PRIVACY POLICY
Last updated: 15 September 2026
AK Training and Beauty Ltd, trading as Agatha K. Micropigmentation & Training Academy (“Agatha K.”, “we”, “us” or “our”), is committed to protecting your privacy and handling your personal information fairly, lawfully and securely.
This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with, how long we keep it, and your rights in relation to your personal data.
1. Who we are
Data Controller:
AK Training and Beauty Ltd
Trading as Agatha K. Micropigmentation & Training Academy
Website:
https://www.agathamicro.co.uk/
Address:
97 High Road
Beeston
Nottingham
NG9 2LH
Email:
info@agathamicro.co.uk
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.
2. Personal information we collect
Depending on how you interact with us, we may collect:
Identification and contact information, including your name, email address, telephone number, postal address and postcode.
Booking and transaction information, including appointments, treatments, courses, purchases, invoices, payment status and order history.
Student and training information, including qualifications, course enrolment details, assessments, case studies, examination records, certificates, correspondence and training progress.
Treatment and consultation information, including information required to assess whether a treatment is appropriate and safe for you.
This may include health information such as medical history, allergies, medication, pregnancy or breastfeeding status, skin conditions and other information relevant to a treatment.
Photographs and images, including treatment photographs, consultation photographs, student case-study photographs and photographs uploaded as part of a model application.
Model application information, including your contact details, treatment interests, previous permanent makeup information, general availability and photographs of the proposed treatment area.
Website and technical information, such as IP address, browser type, device information, pages visited, cookie identifiers, advertising identifiers and website interaction information.
Communications, including emails, contact-form enquiries, messages, telephone enquiries and correspondence with our team.
Marketing preferences, including whether you have chosen to receive marketing communications from us.
3. Why we use your personal information
We may use your information to:
- provide treatments, training, products or services you request;
- manage appointments, bookings, course enrolments and purchases;
- respond to enquiries;
- assess suitability for treatments and student model appointments;
- administer student training, assessment and certification;
- maintain appropriate treatment and consultation records;
- process payments and refunds;
- manage our accounts and comply with tax, accounting and legal obligations;
- communicate important information about bookings, treatments, courses or orders;
- protect our website, systems, clients and business from fraud, misuse and security threats;
- improve our website, services and customer experience;
- measure the effectiveness of advertising where you have permitted relevant tracking technologies;
- send marketing communications where permitted by law;
- establish, exercise or defend legal claims.
4. Our lawful bases for processing
Under UK data protection law, we must have a lawful reason for using your personal information.
Depending on the circumstances, we rely on one or more of the following lawful bases:
Contract — where processing is necessary to provide a treatment, course, product or other service you have requested, or to take steps at your request before entering into a contract.
Legal obligation — where we are required to keep or use information to comply with legal, tax, accounting or regulatory obligations.
Legitimate interests — where processing is reasonably necessary for the operation and protection of our business, provided that your rights and interests do not override those interests.
Our legitimate interests may include responding to enquiries, administering model applications, maintaining appropriate business records, preventing fraud, improving our services and establishing or defending legal claims.
Consent — where you have specifically agreed to a particular use of your information, such as certain marketing communications, optional photography uses or non-essential cookies.
Where we rely on consent, you can withdraw your consent at any time.
5. Health information and other sensitive information
Certain information we collect during treatment consultations may constitute special-category personal data, particularly information concerning your health.
We only collect health information where it is relevant to assessing treatment suitability, safety, contraindications, aftercare or maintaining appropriate treatment records.
Where required, we rely on explicit consent as the additional condition for processing this information under UK data protection law.
You may be asked to provide health information through a separate consultation or consent form before receiving a treatment.
We do not ask applicants to provide detailed medical information simply to join our general PMU model applicant list. Appropriate medical and contraindication screening takes place separately before an appointment is confirmed or treatment proceeds.
6. PMU model applications and uploaded photographs
If you apply to become a student model, we may collect:
- your name and contact details;
- postcode;
- treatment preferences;
- whether you have previously had permanent makeup in the relevant area;
- general availability; and
- a photograph of the area you would like treated.
We use this information to assess whether you may be suitable for an upcoming student training session or final assessment and to contact you about appropriate model opportunities.
Photographs submitted with a model application are not published on our website or social media simply because you have submitted an application.
We do not use model application photographs for facial recognition, biometric identification or automated identity matching.
If we later wish to use your photograph for marketing, social media, advertising, portfolio or promotional purposes, we will obtain separate permission where required.
Model application information and photographs are normally retained for up to 12 months, unless you ask us to delete them sooner or we need to retain particular information for another lawful reason.
Submitting a model application does not guarantee an appointment.
7. Treatment photographs
We may take photographs before, during or after a treatment where appropriate for:
- consultation and treatment planning;
- documenting treatment progress or results;
- maintaining treatment records;
- student training or assessment where applicable;
- insurance, complaints or legal purposes.
Where photographs are required as part of a treatment or training record, we will explain their purpose.
Use of identifiable photographs for advertising, social media, website portfolios or promotional purposes is separate from treatment-record purposes and will not be assumed simply because you have received a treatment or acted as a student model.
8. Payments and finance providers
We do not normally receive or store your complete payment-card details ourselves.
Payments may be processed through third-party payment providers such as Stripe, PayPal, Payl8r, Clearpay, or other payment providers made available at checkout.
These providers may receive information required to process the transaction, including your name, contact details, billing information, order information and payment amount.
Finance or instalment-payment providers may carry out their own eligibility, identity, fraud or credit assessments. These organisations operate under their own privacy policies and may act as independent data controllers for some processing activities.
9. Who we share personal information with
We only share personal information where there is a legitimate business or legal reason to do so.
Depending on the service you use, recipients may include:
- website hosting and IT providers;
- email and communications providers;
- payment and finance providers;
- booking and appointment-management systems;
- website, ecommerce and online-learning providers;
- awarding organisations and qualification bodies where necessary for training or certification;
- accountants, professional advisers and insurers;
- analytics and advertising providers;
- delivery or fulfilment providers where relevant;
- regulators, courts, law-enforcement authorities or other organisations where disclosure is legally required or necessary to protect our rights.
Service providers acting on our behalf are only permitted to use personal information for the purposes for which it has been provided and subject to appropriate data-protection obligations.
10. Website analytics, advertising and tracking
Our website may use cookies and similar technologies to operate correctly, understand website usage and measure advertising performance.
Where required, non-essential analytics or advertising technologies are used only after the appropriate cookie choice or consent has been obtained.
These technologies may involve providers such as Google, Meta and OpenAI, and may collect or receive information such as:
- pages viewed;
- interactions with the website;
- advertising click identifiers;
- browser or device information;
- IP address;
- conversion events such as enquiries or purchases; and
- where configured, pseudonymised or securely hashed identifiers.
You can control non-essential cookies through our cookie-consent tools.
Please also see our Cookie Policy for further information.
11. Marketing communications
We may send you information about our treatments, courses, products or services where you have consented to receive marketing or where another lawful marketing rule applies.
Applying to become a student model does not automatically subscribe you to general marketing communications.
Where we request marketing consent, this will be separate from other terms and will not be a condition of applying to become a model.
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting us.
You have the right to object to direct marketing at any time.
We may retain a minimal suppression record after you unsubscribe so that we can ensure we do not accidentally contact you again for marketing purposes.
Electronic marketing is also subject to the Privacy and Electronic Communications Regulations (PECR). In some circumstances businesses may use the limited “soft opt-in” for their own similar products or services, but customers must have been given an opportunity to opt out when details were collected and in every subsequent message.
12. Cookies
Cookies are small files that may be stored on your device when you visit our website.
Some cookies are necessary for the website to function. Others may be used for analytics, personalisation or advertising.
Where the law requires consent, we will ask for your choice before using non-essential cookies.
You can change your cookie preferences using the cookie-management tools available on our website.
13. Comments and public content
If visitors leave comments on our website, we may collect the information entered into the comments form together with technical information such as the visitor’s IP address and browser information for security and spam-detection purposes.
Where Gravatar or similar services are used, a pseudonymised version of an email address may be sent to that provider to determine whether a profile image is associated with the account.
Content you choose to post publicly may remain visible on the relevant page.
14. Embedded content and external services
Pages on our website may contain content or functionality provided by other organisations, such as videos, social-media content, maps, booking systems or payment services.
These providers may collect information about your interaction with their services and may use cookies or similar technologies according to their own privacy practices.
We recommend reviewing the privacy information provided by those organisations where appropriate.
15. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is lawful.
Depending on the country and provider, this may include reliance on UK adequacy regulations, contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism.
16. How long we keep personal information
We do not keep personal information for longer than reasonably necessary.
Our general retention approach is:
Model applications and model photographs: up to 12 months.
General enquiries that do not become bookings or customers: normally up to 12 months after the last meaningful contact.
Orders, invoices and financial records: normally retained for the period required for tax, accounting and legal purposes, typically up to 6 years where applicable.
Treatment and consultation records: normally retained for up to 7 years following the last treatment, or longer where necessary to meet insurance, legal or professional requirements.
Student and training records: retained for as long as necessary to administer the course and meet awarding-body, qualification, insurance, contractual and legal requirements.
Marketing records: retained until you unsubscribe, withdraw consent, object to marketing, or we determine that the information is no longer required. We may retain minimal suppression information after an opt-out.
Website security and technical logs: retained only for as long as reasonably necessary for security, troubleshooting and fraud-prevention purposes.
Where information is relevant to a dispute, complaint, investigation or legal claim, we may retain it for longer where reasonably necessary.
17. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, password protection, secure hosting, security software, backups and restricting access to information to people who require it for legitimate business purposes.
No method of electronic storage or internet transmission can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we hold.
18. Your data-protection rights
Depending on the circumstances and our lawful basis for processing, you may have rights including:
- the right to access personal information we hold about you;
- the right to correct inaccurate or incomplete information;
- the right to request deletion of your information;
- the right to restrict certain processing;
- the right to object to certain processing;
- the right to data portability in applicable circumstances;
- the right to withdraw consent where processing relies on consent; and
- the right to object to direct marketing.
Some rights are subject to legal exceptions and may not apply in every circumstance.
To exercise your rights, contact:
We may need to verify your identity before responding to a request.
19. Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to investigate.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
20. Automated decision-making
AK Training and Beauty Ltd does not normally make decisions about clients, students or model applicants based solely on automated processing where those decisions would have significant legal or similar effects.
Third-party finance or payment providers may use automated systems for fraud prevention, credit assessment or eligibility decisions. Where they do so, their own privacy information explains how those systems operate and what rights you may have.
21. Providing information to us
Certain personal information is necessary for us to provide services or assess an application.
For example, we may be unable to:
- process an order without appropriate billing and contact information;
- provide a treatment without necessary consultation information;
- administer a training course without student information; or
- assess a PMU model application without sufficient contact details and an appropriate photograph.
Where providing information is optional, we will make this clear where appropriate.
22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, third-party providers or legal requirements.
The latest version will always be published on this page together with the date it was last updated.
