Data Protection Policy

Policy Overview
JD Aesthetics Training Academy Limited is committed to protecting the privacy and security of personal data provided by learners, staff, and other stakeholders involved in our education and training programs. This Data Protection Policy outlines our commitment to comply with relevant data protection laws and best practices, including the General Data Protection Regulation (GDPR), and to ensure that personal data is handled responsibly and ethically throughout our operations.

1. Purpose of the Data Protection Policy
This policy establishes the guidelines and principles that JD Aesthetics Training Academy Limited will follow to:
Ensure compliance with data protection laws and regulations.
Safeguard personal data held by the company.
Outline the rights of individuals whose personal data we collect and process.
Set clear expectations for how personal data will be collected, used, stored, and disposed of.

2. Scope of the Policy
This Data Protection Policy applies to all personal data processed by JD Aesthetics Training Academy Limited in the course of delivering education and training services. It covers personal data collected from learners, staff, suppliers, contractors, and any other stakeholders involved in our operations, including:
Personal details (e.g., names, addresses, contact information)
Employment and qualification details (for staff)
Learning records (e.g., assessment results, attendance)
Financial information (e.g., tuition fees, payment records)
Any other personal data required for training and education purposes

3. Legal Basis for Data Processing
JD Aesthetics Training Academy Limited will ensure that personal data is processed only when a valid legal basis exists under the GDPR. The key legal bases for processing personal data may include:
Consent: Obtained from individuals for specific purposes (e.g., subscribing to newsletters or participating in surveys).
Contractual Necessity: Processing necessary to fulfill a contract (e.g., delivering training courses, processing payments).
Legal Obligation: Processing required to comply with legal or regulatory obligations (e.g., maintaining learner records for accreditation purposes).
Legitimate Interests: Processing for legitimate business purposes, provided this does not override the rights and freedoms of individuals (e.g., marketing and communications related to educational services).

4. Principles of Data Processing
JD Aesthetics Training Academy Limited will adhere to the following principles when processing personal data:
Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and in a transparent manner.
Purpose Limitation: Personal data will only be collected for specified, legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Data Minimization: Only personal data that is necessary for the intended purpose will be collected.
Accuracy: Personal data will be kept accurate and up to date. Any inaccuracies will be rectified or erased without delay.
Storage Limitation: Personal data will be stored in a form which allows identification of individuals for no longer than necessary for the purposes of processing.
Integrity and Confidentiality: Personal data will be processed in a manner that ensures its security, using appropriate technical and organizational measures to prevent unauthorized access, disclosure, or loss.

5. Types of Personal Data We Collect
We collect and process the following types of personal data for educational and training purposes:
Learners:
Name, contact information (address, email, phone number)
Date of birth, gender, nationality
Academic background and qualifications
Course registrations, attendance records, assessments, and grades
Payment information related to course fees
Special requirements for learning support, if applicable
Staff:
Name, contact information, job title, and employment details
Qualifications, training records, and performance appraisals
Salary and payment information
Emergency contact details
Records related to health and safety (e.g., medical conditions, if relevant)
Other Stakeholders:
Names and contact details of suppliers, contractors, and partners
Correspondence, contracts, and other related business information

6. How We Use Your Personal Data
We use personal data for the following purposes:
For Learners:
Registering and processing course enrollments.
Managing and supporting learners during their courses.
Administering assessments, feedback, and certifications.
Processing payments and managing financial records.
Providing learner support services.
Complying with regulatory and accreditation requirements.
For Staff:
Managing employment-related information, including contracts, payroll, and performance evaluations.
Providing necessary training and professional development opportunities.
Ensuring health and safety compliance.
For Other Stakeholders:
Managing business relationships and contracts.
Processing payments and managing financial transactions.

7. Data Sharing and Third-Party Processors
JD Aesthetics Training Academy Limited may share personal data with third parties in the following circumstances:
Service Providers: We may share personal data with third-party service providers (e.g., IT support, payment processors, and administrative services) who assist us in delivering our education and training services. These third parties are required to process personal data in accordance with our instructions and applicable data protection laws.
Regulatory Authorities: We may be required to share personal data with regulatory bodies, accrediting organizations, or law enforcement agencies to comply with legal or regulatory obligations.
Business Transfers: In the event of a merger, acquisition, or other business restructuring, personal data may be transferred to new owners or entities, subject to applicable laws and data protection rights.

8. Data Retention
JD Aesthetics Training Academy Limited will retain personal data for no longer than necessary to fulfil the purposes for which it was collected or as required by law. Retention periods will vary depending on the nature of the data and the specific educational or training service provided. For example:
Learner Records: We will retain learner records (such as assessment results and certifications) for a minimum of 6 years, in compliance with industry regulations.
Staff Records: Staff records will be retained for the duration of employment and for a minimum of 6 years after employment ends, depending on legal or contractual requirements.

9. Data Subject Rights
Individuals have the following rights regarding their personal data:
Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
Right to Erasure: You have the right to request the deletion of your personal data, subject to certain conditions (e.g., if the data is no longer necessary for the purposes for which it was collected).
Right to Restriction of Processing: You can request that we limit the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to request that your personal data be transferred to another organization in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data in certain circumstances (e.g., for direct marketing purposes).
To exercise any of these rights, please contact us using the details provided below.

10. Data Security
We take appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
Using encryption and secure servers for storing personal data.
Restricting access to personal data to authorized personnel only.
Regularly reviewing and updating security procedures to address potential threats.

11. Data Breach Notification
In the event of a data breach that could pose a risk to the rights and freedoms of individuals, JD Aesthetics Training Academy Limited will notify the relevant supervisory authority within 72 hours and will inform affected individuals where necessary.

12. Review and Updates to the Data Protection Policy
This Data Protection Policy will be reviewed regularly to ensure it remains compliant with applicable laws and regulations and reflects best practices. Any changes to the policy will be communicated to all relevant stakeholders.

13. Contact Information
If you have any questions or concerns regarding this Data Protection Policy or wish to exercise your data protection rights, please contact us:
Email: jdaesthetics.cheshire@gmail.com
Phone: 07712106586