2. Information We Collect

We may collect the following information:

Identity & Contact Information

Name, postal address, email, mobile number

Payment Information

Processed securely by Stripe via Teachable (we do not store card details)

Account & Course Data

Course enrolments, progress, assessments, certificates

AI/GPT Interaction Data

Questions, responses, or text you enter into our GPT-powered tools or chat assistantsTechnical DataIP address, browser type, device, usage statisticsMarketing & CommunicationsPreferences for newsletters, offers, and campaign tracking (Google Analytics, Meta Pixel, TikTok Pixel, GoHighLevel CRM)

3. How We Use Your Information

We process personal data to:

- deliver and manage your online training courses,

- provide customer support,

- process payments via Stripe,

- communicate important updates,

- analyse and improve our website and training services,

- run marketing campaigns and measure performance,

- operate GPT-based coaching and learning assistants.

We rely on the following lawful bases for processing:

Contractual necessity – to provide the services you request.

Legitimate interests – to improve our services and marketing effectiveness.

Consent – for optional communications and analytics tracking.

Legal obligation – to maintain records for tax or compliance purposes.

4. Use of GPTs (AI Assistants)

Spa Finishing School uses GPT-powered assistants (developed on the OpenAI platform) to enhance your learning experience. These may ask or answer questions related to your course, marketing, or business development.

We have disabled the “Use conversation data to improve OpenAI models” option.
This means your chat content is not used to train or improve OpenAI’s public models.

- Chat data may be temporarily processed by OpenAI to deliver responses, under strict confidentiality and security standards.

- Do not enter sensitive personal or financial information into GPT tools unless specifically requested for course purposes.

- We may review anonymised transcripts to improve our training programmes and content quality.

5. Data Sharing

We only share your information with trusted service providers as necessary to operate our business:

Teachable – course delivery platform

Stripe – secure payment processing

OpenAI – GPT functionality

Google Analytics – website usage analytics

Meta (Facebook & Instagram) / TikTok Pixels – marketing analytics

GoHighLevel – CRM and email communication

All third parties are bound by data-processing agreements and comply with UK GDPR or equivalent standards.

6. Data Retention

We retain your personal information only for as long as necessary to:

- fulfil the purposes described above, or

- comply with legal, accounting, or reporting obligations.

Student and account data are typically retained for up to six years after your last interaction, unless you request deletion sooner.

7. Data Security

We use technical and organisational safeguards to protect your data from loss, misuse, or unauthorised access, including:

- encrypted storage and payment gateways,

- role-based access controls, and

- secure cloud hosting within the UK/EU.

8. Your Rights

Under the UK GDPR, you have the right to:

- access a copy of your personal data,

- request correction or deletion,

- restrict or object to processing,

- withdraw consent at any time, and

- request data portability.

To exercise any of these rights, please contact [email protected].

9. Cookies and Tracking

We use cookies and similar technologies to analyse website traffic and improve functionality.
You can control cookies via your browser settings or our on-site cookie banner.

10. International Transfers

Some partners (e.g., OpenAI, Google, Meta) may process data outside the UK.
When this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place to protect your data.

11. Changes to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page with a revised “Last updated” date.