This Privacy Policy explains how Make Up Atelier UK make up courses founded by Margo Holder  (“we”, “us”, “our”) collects, uses, stores, and protects your personal data. By using our website, enrolling on a course, or communicating with us, you agree to the practices described in this policy.

1. Who We Are (Data Controller)

Make Up Atelier UK is the trading name of Make Up Atelier Makeup School, located at:

40 Mill Road, London, E16 2BE, United Kingdom

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Make Up Atelier UK is the Data Controller responsible for your personal data.

If you have questions about this policy or your data, you can contact us using the details on our website or by post at the address above.

2. What Personal Data We Collect

We collect and process the following categories of data:

2.1 Identity & Contact Data

• Name
• Postal, billing, and delivery addresses
• Email address
• Telephone and mobile numbers

2.2 Payment & Transaction Data

• Payment details (processed securely; not stored long‑term)
• Order history
• Course enrolment details

2.3 Website & Technical Data

• IP address
• Device information
• Browsing behaviour
• Pages viewed
• Cookies and tracking data (see Section 10)

2.4 Communication Data

• Emails, enquiries, complaints
• Notes relating to your interactions with us

2.5 Marketing & Subscription Data

• Email address for newsletters
• Marketing preferences

3. How We Collect Your Data

We collect data when you:

• Enrol on a course
• Create an account
• Subscribe to our newsletter
• Contact us via email or website forms
• Browse our website
• Make payments
• Interact with us on social media

We may also generate internal records relating to your orders, payments, and communications.

4. Legal Bases for Processing (UK GDPR)

We process your personal data under the following lawful bases:

4.1 Contract

To process your course enrolment, payments, bookings, and account management.

4.2 Consent

For email marketing, newsletters, and promotional communications. You may withdraw consent at any time.

4.3 Legitimate Interests

To improve our website, services, customer experience, and internal processes.

4.4 Legal Obligation

For accounting, fraud prevention, and regulatory compliance.

5. How We Use Your Data

We use your data to:

5.1 Provide Services

• Process course bookings
• Manage payments
• Deliver course information
• Maintain your account

5.2 Customer Support

• Respond to enquiries
• Handle complaints
• Provide service updates

5.3 Marketing (With Consent)

If you opt in, we send:

• Newsletters
• Promotions
• Course updates
• Special offers

You can unsubscribe at any time.

5.4 Website Personalisation & Analytics

To understand how visitors use our website and improve user experience.

5.5 Security & Training

We may record calls for training and security purposes.

6. Sharing Your Data

We do not sell your personal data.

We may share your data with:

6.1 Service Providers

Such as:

• Payment processors
• IT and website hosting providers
• Email marketing platforms
• Delivery and logistics partners

These providers only process data as instructed by us.

6.2 Legal & Regulatory Authorities

Where required by law.

6.3 Group Companies & Trusted Partners

To improve user experience and site performance.

7. International Transfers

If any service providers operate outside the UK, we ensure appropriate safeguards, such as:

• UK GDPR‑approved Standard Contractual Clauses
• Adequacy regulations

8. Data Retention

We keep your data only as long as necessary for:

• Course administration
• Legal and accounting requirements
• Customer support
• Marketing (until you withdraw consent)

Payment card details are not stored long‑term.

9. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Request data portability
• Object to automated decision‑making

To exercise these rights, contact us using the details above.

10. Cookies

We use cookies to:

• Improve website performance
• Personalise your experience
• Analyse traffic
• Enable essential website functions

You can manage or reject non‑essential cookies via our cookie banner or your browser settings.

11. Data Security

We use secure servers, encryption, and access controls to protect your data from unauthorised access, loss, or misuse.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

13. Contact Us

For questions about this policy or your data rights, please contact us via:

• Our website contact form
• Email
• Postal address: 40 Mill Road, London, E16 2BE

If you’d like, I can now also:

• Rewrite your Enrolment Terms to match 2026 UK standards
• Create a Cookie Policy
• Format this into a website‑ready layout
• Add a Data Retention Schedule

Just tell me what you want next.