UK GDPR Compliance

Couture Nail Academy is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law and how you can exercise your rights as a data subject.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the UK. While Couture Nail Academy does not maintain a user registration system or store personal data in a database, we may collect limited personal data through website analytics, server logs, and contact forms. This data is processed solely for operational and communication purposes related to our educational services.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access – to request confirmation of whether your personal data is being processed and to obtain a copy of it.
Right to rectification – to correct inaccurate or incomplete personal data.
Right to erasure – to request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing – to limit how your data is used under certain conditions.
Right to data portability – to receive your data in a structured, commonly used, and machine-readable format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

How We Comply

We do not collect personal data for profiling or automated decision-making. Any data collected via our website (e.g., through contact forms or analytics tools) is processed minimally and securely. We use encrypted connections (HTTPS), retain data only as long as necessary, and do not share data with third parties except for essential service providers (e.g., email delivery or analytics) who are contractually bound to protect your data.

Data We Process

Any personal data we process is limited to:

Name and email address submitted via our contact form
IP address and browsing behaviour collected anonymously through website analytics
Server logs containing technical data (e.g., browser type, access time)

This data is not linked to any identity beyond what is voluntarily provided.

Legal Basis for Processing

We process personal data based on one of the following legal bases under UK GDPR:

Consent – when you voluntarily submit a contact form
Legitimate interest – for website functionality, security, and analytics

We do not process special category data (e.g., health, race, religion).

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on our site). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt. In complex cases, we may extend this period by two additional months, and we will inform you of any delay and the reasons for it.

No Discrimination Policy

You will not be denied services, charged different prices, or receive a different level of service because you have exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The most recent version will always be available here, and we will notify you of material changes via our website.

Contact Information

If you have any questions about this compliance page or wish to exercise your rights, please contact:

Celina Fairweather
31 Tinakori Road, Thorndon, Wellington 6011, New Zealand
[email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.

UK GDPR