Call us 
0800 102 6420
Call us 0800 102 6420
My Learning Online Limited (trading as the UK Beauty School)
Company Number: 13938725
Last Updated: 30/01/26
Who We Are
This privacy policy applies to personal data collected and processed by My Learning Online Limited (company number 13938725), trading as UK Beauty School. We are the data controller for the personal information we collect about you.
Registered Office:
4th floor Imperial House, 8 Kean Street, London WC2B 4AS
Data Protection Officer:
Julian Ryan (contact details provided in Section 16)
Our Commitment to Your Privacy
We are committed to protecting your personal information and respecting your privacy rights. We recognise the importance of complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store, and protect your personal information in a transparent and accountable manner. We aim to give you a clear understanding of:
Third-Party Credit Assessments
Where you choose to apply for a payment plan, credit assessments and affordability checks are conducted by independent third-party finance providers, not by UK Beauty School. These providers act as separate data controllers and have their own privacy policies, which will be provided to you during the application process. We do not make automated decisions about your creditworthiness or financial eligibility.
Course Personalisation
We may personalise our communications and course recommendations based on the course or subject area you have expressed interest in. This personalisation happens after you have selected a course of interest and does not involve automated profiling or decision-making that affects your access to our services.
Policy Updates
This Policy may be updated periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by email (where we have your contact details) and by publishing the updated policy on our website with a new “Last Updated” date. Continued use of our services after notification constitutes acceptance of the updated policy.
2.1 Personal Data: Any information relating to an identified or identifiable individual, including but not limited to names, contact details, identification numbers, location data, and online identifiers.
2.2 Special Category Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.
2.3 Data Controller: UK Beauty School (My Learning Online Limited) as the entity that determines the purposes and means of processing personal data.
2.4 Data Processor: Third parties who process personal data on our behalf according to our instructions.
2.5 Processing: Any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
We may collect and process the following personal data:
When you enrol in courses or make payments, we collect financial information necessary to process your transaction and fulfil our contract with you:
– Payment method details
– Billing information
– Bank account details (processed through secure third-party payment providers)
– Transaction history
When you apply for a payment plan with a third-party finance provider, we may share the following information with them to facilitate your application:
– Financial eligibility information
– Driver’s licence details (for identity verification)
Note: Third-party finance providers are separate data controllers and will explain their own data collection during the application process.
We automatically collect certain technical information when you use our website:
We do not routinely collect special category data. If we need to process such data for specific legitimate purposes (such as reasonable adjustments for disabilities), we will obtain your explicit consent and explain the specific purpose.
We process your personal data based on the following legal grounds under UK GDPR Article 6:
4.1 Contract Performance: To provide our educational services, process enrollments, and fulfill our contractual obligations to you.
4.2 Legitimate Interests: We process certain data based on our legitimate interests, having balanced these against your rights and freedoms. We have conducted Legitimate Interests Assessments (LIAs) for:
– Business administration and service improvement: Necessary for efficient operations without imposing undue impact on individuals
– Fraud prevention and security: Protects both our business and our customers from financial crime
– Website analytics: Helps us improve user experience using anonymised/aggregated data
– Direct marketing to existing customers: Under PECR ‘soft opt-in’ rules (see Section 12)
Full LIA documentation is maintained in our internal records of processing activities.
4.3 Legal Compliance: To comply with regulatory requirements, tax obligations, and other legal duties.
4.4 Consent: For marketing communications to prospects, certain cookies, and any special category data processing.
4.5 Vital Interests: In rare circumstances where processing is necessary to protect someone’s life or physical safety.
4.6 Consent Withdrawal: Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal is as easy as giving consent initially. You can withdraw consent by:
– Clicking unsubscribe links in emails
– Contacting us using the details in Section 16
– Managing your preferences in your account settings
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
We use your personal data for the following purposes:
5.1 Service Delivery:
5.2 Business Operations:
5.3 Marketing and Communications:
5.4 Legal and Regulatory:
Cookies are small text files stored on your device when you visit our website. We use cookies to enhance your browsing experience, analyse website usage, and deliver relevant content.
Essential Cookies: Necessary for website functionality, security, and your session management.
Performance Cookies: Help us understand how visitors interact with our website by collecting anonymous statistical information.
Functional Cookies: Remember your preferences and settings to improve your experience.
Marketing Cookies: Track your online activity to deliver relevant advertisements and measure campaign effectiveness.
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality. Our cookie consent tool allows you to manage preferences for non-essential cookies.
We use Google Analytics and similar services to understand website usage. These services may use cookies and collect data according to their own privacy policies.
We may share your personal data with:
All third-party processors are bound by data processing agreements ensuring they handle your data securely and in accordance with UK GDPR requirements.
Some of our service providers may process data outside the UK/EEA. Where this occurs, we ensure adequate safeguards are in place, including:
You have the following rights regarding your personal data:
You have the right to receive clear information about how we process your data (provided in this policy).
You can request copies of the personal data we hold about you, along with information about how it’s being processed.
You can request correction of inaccurate or incomplete personal data.
You can request deletion of your personal data in certain circumstances, including:
You can request that we limit how we use your data in certain situations.
You can request to receive your data in a structured, commonly used format, or have it transferred to another organisation.
You have the right to object to processing of your personal data in certain circumstances:
Direct Marketing: You have an ABSOLUTE right to object to direct marketing at any time. We will stop processing your data for marketing purposes immediately upon request with no exceptions.
Processing Based on Legitimate Interests: You can object to processing based on our legitimate interests (e.g., business analytics, fraud prevention). We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for legal claims.
To exercise your right to object, use any of the contact methods in Section 16.
You have rights regarding solely automated decision-making and profiling that significantly affects you.
To exercise any of these rights:
We will respond within one month of receiving your request. For complex requests, we may extend this by up to two months and will inform you of any delay.
We retain personal data for different periods depending on the purpose:
When retention periods expire, we securely delete or anonymise personal data unless legal obligations require longer retention.
We implement appropriate technical and organisational measures to protect your personal data, including:
In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, along with the relevant supervisory authority.
All employees and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training.
10.4 Records of Processing Activities
We maintain comprehensive records of our processing activities as required by UK GDPR Article 30, documenting the purposes, categories of data, recipients, retention periods, and security measures for all processing operations.
10.5 Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to individuals’ rights and freedoms, including large-scale processing of personal data and use of new technologies.
10.6 Data Minimisation
We only collect and process personal data that is adequate, relevant, and
limited to what is necessary for the purposes for which it is processed.
Our courses are designed for individuals aged 16 and above. We verify age through date of birth on application / ID checks. If we become aware that someone under 16 has enrolled without appropriate consent, we will suspend the account..
For applicants aged 16-18, we require parental consent to complete enrolment.
We may send marketing communications based on:
Explicit Consent: For prospective customers and specific campaigns, we obtain
your consent before sending marketing communications.
Soft Opt-In (PECR): For existing customers, we may send marketing about similar courses and services under the Privacy and Electronic Communications Regulations (PECR) ‘soft opt-in’ provision, provided:
* You were given a clear opportunity to opt out when we collected your details
* You are given a clear opt-out in every communication
* The marketing relates to similar products/services to those you’ve purchased or enquired about
Business-to-Business: Statutory exemptions may apply for certain B2B communications.
You can unsubscribe from marketing communications at any time by:
Our Position on Automated Decision-Making
UK Beauty School does not make solely automated decisions that produce legal effects or similarly significantly affect you. We do not use automated systems to determine your eligibility for courses, pricing, or access to our educational services.
13.1 What We Do
We use basic technology to personalise your experience in the following ways:
Course Recommendations: After you express interest in a particular course or subject area, we may recommend related courses or provide tailored information based on your stated interests. This is not automated profiling – it’s standard marketing personalisation based on your own expressed preferences.
Communication Personalisation: We tailor our email content and website messaging to reflect the course category you’ve shown interest in. For example, if you enquire about beauty courses, we’ll focus our communications on beauty-related content rather than unrelated subjects.
Security and Fraud Detection: We use automated systems to detect potentially fraudulent activity, security threats, or unusual account behaviour to protect you and our services.
These activities do not constitute “automated decision-making” under UK GDPR Article 22 because they do not produce legal effects or similarly significantly affect you.
13.2 Third-Party Payment Plan Providers
If you choose to apply for a payment plan to fund your course, credit assessments and affordability checks are conducted by independent third-party finance providers, not by UK Beauty School.
Important Information:
Your Rights with Finance Providers:
If a payment plan provider uses solely automated decision-making (including profiling) to assess your application, you have the right to:
These rights should be exercised directly with the finance provider. We will provide you with their privacy policy and contact details during the payment plan application process.
13.3 Website Analytics
We use analytics tools (such as Google Analytics) to understand how visitors use our website. This involves automated processing of usage data but does not result in decisions that legally or significantly affect you. You can manage analytics cookies through our cookie consent tool.
13.4 Your Right to Object
You have the right to object to any processing that might be considered profiling. If you have concerns about how we use your data, please contact us using the details in Section 16, and we will review your individual circumstances.
Our website may contain links to third-party websites. This privacy policy only applies to our website and services. We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies.
We may update this privacy policy to reflect changes in our practices, services, or legal requirements. We will:
For any questions about this privacy policy or to exercise your rights:
Email: [email protected]
Phone: 0800 102 6420
Post: My Learning Online Limited (trading as UK Beauty School)
4th floor Imperial House, 8 Kean Street, London WC2B 4AS
We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with UK GDPR requirements.
Our DPO is Julian Ryan, who can be contacted regarding any data protection queries, concerns, or requests:
Email: [email protected]
Phone: 0800 102 6420
Post: Data Protection Officer (Julian Ryan)
My Learning Online Limited
4th floor Imperial House, 8 Kean Street, London WC2B 4AS
You may contact our DPO directly if you:
Our DPO works independently to monitor our compliance with data protection law and serves as a point of contact with the Information Commissioner’s Office (ICO).
If you have concerns about how we handle your personal data, you can:
We are committed to resolving any privacy concerns promptly and fairly. All complaints will be acknowledged within 48 hours and investigated thoroughly in accordance with our customer service standards.
