PRIVACY POLICY
Last updated: 8 August 2026
Get Nailed Academy respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you:
visit our website;
contact us;
book a course;
attend training;
create an account;
make a payment;
subscribe to marketing;
communicate with us on social media; or
otherwise interact with Get Nailed Academy.
It also explains your rights under UK data-protection law.
1. WHO WE ARE
The organisation responsible for your personal information is:
Get Nailed Academy Ltd
Company Number: 16255988
228 Regents Park Road
London
N3 3HP
United Kingdom
Email: info@getnailedacademy.co.uk
Telephone: 07415 017757
Website: www.getnailedacademy.co.uk
For data-protection purposes, Get Nailed Academy Ltd is generally the data controller of the personal information described in this Privacy Policy.
2. THE INFORMATION WE MAY COLLECT
Depending on how you interact with us, we may collect the following categories of personal information.
Identity information
This may include:
full name;
date of birth or age where required;
username or account details; and
information necessary to verify your identity.
Contact information
This may include:
email address;
telephone number;
postal address; and
social-media contact details where you communicate with us through those platforms.
Booking and course information
This may include:
courses booked;
course dates;
attendance records;
previous qualifications;
prerequisite certificates;
assessment information;
training progress;
certification information;
communications about your course; and
records of transfers, cancellations or refunds.
Payment and transaction information
This may include:
payment status;
transaction reference;
amount paid;
refunds;
billing information; and
limited payment information provided to us by our payment provider.
Complete card details are normally processed securely by the relevant payment provider rather than stored directly by us.
Health and accessibility information
Where relevant to safely participating in practical training, you may choose or be required to provide information concerning:
allergies;
sensitivities;
skin or nail conditions;
medical conditions relevant to training;
disabilities;
accessibility requirements; or
contraindications affecting practical treatments.
We only ask for this information where it is reasonably relevant to your training, health, safety or accessibility.
Technical and website information
When you use our website, we may automatically receive information such as:
IP address;
device type;
browser;
operating system;
approximate location derived from IP address;
pages viewed;
referring website;
date and time of visits;
interactions with the website;
cookie identifiers; and
similar technical information.
Communications
We may keep records of communications with you, including:
emails;
contact-form enquiries;
telephone enquiries;
customer-support messages;
social-media messages; and
complaints or feedback.
Marketing preferences
We may record:
whether you have opted in to marketing;
what type of marketing you have requested;
your unsubscribe requests; and
other communication preferences.
Images and video
Where appropriate and lawful, we may process photographs or videos relating to training, student work, events or promotional material.
Where consent is required for promotional use, we will ask for it separately.
3. HOW WE COLLECT YOUR INFORMATION
We may collect personal information directly from you when you:
complete a form;
book a course;
create an account;
make a payment;
contact us;
attend a course;
submit an assessment;
provide a certificate or qualification;
subscribe to marketing;
communicate with us on social media; or
provide feedback.
We may also receive information automatically through our website, cookies and similar technologies.
In some circumstances, information may be received from third parties involved in providing our services, such as:
payment providers;
website providers;
booking platforms;
course or learning-management platforms;
accreditation providers;
email-service providers;
analytics providers; and
social-media platforms.
4. HOW WE USE YOUR INFORMATION
We may use personal information to:
process course bookings;
take and verify payments;
provide booking confirmations;
communicate course information;
manage attendance;
deliver training;
verify course entry requirements;
carry out assessments;
issue certificates;
provide learner support;
process transfers, cancellations and refunds;
respond to enquiries;
handle complaints;
maintain appropriate business and financial records;
protect the security of our website and systems;
detect or prevent fraud or misuse;
improve our courses and services;
understand how our website is used;
manage our business;
comply with legal or regulatory obligations;
establish, exercise or defend legal claims; and
send marketing where permitted.
We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.
5. OUR LAWFUL BASES
UK data-protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following.
Contract
We process information where it is necessary to:
take steps at your request before you enter into a contract with us; or
perform our contract with you.
For example, we need your name and contact information to process and administer a course booking.
Legal obligation
We may process information where necessary to comply with a legal obligation.
This may include obligations relating to:
taxation;
accounting;
consumer protection;
fraud prevention;
legal claims; or
other regulatory requirements.
Legitimate interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.
Examples may include:
protecting our systems and website;
maintaining business records;
preventing misuse;
improving our services;
responding to certain enquiries;
defending legal claims; and
understanding how our services are used.
Where required, we consider the impact of this processing on your rights and interests.
Consent
We may rely on consent where you have freely chosen to allow us to use your information for a particular purpose.
Examples may include:
certain marketing communications;
promotional photography or videos;
certain non-essential cookies; or
particular uses of sensitive information.
Where we rely on consent, you may withdraw it at any time.
Withdrawal does not make any processing that occurred before withdrawal unlawful.
6. SPECIAL CATEGORY INFORMATION
Information about health can receive additional protection under data-protection law.
We may occasionally need to process limited health or accessibility information where relevant to:
safe participation in practical training;
allergies or sensitivities;
contraindications;
reasonable accessibility arrangements; or
health and safety.
Where special category information is processed, we will ensure that an appropriate lawful basis and additional legal condition applies.
Depending on the circumstances, this may include your explicit consent or another condition permitted by law.
We will only request information that is reasonably necessary.
7. COURSE PARTICIPANTS UNDER 18
Some Get Nailed Academy courses may be available to students aged 16 or 17.
Where appropriate, we may require information relating to a parent or guardian, particularly where consent, emergency contact details or booking responsibility is required.
We aim to explain the use of personal information in clear and understandable language.
8. PAYMENTS
Payments made through our website may be processed by third-party payment providers.
These providers may collect information including:
card details;
billing details;
authentication information;
transaction information; and
fraud-prevention information.
Payment providers generally act in accordance with their own privacy policies and security requirements.
Get Nailed Academy does not normally receive or store your complete payment-card number.
9. WHO WE MAY SHARE INFORMATION WITH
We do not sell your personal information.
We may share information where reasonably necessary with trusted third parties that help us operate our business.
These may include:
payment processors;
website hosting providers;
website developers or technical support;
booking providers;
learning-management systems;
email providers;
cloud-storage providers;
accountants and professional advisers;
accreditation or certification providers;
IT and cybersecurity providers;
analytics providers;
marketing platforms where permitted;
insurers; and
legal or regulatory authorities where required.
We expect service providers processing information on our behalf to protect it appropriately and use it only for permitted purposes.
We may also disclose information where necessary:
to comply with law;
in connection with legal proceedings;
to protect our legal rights;
to protect another person’s safety;
to prevent fraud; or
in connection with a sale, restructuring or transfer of our business.
10. INTERNATIONAL DATA TRANSFERS
Some of the technology or service providers we use may process information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps required under UK data-protection law.
Depending on the destination and circumstances, these safeguards may include:
UK adequacy regulations;
approved contractual protections;
the UK International Data Transfer Agreement;
an approved UK Addendum; or
another legally recognised transfer mechanism.
11. HOW LONG WE KEEP YOUR INFORMATION
We do not keep personal information for longer than reasonably necessary.
The appropriate retention period depends on:
why the information was collected;
the type of information;
legal requirements;
accounting requirements;
accreditation requirements;
potential legal claims; and
whether information is still needed to provide support.
For example:
Booking and transaction records
These may be retained for the period required for accounting, tax, contractual and legal purposes.
Course and certification records
We may retain certain course and certification information for longer where reasonably necessary to verify that training or certification took place.
Enquiries
General enquiries that do not lead to a booking may be deleted when they are no longer reasonably required.
Marketing information
Marketing information is retained while you remain subscribed or while we otherwise have a lawful reason to keep it.
If you unsubscribe, we may retain a minimal suppression record so that we know not to contact you again for that type of marketing.
Health information
Health or accessibility information will generally only be retained for as long as it is reasonably necessary for the purpose for which it was collected, unless a longer period is required for legal or safety reasons.
When information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.
12. MARKETING
We may occasionally send information about:
new courses;
course dates;
promotions;
Academy news;
events;
products; or
other Get Nailed Academy services.
We will only send electronic marketing where we have a lawful basis and where the requirements of applicable electronic-marketing law are satisfied.
Where consent is required, we will obtain it.
You can unsubscribe at any time by:
using the unsubscribe option in an email; or
contacting info@getnailedacademy.co.uk.
We may still contact you about non-marketing matters relating to an active booking, payment, course or other service you have requested.
13. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies.
A cookie is a small file stored on your device when you visit a website.
Cookies may be used for purposes such as:
enabling essential website functions;
remembering preferences;
maintaining security;
managing shopping-cart or checkout functions;
understanding website performance;
analytics; and
advertising or marketing where permitted.
Strictly necessary cookies
Some cookies are necessary for the website to function properly.
These may not require consent where the law permits them to be used without it.
Analytics and marketing cookies
Where required by law, analytics, advertising and other non-essential cookies will only be placed after you have made an appropriate choice through our cookie-management system.
You should be able to reject or manage non-essential cookies.
You can also control cookies through your browser, although disabling necessary cookies may affect website functionality.
More detailed information about cookies may be made available through our website’s cookie banner or cookie settings.
14. ANALYTICS
We may use website analytics to understand matters such as:
how visitors reach our website;
which pages are used;
how long visitors spend on pages;
technical problems; and
general website performance.
Where analytics involves non-essential cookies or similar device storage, we will obtain consent where required.
15. SOCIAL MEDIA
We maintain profiles on social-media platforms.
If you communicate with us through a social-media service, that platform may process your personal information independently under its own privacy policy.
Information you choose to publish publicly on social media may be visible to other users.
We recommend reviewing the privacy controls of the relevant platform.
16. PHOTOGRAPHS AND VIDEO
We may occasionally take photographs or videos during courses or Academy activities.
Where images are used for promotional purposes and consent is required, we will ask you before using them.
Promotional purposes may include:
our website;
Instagram;
other social-media platforms;
digital advertising;
printed materials; and
Academy portfolios.
You are not required to agree to promotional photography in order to attend a course.
Where we rely on consent, you can withdraw consent for future use by contacting us.
Withdrawal may not always require us to recall or remove materials that were lawfully produced or published before your consent was withdrawn.
17. SECURITY
We take reasonable technical and organisational steps to protect personal information.
These measures may include:
access controls;
passwords;
secure hosting;
security updates;
limited staff access;
secure payment processing; and
other proportionate security measures.
However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.
You are responsible for keeping any account password confidential.
Please contact us if you believe your account or personal information has been compromised.
18. YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances, UK data-protection law may give you rights including:
Right of access
You can ask whether we hold personal information about you and request a copy.
Right to rectification
You can ask us to correct inaccurate or incomplete personal information.
Right to erasure
In certain circumstances, you can ask us to delete your personal information.
This right is not absolute and we may need to retain information where there is a lawful reason to do so.
Right to restriction
In certain circumstances, you can ask us to restrict how your information is used.
Right to data portability
In certain circumstances, you may have the right to receive information you provided to us in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.
Right to object
You may have the right to object to processing based on certain lawful bases, including some processing carried out for legitimate interests.
You have a right to object to the use of your personal information for direct marketing.
Right to withdraw consent
Where processing is based on your consent, you can withdraw that consent at any time.
Rights relating to automated decision-making
Where applicable, you may have rights concerning decisions made solely through automated processing which produce legal or similarly significant effects.
We do not currently intend to make significant decisions about course acceptance or certification solely through automated decision-making.
19. HOW TO EXERCISE YOUR RIGHTS
To exercise a data-protection right, contact:
Please provide enough information for us to identify you and understand your request.
We may need to request reasonable proof of identity before disclosing personal information.
We will respond within the period required by applicable data-protection law.
There is normally no fee for exercising your data-protection rights, although the law permits fees or refusal in limited circumstances involving certain manifestly unfounded or excessive requests.
20. COMPLAINTS
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.
Email:
You also have the right to raise a concern with the UK’s data-protection regulator, the Information Commissioner’s Office (ICO).
You can find information about making a complaint through the ICO’s official website.
21. THIRD-PARTY LINKS
Our website may link to websites, platforms or services operated by other organisations.
We are not responsible for the privacy practices of independent third parties.
We recommend reading the privacy policy of any external website before providing personal information.
22. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
changes to our services;
new technology;
changes to our suppliers;
changes in the way we use information; or
changes in legal or regulatory requirements.
The latest version will be published on our website with an updated revision date.
Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to your attention where required.
23. CONTACT US
If you have questions about this Privacy Policy or how we use your personal information, please contact:
Get Nailed Academy Ltd
228 Regents Park Road
London
N3 3HP
United Kingdom
Email: info@getnailedacademy.co.uk
Telephone: 07415 017757
Website: www.getnailedacademy.co.uk