Privacy Policy

The data controller responsible for your personal data is Samanta Sondore trading as “Sams Nailtraining”.

You can contact us using the details in the “Contact” section below.

We may collect the following categories of personal data:

• Contact details — name, email address, phone number (if provided).
• Booking and purchase information — course selected, booking date, payment status, order identifiers.
• Communications — messages you send to us by email, forms, Instagram or other channels.
• Website usage data — device and browser information, pages viewed, approximate location, and interaction data (typically via cookies/analytics, subject to your choices).

We do not intentionally collect special category data (e.g. health, religion, political opinions). Please avoid sharing it with us.

We use your data to:

• Provide our services (course bookings, payments, confirmations and customer support).
• Communicate with you about your booking, questions, changes or cancellations.
• Improve our website, courses and user experience (analytics).
• Prevent fraud and keep the website secure.
• Send marketing communications only where permitted by law and your preferences (you can opt out anytime).

Under UK GDPR, we rely on one or more of the following lawful bases:

• Contract — to process bookings and provide the course/service you requested.
• Legitimate interests — to run and improve our business, keep the site secure, and respond to enquiries (balanced against your rights).
• Consent — for optional cookies/marketing where required (you can withdraw consent at any time).
• Legal obligation — for tax, accounting, or other compliance requirements.

We may share your personal data with trusted service providers that help us run our website and deliver services, for example:

• E-commerce/booking platform (e.g. Shopify) to process orders and manage the website.
• Payment providers to process payments securely.
• Email/service tools to send confirmations and respond to enquiries.
• Analytics and advertising tools (only where permitted/consented).

We do not sell your personal data. We may disclose data if required by law or to protect our rights.

Some of our service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (such as UK adequacy regulations or standard contractual clauses).

We keep personal data only as long as necessary for the purposes described in this policy, including legal, accounting, and reporting obligations.

• Booking/order records may be retained for tax and accounting purposes.
• Enquiry emails/messages are kept as needed to provide support and maintain records.
• Analytics data is generally retained in aggregated form.

You have rights under UK GDPR, including:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data (where applicable).
• Restriction — limit processing in certain cases.
• Objection — object to processing based on legitimate interests or direct marketing.
• Data portability — receive data in a usable format in certain cases.
• Withdraw consent — where processing is based on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

We use appropriate technical and organisational measures to protect your personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. However, no method of transmission over the internet is 100% secure.

Our website and training services are not intended for children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.