Last updated: 16 July 2026

1. Introduction

Jane Bryan Beauty Training respects your privacy and is committed to protecting your personal information.

This privacy notice explains how we collect, use, store, share and protect personal information when you:

• visit our website;
• contact us about a course or service;
• enrol on or complete one of our courses;
• study towards a regulated qualification;
• submit coursework or assessment evidence;
• attend online or in-person training;
• act as a model for a student;
• work with us as a trainer, assessor, internal quality assurer or contractor;
• subscribe to our marketing;
• provide a review, photograph or testimonial;
• make a complaint, appeal or data-protection request; or
• otherwise communicate or interact with Jane Bryan Beauty Training.

It also explains your data-protection rights and how you can exercise them.

Jane Bryan Beauty Training is operated by an autónoma established in Spain. Depending on where you are located and the processing involved, our use of personal information may be governed by:

• the EU General Data Protection Regulation;
• Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights;
• the UK General Data Protection Regulation;
• the UK Data Protection Act 2018;
• the UK Data (Use and Access) Act 2025;
• applicable Spanish and UK electronic communications and direct-marketing legislation; and
• other applicable privacy, education, taxation and regulatory requirements.

2.  Who we are

Jane Bryan Beauty Training is the trading name used by Jane Bryan, an autónoma established and tax resident in Spain.

We are the data controller responsible for deciding why and how the personal information described in this notice is processed.

Legal name: Jane Bryan

Trading name: Jane Bryan Beauty Training

Legal status: Autónoma established in Spain

Business address: C.Carretera 35, Partaloa, 04810, Almeria, ES

NIE: Y7846749Z

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Spanish telephone: +34 711 054 235

UK telephone: 01962 435007

Website: www.janebryanbeautytraining.co.uk

References in this notice to “Jane Bryan Beauty Training”, “JBBT”, “we”, “us” and “our” mean Jane Bryan trading as Jane Bryan Beauty Training.

Questions about this notice or our use of personal information should be sent to This email address is being protected from spambots. You need JavaScript enabled to view it..

3. Who this privacy notice applies to

This privacy notice applies to:

• prospective students;
• enrolled students and learners;
• students undertaking regulated qualifications;
• former students;
• models used during practical training or assessment;
• website visitors;
• email subscribers;
• customers purchasing courses or other services;
• trainers;
• assessors;
• internal quality assurers;
• external quality assurers, where relevant;
• contractors and consultants;
• complainants and appellants;
• business contacts; and
• other people whose information we process in connection with our training activities.

4. The personal information we collect

The information we collect depends on your relationship with Jane Bryan Beauty Training.

4.1 Enquiries and prospective students

We may collect:

• your name;
• email address;
• telephone number;
• postal address;
• social-media account details where you contact us through social media;
• details of the course or qualification you are interested in;
• your existing qualifications and experience;
• information about your professional background;
• information about your training requirements;
• your preferred training location;
• questions about entry requirements;
• payment and course-finance enquiries;
• information provided during telephone, email, WhatsApp or Zoom conversations;
• your marketing preferences; and
• any other information you choose to provide.

4.2 Students and learners

When you enrol on or complete a course, we may collect:

• your full name;
• any previous names where relevant;
• date of birth;
• home address;
• email address;
• telephone number;
• emergency contact details;
• photographic identification;
• proof of address;
• nationality, residency or identification information where required;
• Unique Learner Number or other learner identifiers;
• previous qualifications and certificates;
• enrolment information;
• course and qualification details;
• payment and transaction records;
• invoices and receipts;
• attendance records;
• learning-platform activity;
• course progress;
• assessment results;
• trainer and assessor feedback;
• assignments, workbooks and portfolios;
• practical assessment evidence;
• photographs, videos and audio recordings;
• internal quality assurance records;
• certification and achievement information;
• student-support correspondence;
• requests for extensions or special consideration;
• reasonable-adjustment information;
• complaints and appeals;
• malpractice, maladministration or disciplinary information;
• fitness-to-practise information where relevant;
• records of online and in-person meetings; and
• any other information necessary to deliver, assess or quality assure your course.

4.3 Students undertaking regulated qualifications

Where you enrol on a regulated qualification, we may also collect and process information required by the relevant awarding organisation.

This may include:

• learner-registration information;
• identification documents;
• qualification and prerequisite evidence;
• assessment records;
• internal quality assurance records;
• external quality assurance information;
• reasonable-adjustment requests;
• special-consideration requests;
• malpractice and maladministration information;
• certificate claims;
• achievement records;
• complaints and appeals;
• quality-assurance samples; and
• information requested by an awarding organisation, external quality assurer or regulator.

4.4 Models used during practical training or assessment

If you act as a model, we may collect:

• your name;
• contact details;
• date of birth or confirmation of age where relevant;
• consultation information;
• relevant medical and health information;
• information about allergies;
• information about medication;
• information about contraindications;
• treatment consent;
• treatment records;
• photographs or videos;
• feedback;
• information about reactions or adverse effects; and
• details of any accident, incident or complaint.

4.5 Trainers, assessors, internal quality assurers and contractors

We may collect:

• your name;
• address;
• email address;
• telephone number;
• business information;
• bank and payment details;
• tax information;
• curriculum vitae;
• qualifications and certificates;
• employment and training history;
• references;
• professional memberships;
• insurance information;
• identification information;
• right-to-work information where relevant;
• contracts and agreements;
• standardisation and training records;
• observation and quality-monitoring records;
• performance information;
• complaints or disciplinary information;
• records of correspondence;
• photographs and profile details;
• details of your availability;
• information about training locations; and
• information necessary to manage our professional relationship with you.

4.6 Website visitors

When you visit our website, we may collect:

• your IP address;
• browser type and version;
• device type;
• operating system;
• approximate geographical location;
• pages viewed;
• time spent on the website;
• links clicked;
• referring website or source;
• cookie identifiers;
• online-form information; and
• other technical and usage information.

Some of this information is collected through cookies and similar technologies.

4.7 Marketing subscribers

If you subscribe to receive marketing, we may collect:

• your name;
• email address;
• telephone number where relevant;
• the date and method by which you subscribed;
• the consent or sign-up wording presented to you;
• your communication preferences;
• emails opened;
• links clicked;
• responses to marketing communications;
• details of courses purchased or considered;
• unsubscribe requests; and
• marketing objections.

4.8 Financial information

We may collect:

• payment details;
• transaction records;
• invoices;
• payment status;
• instalment information;
• refund information;
• outstanding payment information; and
• correspondence relating to payments.

We do not normally store complete payment-card details. Card payments are generally processed by third-party payment providers.

5. Special category personal information

Some personal information is considered particularly sensitive and receives additional protection under data-protection law. This is known as special category personal data.

We may process information concerning:

• physical health;
• mental health;
• disabilities;
• medical conditions;
• medication;
• allergies;
• pregnancy;
• skin conditions;
• body conditions;
• reasonable adjustments;
• sickness or absence;
• accidents;
• adverse reactions;
• treatment contraindications; and
• other sensitive information relevant to treatment safety, student support, course access or assessment.

We will only process special category personal information where it is necessary and where we have:

• a lawful basis for processing under Article 6 of the EU GDPR or UK GDPR; and
• an additional condition for processing special category information under Article 9 or applicable Spanish or UK law.

Depending on the circumstances, the relevant condition may include:

• your explicit consent;
• protecting someone’s vital interests;
• establishing, exercising or defending legal claims;
• meeting equality, health and safety or safeguarding responsibilities;
• substantial public interest grounds permitted by law; or
• another legally permitted condition.

We only collect information that is reasonably necessary for the relevant purpose.

6. How we collect personal information

6.1 Directly from you

We may collect information when you:

• complete an enquiry form;
• contact us by email, telephone or WhatsApp;
• communicate with us through social media;
• enrol on a course;
• make a payment;
• create or access an online learning account;
• complete a consultation form;
• submit coursework;
• upload assessment evidence;
• attend training;
• take part in a recorded session;
• request a reasonable adjustment;
• make a complaint or appeal;
• subscribe to marketing;
• complete a survey;
• provide feedback;
• submit a testimonial; or
• otherwise communicate with us.

6.2 From trainers, assessors and internal quality assurers

We may receive information about your:

• attendance;
• course progress;
• assessment;
• submitted evidence;
• practical work;
• conduct;
• student-support needs;
• reasonable adjustments;
• complaints or appeals;
• qualification achievement; and
• certification status.

6.3 From awarding organisations and regulators

We may receive:

• learner-registration details;
• assessment requirements;
• certification information;
• quality-assurance findings;
• reasonable-adjustment decisions;
• complaints or appeals information;
• malpractice information; and
• regulatory correspondence.

6.4 From third parties

We may receive information from:

• payment providers;
• online booking or course-purchase systems;
• learning platforms;
• website providers;
• analytics providers;
• social-media platforms;
• employers;
• training funders;
• referees;
• insurers;
• professional advisers; and
• publicly available professional sources.

7. How and why we use personal information

7.1 Responding to enquiries

We use personal information to:

• respond to questions;
• explain course content;
• discuss entry requirements;
• advise on course suitability;
• provide quotations;
• arrange telephone or online appointments;
• recommend an appropriate learning route; and
• follow up an enquiry.

Our lawful basis will usually be:

• taking steps at your request before entering into a contract; or
• our legitimate interests in responding to enquiries and operating our training business.

7.2 Processing course enrolments

We use personal information to:

• process your booking;
• confirm your enrolment;
• arrange payment;
• issue course information and materials;
• provide access to learning platforms;
• allocate a trainer or assessor;
• manage your student record; and
• administer your course.

Our lawful basis will usually be that processing is necessary to enter into or perform our contract with you.

7.3 Delivering training and assessment

We use personal information to:

• provide training;
• monitor attendance;
• monitor course progress;
• assess knowledge and practical competence;
• provide feedback;
• verify achievement;
• provide learner support;
• conduct internal quality assurance;
• maintain assessment records;
• issue or arrange certification; and
• meet course and qualification requirements.

Our lawful basis may include:

• performance of a contract;
• compliance with a legal obligation;
• our legitimate interests in providing and quality assuring training; or
• performing a task in the public interest where this lawfully applies to a regulated qualification.

7.4 Managing regulated qualifications

We may use and share information to:

• register students with an awarding organisation;
• assess qualification evidence;
• complete internal quality assurance;
• support external quality assurance;
• process reasonable adjustments;
• process special consideration;
• investigate malpractice or maladministration;
• manage complaints and appeals;
• claim certificates;
• maintain audit records; and
• comply with qualification and regulatory requirements.

Our lawful basis may include:

• performance of a contract;
• compliance with a legal obligation;
• legitimate interests;
• public interest where applicable; and
• establishing, exercising or defending legal claims.

7.5 Providing reasonable adjustments and student support

We use relevant information to:

• understand support needs;
• consider reasonable adjustments;
• make training accessible;
• manage extensions;
• process special consideration;
• protect health and safety; and
• meet equality responsibilities.

Our lawful basis may include:

• performance of a contract;
• compliance with a legal obligation;
• legitimate interests;
• explicit consent where appropriate; and
• processing permitted for reasons of substantial public interest or another applicable special category condition.

7.6 Practical training and model treatments

We use personal information to:

• assess treatment suitability;
• identify contraindications;
• protect health and safety;
• record informed consent;
• document practical competence;
• investigate reactions or incidents;
• maintain assessment evidence; and
• meet insurance or professional requirements.

Our lawful basis may include:

• performance of a contract;
• legitimate interests;
• compliance with legal obligations;
• explicit consent where appropriate; and
• establishing, exercising or defending legal claims.

7.7 Photographs, videos and recordings

We may take or receive photographs, video recordings or audio recordings for:

• practical assessment evidence;
• internal quality assurance;
• external quality assurance;
• trainer standardisation;
• student support;
• course delivery;
• meetings;
• incident investigation; and
• optional marketing.

Where an image or recording is required for assessment or quality assurance, processing may be necessary to perform our contract, satisfy awarding-organisation requirements or pursue our legitimate interests in managing and quality assuring training.

We will seek separate permission before using identifiable student or model images for optional promotional or marketing purposes, unless another lawful basis clearly applies.

Agreeing to provide assessment evidence does not mean that you have agreed to its use in public marketing.

7.8 Processing payments and maintaining financial records

We use personal information to:

• take payments;
• issue invoices and receipts;
• manage instalments;
• process refunds;
• manage outstanding balances;
• recover unpaid sums;
• maintain accounting records; and
• comply with Spanish and other applicable tax obligations.

Our lawful basis may include:

• performance of a contract;
• compliance with a legal obligation; and
• legitimate interests in managing our finances and recovering sums owed.

7.9 Managing complaints, appeals and disputes

We use personal information to:

• receive and investigate complaints;
• manage academic appeals;
• investigate malpractice or maladministration;
• investigate data-protection concerns;
• communicate decisions;
• take corrective action;
• protect legal rights; and
• meet awarding-organisation or regulatory requirements.

Our lawful basis may include:

• performance of a contract;
• compliance with legal obligations;
• legitimate interests; and
• establishing, exercising or defending legal claims.

7.10 Managing trainers and contractors

We use personal information to:

• assess suitability;
• check qualifications;
• check insurance;
• enter into and manage contracts;
• allocate students;
• monitor quality;
• carry out standardisation;
• manage payments;
• investigate concerns;
• maintain records; and
• meet legal or regulatory responsibilities.

Our lawful basis may include:

• taking steps before entering into a contract;
• performance of a contract;
• compliance with legal obligations; and
• legitimate interests.

7.11 Improving our courses and services

We may use information to:

• review course performance;
• collect feedback;
• monitor satisfaction;
• improve course materials;
• improve our website;
• develop new courses;
• identify training needs;
• create internal reports; and
• maintain service quality.

Our lawful basis is generally our legitimate interests in improving and developing our training services.

Where practical, we use anonymous or aggregated information for analysis.

7.12 Protecting the business and preventing misuse

We may use information to:

• protect our website and systems;
• detect fraud;
• prevent misuse;
• investigate security concerns;
• maintain evidence;
• enforce agreements;
• protect intellectual property;
• prevent unauthorised course sharing; and
• establish, exercise or defend legal claims.

Our lawful basis may include:

• legitimate interests;
• compliance with legal obligations; and
• establishing, exercising or defending legal claims.

7.13 Marketing

We may use your contact details to send information about:

• courses;
• qualifications;
• training opportunities;
• business support;
• events;
• offers;
• updates; and
• related services.

We will only send electronic marketing where:

• you have given valid consent;
• the existing-customer soft opt-in applies and its legal conditions are met; or
• another lawful method of marketing is available.

You can unsubscribe at any time by:

• clicking the unsubscribe link in an email;
• following the opt-out instructions in a message; or
• contacting This email address is being protected from spambots. You need JavaScript enabled to view it..

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Course-administration and service messages are not marketing. You may continue to receive essential communications about your course, payment, assessment, complaint, appeal, certificate or qualification even after unsubscribing from marketing.

8. Our lawful bases

Depending on the circumstances, we rely on one or more of the following lawful bases.

8.1 Contract

Processing is necessary to take steps before entering into a contract or to perform a contract with you.

This may include:

• responding to course enquiries;
• processing bookings;
• taking payments;
• delivering training;
• assessing work;
• providing access to learning materials;
• issuing results; and
• managing course administration.

8.2 Legal obligation

Processing is necessary to comply with a legal requirement.

This may include:

• accounting and taxation;
• data protection;
• health and safety;
• equality;
• consumer protection;
• regulatory requirements; and
• responding to lawful requests from authorities.

8.3 Legitimate interests

Processing is necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• responding to enquiries;
• operating and improving our services;
• maintaining accurate records;
• protecting students and models;
• protecting trainers and the business;
• preventing fraud and misuse;
• quality assuring training;
• managing complaints;
• recovering debts;
• protecting course materials;
• defending legal claims; and
• communicating with existing business contacts.

When relying on legitimate interests, we consider whether the processing is necessary, proportionate and reasonably expected.

8.4 Consent

We may rely on consent for:

• optional marketing;
• optional promotional photography;
• testimonials;
• certain uses of special category information; and
• other optional activities.

You may withdraw your consent at any time.

8.5 Vital interests

We may process personal information where necessary to protect someone’s life, such as during a medical emergency.

8.6 Public interest

In limited circumstances connected with regulated education or qualifications, processing may be necessary for a task performed in the public interest.

9. When we share personal information

We do not sell personal information.

We may share information where necessary with the following people and organisations.

9.1 Trainers, assessors and internal quality assurers

They may receive information needed to:

• deliver your course;
• assess your work;
• provide feedback;
• support your learning;
• complete internal quality assurance; and
• meet awarding-organisation requirements.

They must only use the information for authorised purposes and must keep it secure.

9.2 Awarding organisations and external quality assurers

For regulated qualifications, we may share information with the relevant awarding organisation and its representatives.

This may include:

• learner-registration information;
• assessment evidence;
• reasonable-adjustment information;
• internal quality assurance records;
• complaints;
• appeals;
• malpractice information; and
• certification records.

9.3 Training locations and partner centres

Where training is delivered through another location or centre, we may share information necessary for:

• booking;
• attendance;
• health and safety;
• course delivery;
• assessment; and
• quality assurance.

9.4 Payment providers

Payment providers may process information required to:

• collect payments;
• manage payment plans;
• issue refunds; and
• prevent fraud.

9.5 Website, communication and learning-platform providers

We may use third-party providers for:

• website hosting;
• website maintenance;
• online course delivery;
• cloud storage;
• email;
• customer management;
• video meetings;
• forms;
• file transfer;
• messaging;
• analytics;
• security; and
• technical support.

9.6 Professional advisers

We may share information where necessary with:

• accountants;
• tax advisers;
• bookkeepers;
• insurers;
• lawyers;
• auditors;
• consultants;
• IT specialists; and
• debt-recovery providers.

9.7 Public authorities and regulators

We may disclose information where required or permitted by law, including to:

• the Spanish tax authorities;
• HM Revenue and Customs where relevant;
• courts;
• law-enforcement authorities;
• the Agencia Española de Protección de Datos;
• the UK Information Commissioner’s Office;
• education regulators;
• awarding organisations;
• professional bodies;
• safeguarding authorities; and
• other competent public authorities.

9.8 Business transfers

If all or part of the business is sold, transferred or reorganised, information may be shared with advisers and prospective or actual purchasers.

Appropriate confidentiality and data-protection safeguards will be applied.

10. Data processors and independent controllers

Some organisations process personal information on our behalf as data processors.

Where a provider acts as our processor, we require it to:

• use information only on documented instructions;
• protect the information;
• maintain confidentiality;
• apply appropriate security measures;
• assist us in meeting data-protection responsibilities;
• report relevant security incidents; and
• delete or return information when required.

Some third parties, such as awarding organisations, payment providers or public authorities, may act as independent data controllers.

Where this applies, they are responsible for their own use of personal information and will normally provide their own privacy information.

11. International data transfers

Jane Bryan Beauty Training is established in Spain, and personal information may be accessed and processed in Spain.

Because we provide training to UK learners and work with UK trainers, assessors, awarding organisations and service providers, personal information may also be transferred to or accessed from the United Kingdom.

We may also use technology, cloud, communications or payment providers that process information in other countries.

Where personal information is transferred outside the European Economic Area or the United Kingdom, we will use an appropriate legal transfer mechanism where required.

This may include:

• transferring information to a country covered by an applicable adequacy decision;
• relying on the UK’s data-adequacy arrangements where applicable;
• using European Commission standard contractual clauses;
• using the UK International Data Transfer Agreement;
• using the UK Addendum to standard contractual clauses;
• relying on another legally permitted safeguard; or
• using a specific legal exception where appropriate.

You may contact us for information about the safeguards used for a particular transfer.

12. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

We also consider:

• Spanish tax and accounting requirements;
• UK financial requirements where relevant;
• awarding-organisation requirements;
• qualification and certification requirements;
• insurance requirements;
• contractual requirements;
• regulatory requirements;
• legal limitation periods;
• complaints and disputes; and
• the need to establish, exercise or defend legal claims.

Our general retention approach is set out below.

12.1 Enquiries that do not result in enrolment

Normally retained for up to 24 months after the last meaningful contact, unless:

• you have subscribed to ongoing marketing;
• a complaint or dispute is continuing; or
• another legitimate reason for retention applies.

12.2 Student booking and course-administration records

Normally retained for six years after the course ends or the final financial transaction, unless a longer period is required.

12.3 Financial, accounting and taxation records

Retained for the period required by Spanish taxation and accounting legislation and any other applicable financial requirements.

As a general business rule, relevant records may be retained for at least six years where necessary, but the statutory Spanish retention requirement applicable to each record will take precedence.

12.4 Regulated qualification records

Retained for the period required by the relevant awarding organisation, qualification conditions or regulator.

This may include:

• registration records;
• assessment records;
• internal quality assurance;
• certification;
• reasonable adjustments;
• complaints;
• appeals; and
• malpractice records.

JBBT must maintain a separate retention schedule recording the requirements of each awarding organisation.

12.5 Assessment evidence

Assessment evidence is retained for the period necessary for:

• assessment;
• internal quality assurance;
• external quality assurance;
• certification;
• audit;
• complaints;
• appeals; and
• regulatory requirements.

Where an awarding organisation sets a minimum retention period, that requirement will be followed.

12.6 Practical photographs and videos

Assessment images and recordings are retained only for as long as reasonably necessary for:

• assessment;
• quality assurance;
• certification;
• audit;
• complaint handling; or
• dispute resolution.

Promotional photographs and videos may be retained until:

• consent is withdrawn;
• they are no longer required;
• the relevant marketing use ends; or
• continued use is no longer appropriate.

Withdrawal of consent applies to future use. It may not always be possible to retrieve printed materials or remove content already lawfully published or distributed before consent was withdrawn.

12.7 Complaints and appeals

Normally retained for six years after closure, or longer where required by:

• an awarding organisation;
• an insurer;
• a regulator;
• a professional adviser; or
• an ongoing legal matter.

12.8 Reasonable adjustments and special consideration

Retained for the relevant course, assessment and quality-assurance period and any additional period required by the awarding organisation or needed to deal with complaints or legal claims.

12.9 Trainers, assessors and contractors

Normally retained for the duration of the relationship and for six years afterwards, unless a different legal or regulatory period applies.

12.10 Marketing information

Marketing consent and objection records are retained for as long as needed to demonstrate compliance.

Where you unsubscribe, we may retain limited information on a suppression list so that we can respect your opt-out request.

12.11 Website and technical information

Retention varies according to the cookie, analytics, hosting and technical services used.

Specific cookie periods should be explained in our separate cookie policy.

We may retain information for longer where:

• a complaint is ongoing;
• an investigation is ongoing;
• a legal claim is possible or continuing;
• we are required to do so by law;
• an awarding organisation requires it;
• it is needed for safeguarding; or
• it is necessary to protect our legal rights.

When information is no longer required, we will securely delete, destroy or anonymise it.

13. How we protect personal information

We use appropriate technical and organisational measures to protect personal information against:

• unauthorised access;
• accidental loss;
• unlawful disclosure;
• misuse;
• alteration;
• destruction; and
• loss of availability.

Our measures may include:

• password-protected systems;
• access controls;
• secure cloud storage;
• multi-factor authentication where available;
• encryption where appropriate;
• secure payment providers;
• restricted access to student records;
• confidentiality obligations;
• trainer and staff guidance;
• secure disposal;
• backup procedures;
• data-breach reporting; and
• periodic review of access and security.

Access is limited to people who need information for legitimate business, training, assessment, quality-assurance, contractual or legal purposes.

No internet-based system is completely secure. However, we take reasonable and proportionate steps to protect personal information.

14. Personal data breaches

A personal data breach may include the accidental or unlawful:

• loss;
• destruction;
• alteration;
• disclosure of; or
• access to personal information.

We maintain a process for identifying, investigating and recording suspected personal data breaches.

Where required, we will notify the relevant supervisory authority and affected individuals within the applicable legal time limits.

Students, trainers, assessors, internal quality assurers and contractors must report a suspected data breach immediately to:

This email address is being protected from spambots. You need JavaScript enabled to view it.

Examples include:

• sending information to the wrong recipient;
• losing paperwork containing student information;
• losing a phone or laptop containing personal information;
• unauthorised access to an account;
• sharing assessment evidence with the wrong person;
• disclosing passwords; or
• posting identifiable personal information publicly by mistake.

15. Your data-protection rights

Depending on the circumstances and the law that applies, you may have the following rights.

15.1 The right to be informed

You have the right to receive clear information about how we use your personal information.

15.2 The right of access

You may ask whether we process your personal information and request a copy of it.

This is commonly known as a subject access request.

We will normally respond within one month.

We may ask you to provide information to:

• confirm your identity;
• clarify your request; or
• help us locate the relevant records.

We do not normally charge a fee.

Where permitted by law, we may charge a reasonable administrative fee or refuse to act where a request is manifestly unfounded or excessive.

15.3 The right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

15.4 The right to erasure

You may ask us to delete your personal information in certain circumstances.

This right is not absolute.

We may need to retain information to:

• provide a course;
• perform a contract;
• comply with taxation or legal requirements;
• meet awarding-organisation obligations;
• retain qualification or assessment records;
• deal with complaints;
• defend legal claims; or
• protect the rights of another person.

15.5 The right to restrict processing

You may ask us to restrict the way we use your information in certain circumstances.

15.6 The right to data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive relevant information in a structured, commonly used and machine-readable format.

15.7 The right to object

You may object to processing based on legitimate interests or public interest.

We will stop processing unless:

• we can demonstrate compelling legitimate grounds;
• the processing overrides your rights; or
• the information is needed for legal claims.

You have an absolute right to object to direct marketing.

15.8 Rights relating to automated decision-making

You may have rights where a decision with legal or similarly significant effects is made solely through automated processing.

Jane Bryan Beauty Training does not currently make decisions about students solely through automated processing that produce legal or similarly significant effects.

If this changes, we will provide appropriate information and safeguards.

15.9 The right to withdraw consent

Where processing is based on consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

15.10 The right to complain

You have the right to complain about how we collect, use, store, share or protect your personal information.

To exercise any right, contact:

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Post: Jane Bryan Beauty Training, The Post Shop 373, Avenida de Febrero 1, Albox, 04800, Almeria, Spain

We may need to confirm your identity before acting on a request.

16. Data-protection complaints

If you are concerned about the way Jane Bryan Beauty Training has handled your personal information, please contact us.

You may complain by:

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Post: Jane Bryan Beauty Training, The Post Shop 373, Avenida de Febrero 1, Albox, 04800, Almeria, Spain

It is helpful, but not compulsory, to include:

• your name;
• your contact details;
• an explanation of your concern;
• relevant dates;
• details of anyone you have already contacted; and
• copies of relevant correspondence or evidence.

You do not need to use a specific form or use the words “data-protection complaint”.

Where the UK data-protection complaints requirements apply, we will:

• provide an accessible way for you to complain;
• acknowledge your complaint within 30 days;
• make appropriate enquiries;
• investigate without undue delay;
• keep you informed where appropriate; and
• tell you the outcome without undue delay.

More generally, we aim to acknowledge all data-protection complaints promptly and deal with them fairly.

Our response will normally explain:

• what we understood your complaint to be;
• what we investigated;
• what we found;
• any action already taken;
• any further action we intend to take; and
• what you may do if you remain dissatisfied.

We would appreciate the opportunity to investigate your concern before you approach a supervisory authority.

16.1 Complaints to the Agencia Española de Protección de Datos

Because Jane Bryan Beauty Training is established in Spain, you may complain to:

Agencia Española de Protección de Datos

C/ Jorge Juan, 6
28001 Madrid
Spain

16.2 Complaints to the UK Information Commissioner’s Office

People in the United Kingdom may also have the right to complain to the Information Commissioner’s Office where UK data-protection law applies.

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

You may also complain to another competent data-protection authority where the law gives you that right.

17. Children and young people

Our courses are generally intended for adults.

However, we may process information about a learner under the age of 18 where enrolment is permitted.

Where appropriate, we may:

• obtain information from a parent or guardian;
• seek parental or guardian consent;
• provide privacy information in an age-appropriate format;
• apply safeguarding procedures;
• consider the learner’s ability to understand the processing; and
• limit the information collected.

We will not knowingly use a child’s information for marketing without an appropriate lawful basis.

Where a model is under 18, appropriate parental or guardian consent and safeguarding arrangements must be in place.

18. Marketing communications

You may receive marketing from Jane Bryan Beauty Training where:

• you have actively subscribed;
• you have given valid consent;
• the existing-customer soft opt-in applies; or
• another lawful marketing route applies.

Depending on your permissions and preferences, we may contact you by:

• email;
• telephone;
• text message;
• WhatsApp; or
• post.

You can opt out at any time.

We may retain limited contact information on a suppression list after you opt out. This helps us ensure that we do not send further marketing.

Opting out of marketing does not stop us sending essential communications about:

• your course;
• payments;
• assessment;
• quality assurance;
• complaints;
• appeals;
• certification; or
• other course administration.

19. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files stored on a device when a person visits a website.

They may be used to:

• make the website function;
• remember preferences;
• maintain security;
• operate forms or purchasing functions;
• measure website performance;
• understand how visitors use the site;
• display embedded content;
• support advertising; and
• support marketing.

19.1 Essential cookies

Some cookies are necessary for the website to function.

These may be used without consent where legally permitted.

19.2 Non-essential cookies

We will request consent before using non-essential cookies where consent is required.

These may include cookies used for:

• analytics;
• advertising;
• behavioural tracking;
• social media;
• embedded video;
• remarketing; and
• marketing pixels.

Website visitors should be able to:

• accept non-essential cookies;
• reject non-essential cookies;
• manage individual preferences; and
• withdraw or change consent.

Non-essential cookies should not be activated before consent where prior consent is legally required.

Further information about the cookies used, their providers, purposes and duration should be provided in our separate cookie policy.

Jane Bryan Beauty Training must obtain an up-to-date cookie audit from its website provider before finalising the cookie policy.

20. Third-party websites

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices or content of third-party websites.

When you leave our website, you should read the privacy notice of the website you visit.

21. Social media and messaging services

If you contact us through Facebook, Instagram, LinkedIn, WhatsApp or another third-party service, that provider may process your personal information under its own privacy terms.

We may retain relevant communications where necessary to:

• answer your enquiry;
• manage your course;
• maintain business records;
• investigate a complaint;
• investigate a data breach; or
• protect our legal rights.

You should not send highly sensitive health, identity or financial information through social media unless we have agreed that it is appropriate to do so.

22. Online meetings and recordings

We may use online meeting platforms for:

• course consultations;
• student support;
• course delivery;
• trainer meetings;
• standardisation;
• assessment;
• internal quality assurance; and
• other business meetings.

We will tell attendees where a session is being recorded.

Recordings will only be made where there is a legitimate purpose and an appropriate lawful basis.

Access will be restricted, and recordings will be kept only for as long as necessary.

A recording created for assessment or quality assurance will not automatically be used for marketing.

23. Testimonials and reviews

If you provide a testimonial or review, we may ask for permission to use:

• your name;
• business name;
• course title;
• location;
• photograph;
• video; and
• testimonial wording.

Where we rely on consent, you may withdraw permission for future use.

It may not always be possible to retrieve printed materials or remove content already lawfully distributed or published before consent was withdrawn.

Reviews submitted directly to an independent review platform are also governed by that platform’s own terms and privacy notice.

24. Changes to this privacy notice

We may update this privacy notice when:

• data-protection law changes;
• our services change;
• our business structure changes;
• we introduce a new system;
• we change the way information is used;
• an awarding organisation changes its requirements;
• a regulator issues new guidance; or
• our international processing arrangements change.

The latest version will be published on our website.

Where a change materially affects how we use personal information, we may take reasonable steps to notify affected people.

25. Contact details

For privacy questions, data-protection rights requests or complaints, contact:

Jane Bryan trading as Jane Bryan Beauty Training

Legal status: Autónoma established in Spain

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Spanish telephone: +34 711 054 235

UK telephone: 01962 435007

Business address: Jane Bryan Beauty Training, C.Carretera 35, Partaloa, 04810, Almeria, Spain

NIE: Y7846749Z

Last updated: 16 July 2026