Privacy Policy

For UK data-protection purposes, the data controller is Petra Nagy trading as Petra Nails Education.

15 Lindisfarne Avenue
Ellesmere Port
CH65 9JF
United Kingdom

Privacy email: info@petranailseducation.co.uk
Website: petranailseducation.co.uk

This Policy applies to website visitors, people who contact us, students, mentoring clients, nail-appointment clients, customers purchasing or receiving products or kits, people participating in online or in-person education, and anyone otherwise interacting with Petra Nails Education.

• Identity and contact data: name, email, telephone number, billing/postal address and contact details you provide.
• Booking and appointment data: service requested, dates, appointment duration, booking status, consultation notes and correspondence.
• Course data: programme, package selection, selected products, attendance, progress, case studies, assessment results, practical work, feedback and certification records.
• Payment data: amounts, payment status, transaction references, refunds and payment correspondence. We do not need to store your full card number when Stripe processes a card payment.
• Communications: emails, website forms, WhatsApp or other messages and customer-service correspondence.
• Website/technical data: IP address, browser/device information, security data and information collected through cookies or similar technologies where applicable.

We aim to collect only information reasonably necessary for the relevant purpose.

For nail appointments, Petra may ask limited questions about the condition of your nails, previous products or treatments, allergies, sensitivities or other information reasonably relevant to treatment suitability and safety.

Health information can be special category personal data. Where we intentionally need to process health information, we will identify both an appropriate lawful basis and an applicable special-category condition before using it. Where explicit consent is the appropriate condition, we will ask for a clear, specific confirmation rather than assuming consent.

Please do not provide more medical information than is reasonably necessary for the service.

If you tell Petra that illness prevents you attending training, mentoring or an appointment, we will normally record only the information reasonably necessary to administer the cancellation or rescheduling request. We do not routinely require detailed medical evidence for an ordinary short-term illness.

If more detailed health information becomes necessary, the additional data-protection requirements for special category data will be considered before it is processed.

• respond to enquiries and provide pre-booking information;
• arrange, confirm and administer education, mentoring and nail appointments;
• manage Beginner Course package selections and training products;
• provide online and in-person education, support, assessments and certification;
• assess nail-service suitability and provide the requested appointment safely;
• process and administer payments, balances, refunds and transaction records;
• manage cancellations, rescheduling, complaints and disputes;
• maintain appropriate accounting, tax, certificate and business records;
• protect our website, systems and business against misuse or fraud;
• comply with legal and regulatory obligations; and
• send marketing only where permitted by applicable law.

The lawful basis depends on the purpose. We may rely on:

• Contract: where processing is necessary to take steps at your request before a contract or to perform a contract, such as administering a booking, payment, course or appointment.
• Legal obligation: where information is needed to comply with applicable accounting, tax, consumer-law or other legal duties.
• Legitimate interests: where necessary for proportionate business interests such as record keeping, customer administration, fraud prevention, system security or legal claims, provided those interests are not overridden by your rights.
• Consent: where consent is the appropriate basis, for example certain marketing or optional public use of identifiable photographs/testimonials.

Where special category data is used, a separate condition under the special-category rules is also required.

The Beginner Course booking process may collect your name, email address, package choice, selected additional products, package total, booking deposit and remaining balance. This is used to record the selection, administer the booking and match the package selection with payment and later course arrangements.

Information submitted through the website may be stored within the website/form system and delivered to Petra by email. We intentionally do not publish internal website-code version numbers in this Privacy Policy.

Appointment enquiries may include your preferred service, availability, information about your nails, desired finish, previous product or treatment information and any relevant suitability information you choose or are reasonably asked to provide.

This information is used to recommend or confirm an appropriate service and appointment length, administer the booking and provide the service.

We use Stripe to process certain payments. Stripe processes information necessary to complete and protect transactions and may act in different data-protection roles depending on the processing activity.

Petra Nails Education may receive information such as your name, email, amount paid, payment status and transaction reference. We do not use our website to store your full payment-card number.

Our website is provided using Squarespace. Squarespace may process information necessary to host and operate the website and its forms. Form submissions may be retained within Squarespace systems and/or delivered to our nominated email account depending on our configuration.

We review the services we use and provide privacy information that reflects our actual business systems as far as reasonably practicable.

If you contact Petra by email, telephone, WhatsApp or another communication platform, the relevant provider may process information as part of providing that service.

We use communications to answer enquiries, arrange bookings, confirm dates, discuss services or packages, provide course support, deal with payments and handle customer-service matters. Please avoid sending unnecessary sensitive information through ordinary messaging or email.

Online education may use third-party services for live video, private student communities, communication, assessment or delivery of learning content. A provider used for those functions may process personal information under its own privacy terms.

We will only share or make available information reasonably necessary for the relevant purpose.

Where a course requires case studies, photographs, written assessments or practical evidence, we use that information to assess requirements, provide feedback, monitor completion and determine whether certification requirements have been satisfied.

Students should avoid including unnecessary personal information about their own clients. If another person is identifiable in submitted material, the student should ensure they have an appropriate basis for taking and submitting that material.

We may retain appropriate records of courses completed, assessment outcomes, certificates issued, certificate dates and limited information reasonably necessary to verify a certificate later.

We will not disclose unnecessary personal information simply because someone asks us to verify a certificate.

Attending training or a nail appointment does not automatically give us permission to publish your identifiable photograph, testimonial or work for marketing.

Where appropriate, we will ask for permission before using identifiable customer or student content for promotional purposes. If processing relies on consent, you may withdraw consent for future use.

Booking a course or appointment does not automatically mean you agree to receive unrelated promotional marketing. Where consent or another specific condition is required for electronic marketing, we will follow the applicable rules.

You can unsubscribe or ask us to stop marketing at any time. Administrative messages about an existing booking, payment, course or appointment are not promotional marketing and may still be sent where necessary to provide the service.

Where necessary, information may be shared with categories of service provider such as website/hosting providers, payment processors, email and communication providers, online education/video/community platforms, professional advisers, IT/security providers, delivery or product suppliers where necessary, and public authorities or regulators where disclosure is legally required.

We do not sell customer or student personal information.

Some technology providers may process or store information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism, such as an applicable adequacy arrangement or contractual safeguard.

We keep personal information only for as long as reasonably necessary for the purpose, legal obligations and appropriate business records.

• Unconverted enquiries: normally up to 24 months after the last meaningful contact unless there is a reason to retain them longer.
• Booking, payment and accounting records: retained for the period reasonably necessary to meet tax/accounting obligations. As a sole trader, relevant business records may need to be kept for at least the statutory HMRC period.
• Course and assessment records: normally up to 6 years after completion or termination where reasonably necessary for contractual matters, complaints or legal claims.
• Core certificate verification records: limited information may be retained longer where reasonably necessary to verify a certificate.
• Appointment/consultation records: retained only for as long as reasonably necessary for service administration, safety, complaints, legal claims and legitimate business records, with sensitive information minimised.
• Marketing: until consent is withdrawn, you unsubscribe, or the information is no longer reasonably required, while a limited suppression record may be retained to respect an opt-out.

Information may be retained longer where required by law or reasonably necessary for an actual or anticipated legal claim.

We take reasonable organisational and technical steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet, email or messaging system can be guaranteed completely secure.

Depending on the circumstances and lawful basis, you may have rights including access, rectification, erasure, restriction, data portability, objection and rights relating to certain automated decision-making. These rights are not absolute and do not all apply in every situation.

To exercise a data-protection right, contact info@petranailseducation.co.uk. We may need to confirm your identity before responding and will respond within the period required by applicable law.

If you have concerns, please contact Petra first so the issue can be investigated. You also have the right to complain to the UK Information Commissioner's Office (ICO). Contacting Petra first does not remove your right to contact the ICO.

Our website may use cookies and similar technologies for essential functionality, security, preferences and, where enabled, analytics or other optional functions.

Where consent is legally required, non-essential cookies or similar technologies will not be used until the appropriate choice has been made. Information about the cookies actually used should be provided through the website's cookie controls and/or a dedicated Cookie Policy that reflects the site's real configuration.

Before adding advertising pixels, analytics or other non-essential tracking, we will review and update the cookie information and consent setup as necessary.

Our professional education, mentoring and nail services are primarily intended for people capable of entering into the relevant booking arrangements themselves. If we introduce a service specifically intended for children or young people, we will review the privacy, consent and contracting arrangements before collecting their information.

Petra Nails Education does not currently use solely automated decision-making that produces legal or similarly significant effects on students or customers. If this changes, this Policy will be updated as required.

We may update this Policy when our services, systems, providers or legal obligations change. The latest version will be published with an updated revision date and reviewed periodically.

For UK data-protection purposes, the data controller is Petra Nagy trading as Petra Nails Education.

15 Lindisfarne Avenue
Ellesmere Port
CH65 9JF
United Kingdom

Privacy email: info@petranailseducation.co.uk
Website: petranailseducation.co.uk