appointment
• Enrol in training programmes
• Contact us via email, phone, social media or in person
• Complete consultation, medical or consent forms
• Subscribe to marketing communications
• Interact with us on social media

5. How We Use Your Data

We use your personal data to:

• Provide training courses and services
• Manage bookings and payments
• Communicate with you regarding courses, updates or queries
• Maintain training and certification records
• Meet legal and regulatory obligations
• Send marketing communications (where you have consented)
• Improve our services and business operations

6. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract - to fulfil bookings and training agreements
• Consent - for marketing communications, photographs, and medical information
• Legal obligation - to comply with UK laws and regulations
• Legitimate interests - for business administration and service improvement

7. Marketing Communications

We may send you marketing emails, texts or messages about courses, offers or updates where you have opted in.

You can withdraw your consent at any time by:

• Clicking the unsubscribe link in emails
• Contacting us directly

8. Third-Party Services

We use trusted third-party systems to operate our business, including:

• Ovatu (booking and client management)
• Mailchimp (email marketing)
• Square (payment processing)
• Google Docs and Google Sheets (record keeping)
• Teachable (online course delivery)
• Automation King (business automation)

These providers only process data on our instructions and in accordance with their own privacy policies.

9. Data Storage and Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access or disclosure.

Data is stored securely in digital systems and, where applicable, physical records are kept in secure locations.

10. Data Retention

We retain personal data only for as long as necessary:

• Training and certification records may be kept for legal and professional reasons
• Financial records are retained as required by law
• Marketing data is retained until consent is withdrawn

11. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, please contact us using the details above.

12. Photographs and Media

Photographs and videos will only be taken and used with your explicit consent. You may withdraw consent at any time, subject to legal or contractual obligations.

13. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always apply.

Last updated: 13/12/2025

```