At Red Training Academy we take your privacy seriously, so this is why I ask you read my privacy policy. This can be emailed to you if you request. I do not send out any marketing advertising only feedback forms/sms reminders/email reminders.
Red Training Academy — Privacy Policy
Last updated: 30 September 2026
Who we are
Red Training Academy — Nail, Beauty & Massage Training is operated by Zoë Ghirculeasa as a sole trader, formerly trading as Nail It Red. Zoë is the data controller responsible for the personal information described in this policy.
Website: https://www.nailitred.com
Email: nailitred7@gmail.com
Telephone: 07411 963 574
Business written correspondence please contact via phone or email as it is a residential address.
This policy covers our academy website, course enquiries, students, training models and ongoing student support. It does not cover Massage by Zoë treatment services.
Information we collect
Depending on your enquiry or participation, we collect information needed to respond to you and deliver training, including:
Your name and contact details, and the information you provide through our website or by telephone, email or other correspondence.
Course bookings, relevant previous qualifications, attendance, model practice, assessments and certification records.
Information needed to organise model participation and record practical work.
Payment confirmations, transaction references, amounts paid and refund records supplied by our payment providers.
Correspondence relating to training, complaints and the lifetime student support we offer.
Technical information generated when you visit our Squarespace website, such as browser and device information, IP address and page activity, depending on the website settings and your cookie choices.
Most information comes directly from you. Payment information also comes from SumUp or PayPal, and website information comes through Squarespace. Where students submit records containing information about their models, we receive that information from the student. Models should be given this privacy policy when their information is collected.
Why we use information and our lawful bases
We use personal information for the following purposes:
Purpose Lawful basis Responding to a prospective student's enquiry, arranging bookings and delivering purchased training, assessment and agreed student support Taking steps at your request before entering a contract, or performing our contract with you Organising training models and administering practical training Our legitimate interests in organising and documenting training safely and effectively, balanced against your rights Maintaining appropriate assessment and training records, responding to complaints and retaining relevant records for insurance and potential claims Our legitimate interests in demonstrating training delivery, resolving disputes and protecting our business and participants Maintaining accounting records and responding to lawful requests where disclosure is mandatory Compliance with legal obligations Managing and securing our website and business systems Our legitimate interests in operating a reliable and secure service
Where an activity requires consent, we will ask for it separately and explain what it covers. Necessary booking information is needed to arrange and deliver your course. If essential information is not provided, we may be unable to complete a booking or assessment. We will explain any information required for model participation before collecting it.
Payments
Debit and credit card payments are made through SumUp payment links or PayPal. These providers process payment details under their own privacy notices. We receive information needed to confirm and administer your payment; we do not ask you to send full card details to us by email or through an enquiry form.
Provider privacy information is available through:
Who may receive information
We share information only where needed for the purposes described here, including with:
Squarespace, which hosts our website and processes website enquiries where its forms are used.
Microsoft, which provides OneDrive storage for our student and model records.
SumUp and PayPal for payments and refunds.
Our insurer, ABT, where relevant to insurance enquiries or claims.
Accreditation or certification providers, where necessary for course administration, quality assurance or issuing qualifications [confirm the providers and what is shared].
Professional advisers and public authorities where necessary for advice, a legal obligation or a dispute.
We do not sell personal information.
Storage and security
Student and model records are stored in password-protected files on Microsoft OneDrive and accessed through password-protected devices. We restrict access to those who need information for their work and take reasonable steps to protect it against unauthorised access, loss and misuse. No online system can be guaranteed completely secure.
International processing
Some of our service providers may process information outside the UK. The countries involved and the applicable transfer arrangements depend on the provider and account settings.
How long we keep information
We retain relevant student, model and training records for seven years, following the retention requirement advised by our insurer, ABT. This insurance requirement is distinct from a statutory requirement to retain every type of personal information.
[Confirm with ABT when the seven years starts, and whether different rules apply to under-18s. Insert the confirmed starting point here.]
We retain accounting and payment records for the period required by applicable tax law. Enquiries that do not lead to a booking are kept only as long as needed to answer them and resolve any follow-up. Ongoing student support correspondence is reviewed for relevance and kept while needed to provide support or resolve an issue; offering lifetime support does not mean retaining every document indefinitely.
If a complaint, claim or legal requirement justifies longer retention, we retain only the relevant records for the necessary additional period. We delete or securely dispose of information when it is no longer needed.
Marketing and photographs
We do not currently send promotional emails or text messages. Booking, course and requested student support communications are service communications.
If we introduce promotional communications, we will explain the applicable choices and provide an easy way to opt out. We will seek separate permission before using identifiable student or model photographs, videos or testimonials for publicity. Agreeing to this privacy policy is not permission to publish your image.
Website cookies
Our website is hosted by Squarespace. Cookies and similar technologies may be used for essential website functions and, depending on our settings, analytics or embedded content.
[Before publishing: check the cookies actually used and configure the cookie controls to match. Add or link a cookie notice explaining cookie names/categories, purposes, durations, providers and available choices. Confirm the applicable consent or exemption requirements for each use; this privacy policy alone does not configure cookies or collect cookie consent.]
Your rights
Depending on the circumstances and the lawful basis involved, you may ask us to provide access to your personal information, correct inaccurate information, erase information, restrict its use, or provide information in a portable format.
You can object to processing based on our legitimate interests. You have an absolute right to object to use of your information for direct marketing.
Where we rely on consent, you can withdraw it by contacting us. Withdrawal does not affect processing already carried out lawfully. Rights are subject to applicable conditions; for example, we may need to keep some information for legal obligations or legal claims.
Contact us using the details above to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month, subject to any extension or adjustment permitted by law.
Complaints
Please contact Zoë Ghirculeasa if you have concerns about how your information is handled. You can also complain to the Information Commissioner's Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
You do not have to contact us before raising a concern with the ICO.
Changes to this policy
We review this policy when our services or information practices change. The latest version will be available on our website, with its updated date.