PRIVACY POLICY

​

Last updated: August 2026

​

Effortless Brow Academy™ is operated by Studio 21 Beauty & Aesthetics Ltd.

​

We respect your privacy and are committed to protecting the personal information you provide to us. This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your personal information.

Under UK data protection law, Studio 21 Beauty & Aesthetics Ltd is the data controller for the personal information covered by this policy.

​

Information we may collect

When you use our website, register your interest in training, contact us or enrol on an Academy programme, we may collect information including:

• your name;

• email address;

• telephone number;

• current beauty industry experience;

• details of relevant qualifications;

• your preferred training timeframe;

• information you provide when telling us why you are interested in a programme;

• correspondence between you and the Academy;

• enrolment and course administration information if you later become a student;

• payment and transaction information where applicable; and

• technical information generated when you use our website, including information collected through cookies and similar technologies.

• ​

Our Register Interest form is intended to collect only the information we need to understand your enquiry and assess whether our programme may be suitable for you.

​

Please avoid including unnecessary sensitive personal information in free-text fields.

​

How we use your information

We may use your personal information to:

• respond to your enquiry or Register Interest submission;

• contact you about relevant course dates and availability;

• discuss your qualifications and suitability for a programme;

• answer questions about Academy training;

• administer applications, enrolment and training;

• communicate with students throughout their programme;

• provide tutor guidance and post-graduation support;

• maintain appropriate training and certification records;

• process payments and maintain financial records;

• operate, protect and improve our website;

• comply with legal, regulatory, insurance or accreditation requirements; and

• send marketing communications where you have specifically agreed to receive them.

• ​

The UK GDPR requires organisations to have a valid lawful basis for using personal information.

​

Our lawful bases

Depending on why we are using your information, we may rely on:

Legitimate interests
For activities such as responding to enquiries, managing Register Interest submissions and operating the Academy efficiently, where our interests do not override your rights and freedoms.

Contract
Where processing is necessary to take steps requested by you before entering into a training agreement or to deliver a programme you have enrolled on.

Legal obligation
Where we are required to keep or process information to comply with legal or regulatory responsibilities.

Consent
Where you have actively chosen to receive optional marketing communications or where consent is otherwise required.

Where we rely on consent, you can withdraw it at any time. Consent must be freely given, specific and separate from unrelated terms or conditions.

​

Registering your interest

Submitting a Register Interest form does not enrol you on a programme or guarantee a course place.

​

We use the information you provide to understand your training interests, consider your current qualifications and experience, contact you about the programme and discuss potential course availability.

​

You may receive an automatic acknowledgement confirming that your Register Interest form has been received. This is a service message relating directly to your enquiry and is separate from general marketing communications.

​

Marketing

We will not add you to general marketing communications simply because you registered your interest unless there is an appropriate lawful basis for doing so.

​

Where marketing consent is requested, it will be clearly distinguished from other parts of a form. You can unsubscribe or withdraw your consent at any time.

​

The ICO notes that consent may be required for electronic marketing under privacy and electronic communications rules and that organisations must make clear when someone is agreeing to receive marketing.

​

How we store your information

Our website is built using Wix, and information submitted through website forms may be processed and stored using Wix services.

We may also use reputable third-party providers for services such as email, website hosting, payment processing, accounting and business administration.

​

Wix provides privacy and data-protection tools for website owners, but the website owner remains responsible for ensuring its own collection and use of visitor information complies with applicable privacy law.

​

We take reasonable steps to protect personal information from unauthorised access, misuse, alteration, loss or disclosure.

 

Who we may share information with

We do not sell your personal information.

​

Where necessary, information may be shared with trusted organisations that provide services to us, such as:

• Wix and website service providers;

• email and communication providers;

• payment providers;

• accountants and professional advisers;

• IT and administrative service providers;

• accreditation or certification bodies where this is necessary for your training and you have been informed; and

• government, regulatory or law-enforcement bodies where we are legally required to provide information.

 

We only share information where there is an appropriate reason to do so and expect service providers handling personal information on our behalf to protect it appropriately.

​

International processing

Some technology and service providers may process or store information outside the United Kingdom.

​

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is handled in accordance with applicable UK data protection requirements.

​

How long we keep your information

We do not keep personal information for longer than we reasonably need it.

​

Retention will depend on the type of information and why it was collected.

For example:

• enquiry and Register Interest information is retained for as long as reasonably necessary to respond to and follow up your enquiry;

• student and training records may be retained for as long as necessary to administer training, provide support, evidence certification and meet accreditation, insurance or professional requirements;

• financial and transaction records are retained for the period required by applicable accounting and tax law; and

• information processed on the basis of consent may be removed when consent is withdrawn, unless another lawful reason requires us to retain it.

 

The ICO requires privacy information to explain either the retention period or the criteria used to determine how long information is kept.

​

Your data protection rights

Depending on the circumstances and the lawful basis being used, you may have rights including:

• the right to be informed about how your information is used;

• the right of access to personal information we hold about you;

• the right to rectification if information is inaccurate;

• the right to erasure in certain circumstances;

• the right to restrict processing in certain circumstances;

• the right to data portability in certain circumstances;

• the right to object to certain uses of your information; and

• the right to withdraw consent where processing is based on consent.

 

Not every right applies in every circumstance. The ICO provides further information about individual data protection rights.

To exercise any of these rights, please contact us using the details below.

​

Cookies

Our website uses cookies and similar technologies.

For more information about the cookies we use and how you can manage your preferences, please read our Cookie Policy.

Wix recommends making privacy information available through the website footer and cookie/privacy controls so visitors can easily understand how their information is handled.

​

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, Academy services, technology or legal obligations.

​

The current version will always be available on this page, with the date of the latest update shown above.

​

Contact us

For questions about this Privacy Policy or how your personal information is handled, please contact:

​

Effortless Brow Academy™
A division of Studio 21 Beauty & Aesthetics Ltd

21 New Post Office Square
Corby
Northamptonshire
United Kingdom

Telephone: 01536 401866
Email: studio21.beautyltd@gmail.com

​

Complaints

If you have concerns about how we use your personal information, please contact us first so that we have the opportunity to address them.

​

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK regulator for data protection.