Privacy Policy
1. Introduction
Cheshire Training Academy Ltd (CTA) is committed to protecting the privacy and personal information of our learners, prospective learners, customers, staff and website visitors.
This Privacy Policy explains how we collect, use, store, share and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
By using our website or services, you acknowledge that your personal information will be handled as described in this policy. Where consent is required, we will request it separately.
2. Who We Are
Cheshire Training Academy provides regulated qualifications, accredited training courses and professional development opportunities within the beauty, aesthetics, massage and complementary therapy industries.
Contact Details
Cheshire Training Academy
Unit 4, John Street
Warrington
WA2 7UB
Email: info@ctagroup.co.uk
Telephone: 01925 598077
Website: www.cheshiretrainingacademy.co.uk
For the personal information we control, CTA is responsible for ensuring that it is processed lawfully, fairly and transparently.
3. Personal Information We Collect
Depending on your relationship with CTA, we may collect the following information:
Full name, date of birth and contact details.
Home address, telephone number and email address.
Course bookings, enrolment details and qualification history.
Identification and eligibility documentation.
Funding and financial eligibility information.
Payment and transaction records.
Attendance, assessment results and qualification achievements.
Relevant health information, disabilities or learning support requirements.
Communications, enquiries, feedback and complaints.
Website usage information, cookies and technical data.
We only collect information that is relevant and necessary for the purposes for which it is required.
4. How We Use Your Personal Information
We may use personal information to:
Process course bookings and enrolments.
Deliver training, examinations and assessments.
Register learners with awarding organisations.
Verify qualification and funding eligibility.
Maintain learner attendance and achievement records.
Provide appropriate learning support.
Process payments, refunds and financial transactions.
Communicate important course information.
Respond to enquiries, complaints and requests.
Meet legal, regulatory and contractual obligations.
Improve our training services and website.
Send marketing communications where legally permitted.
We will not use personal information for purposes incompatible with those for which it was originally collected unless permitted by law.
5. Lawful Bases for Processing Personal Information
CTA processes personal information where an appropriate lawful basis applies under UK GDPR.
These may include:
Contractual Necessity
Where processing is necessary to provide courses, qualifications or services that you have requested.
Legal Obligation
Where we are required to maintain records or provide information to regulators, funding organisations or other relevant authorities.
Legitimate Interests
Where processing is necessary for the effective operation, administration and improvement of our business, provided those interests do not override individuals' rights.
Consent
Where we request permission for specific activities, such as certain marketing communications.
Special Category Information
Where sensitive information, including relevant health or disability information, is processed, CTA will identify an appropriate lawful basis and an additional condition under Article 9 of UK GDPR.
6. Learner Records and Awarding Organisations
As an approved training provider, CTA is required to maintain appropriate learner and qualification records.
Relevant information may be shared with awarding organisations, including:
VTCT Skills (including ITEC).
Focus Awards.
Other relevant awarding or regulatory organisations where applicable.
Information shared may include identification details, registration information, assessment outcomes, attendance and qualification achievements.
Where courses are government-funded, relevant information may also be shared with authorised funding partners, education authorities and organisations responsible for funding, quality assurance or compliance.
Records may be retained for periods required by awarding organisations, funding agreements or applicable legislation.
7. Payments and Third-Party Providers
CTA uses external payment providers to facilitate secure online payments.
These may include:
Stripe.
PayPal.
Klarna.
Payment providers process relevant personal and financial information in accordance with their own privacy policies and applicable data protection requirements.
CTA does not normally receive or store complete payment card details processed through these providers.
We may retain transaction records, payment confirmations and refund information for accounting, contractual and legal purposes.
8. Online Learning Platforms
CTA may use third-party learning management systems, including Thinkific, to deliver online learning materials, assessments and educational resources.
Where applicable, personal information may be processed to:
Create learner accounts.
Provide access to course materials.
Monitor learning progress.
Record assessment activity.
Support course completion.
Relevant information may be accessible to authorised CTA staff, tutors and assessment personnel where necessary.
9. Website Cookies and Analytics
Our website may use cookies and similar technologies to support website functionality, understand visitor activity and improve the user experience.
Some cookies are necessary for the operation of the website, while others may be used for analytics or marketing purposes.
Where legally required, visitors will be given the opportunity to accept or reject non-essential cookies before they are activated.
Visitors can also manage cookies through their browser settings.
10. Marketing Communications
CTA may contact individuals with information about upcoming courses, training opportunities, events and promotions where permitted by law.
Where consent is required, we will obtain it before sending marketing communications.
Individuals can withdraw marketing consent or unsubscribe from promotional communications at any time.
To request removal from our marketing communications, please contact:
Withdrawing marketing consent will not affect essential communications relating to existing bookings, qualifications or contractual obligations.
11. Sharing Personal Information
CTA does not sell personal information to third parties.
We may share relevant information with trusted organisations where necessary, including:
Awarding organisations and qualification regulators.
Government funding bodies and authorised funding partners.
Payment processing providers.
Learning management platforms.
IT, website and administrative service providers.
Professional advisers and regulatory authorities.
Other organisations where disclosure is required or permitted by law.
Where third parties process information on our behalf, we take appropriate steps to ensure suitable data protection arrangements are in place.
12. International Data Transfers
Some third-party systems and service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, CTA will take appropriate steps to ensure that transfers comply with UK data protection legislation.
This may include relying on UK adequacy regulations or approved contractual safeguards, as applicable.
13. How Long We Keep Personal Information
CTA retains personal information only for as long as necessary to fulfil the purposes for which it was collected, including relevant legal, contractual, funding and regulatory obligations.
Retention periods may vary depending on the type of information.
For example:
Qualification records may need to be retained in accordance with awarding-body requirements.
Government-funded learner records may be subject to specific contractual retention periods.
Financial records may be retained to comply with accounting and taxation requirements.
Marketing information will be retained only while there is an appropriate lawful basis for its continued use.
Once information is no longer required, it will be securely deleted, anonymised or otherwise disposed of appropriately.
14. Data Security
CTA takes reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
Restricted access to learner records.
Password-protected systems.
Secure third-party platforms.
Appropriate staff confidentiality arrangements.
Secure storage and disposal procedures.
Access controls based on operational responsibilities.
Access to personal information is limited to individuals who require it for legitimate business, educational or regulatory purposes.
15. Your Rights Under UK GDPR
Depending on the circumstances, individuals have the right to:
Request access to their personal information.
Request correction of inaccurate or incomplete information.
Request deletion of personal information where applicable.
Request restriction of certain processing activities.
Object to processing in certain circumstances.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
Be informed about qualifying automated decision-making activities.
These rights are subject to applicable legal conditions and exemptions.
For example, CTA may be required to retain certain learner records even where a deletion request has been made.
To exercise your data protection rights, please contact:
We will respond within the timeframes required by applicable data protection legislation.
16. Children's Personal Information
CTA may provide training opportunities to learners under the age of 18 where permitted by course eligibility requirements.
Where personal information relating to younger learners is collected, we will take appropriate steps to ensure that it is processed lawfully and securely.
Where required, parental or guardian involvement and additional safeguarding considerations will apply.
17. Complaints and the Information Commissioner's Office
If you have concerns about how CTA collects, processes or protects your personal information, please contact us in the first instance.
Email: info@ctagroup.co.uk
We will review concerns fairly and take appropriate action where necessary.
Individuals also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
ICO Website: www.ico.org.uk
ICO Telephone: 0303 123 1113
18. Changes to This Privacy Policy
CTA may update this Privacy Policy periodically to reflect changes in legislation, regulatory requirements, business operations or the services we provide.
The most recent version will be made available on our website.
Where significant changes affect how personal information is processed, we will take appropriate steps to notify affected individuals where required.
19. Contact Information
For any questions regarding this Privacy Policy, personal information or data protection rights, please contact:
Cheshire Training Academy
Unit 4, John Street
Warrington
WA2 7UB
Email: info@ctagroup.co.uk
Telephone: 01925 598077
Nothing in this Privacy Policy excludes or restricts any rights available under applicable UK data protection legislation.