1. Who We Are
Cosmeducate is a medical aesthetics provider offering treatments, accredited training, and CE-certified aesthetic products throughout the UK and EU.
Data Controller: Cosmeducate Ltd.
Contact: info@cosmeducate.uk
Registered Address: Corn Exchange, 55 Mark Lane Greater London. London EC3R 7NE United Kingdom
2. What Personal Data We Collect
We may collect the following categories of personal data:
•Identity Data: Name, title, date of birth.
•Contact Data: Email address, phone number, billing and delivery addresses.
•Account Data: Login credentials, user profile details.
•Transaction Data: Payment information (via secure processors), order history.
•Technical Data: IP address, browser type, device information, location data.
•Usage Data: Pages visited, time spent on site, interaction with content.
•Marketing Preferences: Opt-in or opt-out selections for newsletters or promotions.
•Medical Data (if applicable): Voluntarily provided health-related information for treatment or training purposes.
3. How We Collect Your Data
We collect personal data through:
•Website forms and account registration.
•Orders placed on our shop.
•Bookings for treatments or training courses.
•Direct communications (email, phone, support requests).
•Cookies and similar technologies (see Cookie Policy).
•Third-party platforms where you engage with our brand.
4. Why We Collect and Use Your Data
We process your personal data for the following purposes:
•To process and fulfill orders and bookings.
•To manage your account and provide customer service.
•To send administrative, transactional, and marketing communications.
•To improve our website and user experience.
•To meet legal and regulatory obligations.
•To personalize offers, content, or promotions based on your interests.
5. Legal Basis for Processing
We rely on the following legal grounds under the GDPR:
•Contractual necessity: To fulfill your purchase, training enrollment, or booking.
•Legitimate interest: To run our business, prevent fraud, and improve services.
•Consent: For marketing and certain types of data collection.
•Legal obligation: To comply with applicable laws and regulations.
6. How We Share Your Data
We may share your personal data with:
•Payment processors (e.g., Stripe, PayPal).
•Shipping and logistics providers.
•Third-party service providers (CRM, analytics, marketing platforms).
•Regulatory bodies, if legally required.
•Professional educators or trainers (for course participants only).
We never sell your data.
7. International Transfers
Your data may be processed outside the UK/EU, but we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data.
8. Data Retention
We retain your data only as long as necessary for:
•The purposes it was collected for.
•Compliance with legal, accounting, or reporting requirements.
Typical retention periods are between 3 to 7 years depending on the data type.
9. Your Rights
Under GDPR, you have the right to:
•Access the personal data we hold about you.
•Request correction or deletion.
•Object to processing or request restriction.
•Withdraw consent at any time.
•Lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at [Insert Email Address].
10. Security Measures
We take your privacy seriously and use strict security protocols including:
•SSL encryption
•Secure servers and firewalls
•Access control and authentication systems
However, no digital transmission is ever 100% secure, so we encourage you to remain cautious when sharing information online.
11. Cookies
Our website uses cookies and similar technologies. For more information, please see our [Cookie Policy].
12. Changes to This Policy
We may update this policy from time to time. When we do, the revised version will be posted with an updated effective date.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Email: info@cosmeducate.uk
Phone: +44(0)7516612894
Address: Corn Exchange, 55 Mark Lane Greater London. London EC3R 7NE United Kingdom