Privacy Policy.

Last updated: 19 October 2026.

Business: Blush Academy, operated by Chloe Burns.
Email: contact@blushacademy.co.uk
Website: www.blushacademy.co.uk

This Privacy Policy explains how Blush Academy collects, uses, stores and protects personal information when you visit this website, contact us, book training, attend a course or continue with assessment and student support after training.

1. Personal information we collect

Depending on how you use our services, we may collect:

• your name, email address, telephone number and correspondence details;
• course enquiries, messages and other communications with us;
• booking information, chosen course, training date, payment status, order number and transaction records;
• student enrolment information, attendance, assessment results, case studies, certification records and course support history;
• information you choose to provide about access, learning, health or practical requirements where this is relevant to safely delivering training;
• photographs or video where you have separately agreed to their use;
• technical information such as IP address, device/browser information, security logs and cookie choices; and
• information generated through WordPress, WooCommerce and the payment method selected at checkout.

2. How we use your information

We use personal information to:

• respond to enquiries and provide course information;
• administer bookings, payments, deposits, balances, transfers and refunds;
• deliver training, assessments, case-study support and certification;
• maintain appropriate student and financial records;
• provide after-course support and respond to complaints or disputes;
• keep the website, checkout and booking systems secure;
• meet accounting, tax, regulatory and legal obligations; and
• send marketing only where we have a lawful basis to do so. Booking a course does not automatically subscribe you to marketing.

3. Our lawful bases

We process information where it is necessary to take steps at your request before entering into a contract, to perform our training contract with you, to comply with legal obligations, or for our legitimate interests in running and protecting Blush Academy and responding to customers. Where consent is the appropriate basis, such as optional marketing, photography or certain sensitive information, you can withdraw that consent at any time.

If you voluntarily provide health, accessibility or other information that amounts to special-category personal data, we use it only where there is an appropriate legal condition, including explicit consent where required, and only for the purpose for which it was supplied.

4. Payments

Payments are processed through the payment methods made available at checkout, which may include card payments, Klarna or Clearpay. Payment providers process payment information under their own privacy notices and security arrangements. Blush Academy does not receive or store your full card number.

5. Who we share information with

We share information only where necessary with trusted providers that help us operate the website and deliver our services, such as website hosting, WordPress/WooCommerce services, email providers, payment providers, professional advisers and providers supporting accounting, security or technical maintenance. We may also disclose information where required by law, a court, regulator or law-enforcement authority.

We do not sell personal information.

6. International transfers

Some technology providers may process information outside the United Kingdom. Where this occurs, we require an appropriate legal mechanism or safeguard for the transfer, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.

7. How long we keep information

• General enquiries: normally up to 24 months after the last meaningful contact.
• Orders, invoices and core financial records: normally 6 years after the end of the relevant financial period where required for accounting, tax or dispute purposes.
• Student training, assessment, case-study and certification records: normally up to 6 years after completion, so we can evidence training and deal with certification or qualification queries.
• Marketing records: until you unsubscribe or we no longer have a lawful reason to retain them.
• Photographs/video used with consent: while that consent remains valid and the material remains in active use. Withdrawal prevents new use and we will remove future use where reasonably practicable.

We may retain information for longer where necessary to establish, exercise or defend legal claims or where the law requires it.

8. Your data-protection rights

Depending on the circumstances, you may have the right to request access to your personal data, correction of inaccurate information, erasure, restriction, portability, or to object to certain processing. You can also withdraw consent at any time where processing is based on consent.

Your right to object: where we rely on legitimate interests, you can object to that processing. You can object to direct marketing at any time.

To exercise a right, contact Blush Academy using the details above or the Contact page. We may need to verify your identity before completing a request.

9. Complaints about personal data

Please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator, through ico.org.uk.

10. Cookies

Our use of cookies and similar technologies is explained in the Cookie Policy. Non-essential cookies are controlled through the website’s cookie-consent choices.

11. Changes to this policy

We may update this Privacy Policy when our services, systems or legal obligations change. The current version published on this website is the version that applies.