Privacy Policy
Last updated: April 2026
1. Data Controller
Rose Skin Academy, trading as RoseSkin Aesthetics ("we", "us", "our"), is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following personal data:
- Identity data: name, date of birth, professional qualifications
- Contact data: email address, phone number, postal address
- Account data: username, password, account preferences
- Transaction data: payment details, purchase history, enrolment records
- Learning data: course progress, assessment results, certificates issued
- Technical data: IP address, browser type, device information, cookies
- Communication data: correspondence with us, feedback, and enquiries
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide and manage your access to our courses and learning platform
- To process enrolments, payments, and issue certificates
- To communicate with you about your account, courses, and academy updates
- To track your learning progress and assessment outcomes
- To improve our services and develop new course content
- To comply with legal and regulatory obligations
- To send marketing communications where you have given consent
4. Legal Basis for Processing
We process your personal data on the following lawful bases: performance of a contract (course delivery), consent (marketing communications), legitimate interests (improving our services), and legal obligation (regulatory compliance).
5. Data Sharing
We may share your data with trusted third parties who assist us in operating our platform, processing payments, and delivering our services. These include our hosting provider, payment processor, and accreditation bodies. We will never sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Certificate records are retained indefinitely for verification purposes.
7. Your Rights
Under data protection law, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at roseskinbrighton@gmail.com.
8. Cookies
Our website uses cookies to enhance your experience, analyse site traffic, and assist with our marketing efforts. You can manage your cookie preferences through your browser settings. Essential cookies required for the functioning of our learning platform cannot be disabled.
9. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
10. Contact
If you have any questions about this privacy policy or how we handle your personal data, please contact us at roseskinbrighton@gmail.com.