Privacy Policy

Skin Within Academy — by Skin Within Group Limited Last updated: March 2026

1. Who We Are

Skin Within Group Limited, trading as Skin Within Academy ("we", "us", "our"), is incorporated in England and Wales with company number 14520242. Our registered office is at [insert registered address].

We are registered with the Information Commissioner's Office (ICO) as a data controller. ICO registration number: [insert ICO number].

This policy explains how we collect, use, store and protect your personal data when you visit skinwithinacademy.co.uk or interact with us in connection with our training, franchise and coaching services.

We process all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

Information you give us directly, for example when you:

Submit an enquiry or contact form
Book a course or discovery call
Sign up to our mailing list or free open evening
Apply for our franchise programme
Submit a CV or job application

This may include your name, email address, telephone number, postal address, professional registration body and number, and any other information you choose to provide.

Information we collect automatically when you visit our website:

Your IP address and browser type
Pages visited, time and date of visit
Referring website or search term
Device and operating system information
Cookie and tracking data (see Section 7 and our Cookie Policy)

We collect this automatically using cookies, Google Analytics, and Google Tag Manager. Please see our Cookie Policy for full details of what is collected and how to manage your preferences.

3. How We Use Your Information

We use your personal data for the following purposes:

PurposeLegal BasisResponding to your enquiries and course booking requestsLegitimate interests / ContractProcessing course bookings and paymentsContractSending booking confirmations and course informationContractSending marketing emails about courses, offers and news (with your consent)ConsentImproving our website and understanding how visitors use itLegitimate interestsComplying with legal and regulatory obligationsLegal obligationManaging franchise and coaching enquiriesLegitimate interests / Contract

We will never sell your personal data to third parties, and we will not use it for purposes that are incompatible with those listed above.

4. Marketing Communications

If you have opted in to receive marketing from us, we may send you emails about our courses, offers, events and news. You can unsubscribe at any time by clicking the unsubscribe link in any email, or by emailing enquiries@skinwithinacademy.co.uk.

We do not share your personal data with third parties for their own marketing purposes.

5. Who We Share Your Data With

We may share your personal data with trusted third-party service providers who help us operate our website and services, including:

Email marketing platform (e.g. Mailchimp or equivalent) — to send you communications
Booking and scheduling tools (e.g. Calendly) — to manage discovery calls
Payment processors — to handle course payments securely
Website hosting and analytics (Framer, Google Analytics, Google Tag Manager) — to host and analyse our website
Accountants and professional advisers — as required for business operations

All third-party processors are required to handle your data securely and only for the purposes we specify. We do not authorise them to use your data for their own purposes.

We may also disclose your data where required to do so by law, court order, or a regulatory authority.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this policy:

Enquiry data: up to 2 years from last contact
Course booking records: 7 years (for accounting and regulatory purposes)
Marketing opt-in data: until you unsubscribe or withdraw consent
Website analytics data: as set by Google Analytics (typically 26 months)

After these periods, data is securely deleted or anonymised.

7. Cookies & Google Tag Manager

Our website uses cookies and Google Tag Manager (GTM). GTM allows us to manage and deploy marketing and analytics tags — including Google Analytics — without modifying website code directly.

When you visit our website, GTM may load tags that set cookies and collect data about your browsing behaviour. This only happens in full if you have consented via our cookie banner.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to ask us to delete your data in certain circumstances
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please email us at enquiries@skinwithinacademy.co.uk. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Access to personal data is restricted to authorised staff only.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Transfers Outside the UK

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the ICO, or transfers to countries with an adequacy decision.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with the date of last update. We encourage you to review this page periodically.