PRIVACY POLICY
Last Updated: 26th June 2026
1. Who We Are
Katy P Nail Artist and Educator is an online education business providing online courses, workshops, webinars, digital products, memberships and educational resources for nail professionals. This includes the Sparkle Squad membership community.
For the purposes of UK data protection law, Katy P Nail Artist and Educator is the Data Controller responsible for your personal information.
If you have any questions about this Privacy Policy or how your personal data is used, you can contact:
Email: [email protected]
2. The Information We Collect
We may collect and process the following personal information:
Information You Provide Directly
Full name
Email address
Billing address
Purchase history
Account login details
Information provided through contact forms, surveys, emails or membership areas
Information provided when joining private Facebook communities or membership groups
Information shared during customer support enquiries
Payment Information
Payments are processed securely through Stripe and PayPal. We do not store full credit or debit card details.
Information Collected Automatically
When you visit our website, we may collect:
IP address
Device type
Browser type
Pages visited
Time spent on pages
Referral source
General geographic location
This information may be collected through cookies, analytics tools and website performance monitoring systems.
3. How We Use Your Information
We use your personal information to:
Provide access to purchased courses, workshops, webinars, digital products and membership content
Process payments and manage subscriptions
Deliver customer support
Manage access to private member communities
Communicate important account, service or membership updates
Send marketing communications where you have provided consent
Improve our website, products and services
Analyse website usage and member engagement
Comply with legal, tax and accounting obligations
4. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
Contract
When you purchase a course, workshop, membership or digital product, we process your information to fulfil our contractual obligations.
Consent
When you subscribe to marketing communications, download lead magnets or opt into email updates.
Legitimate Interests
To improve our services, analyse website performance, manage customer relationships, provide membership support, maintain platform security and develop our business in ways that do not override your rights and freedoms.
Legal Obligation
To comply with legal, accounting and tax requirements.
5. Email Marketing
We use ActiveCampaign to manage our email marketing communications.
When you subscribe to our mailing list, your name and email address will be stored securely within ActiveCampaign.
We may use your information to send:
Educational content
Business updates
Product information
Membership news
Promotional offers
You can unsubscribe at any time by clicking the unsubscribe link included in every marketing email or by contacting us directly.
6. Course and Membership Platform
Our courses, workshops, digital resources and Sparkle Squad membership are delivered through Thinkific.
When you create an account or purchase access, your information may be stored securely on Thinkific's systems for the purpose of delivering our services.
7. Payment Processing
Payments for courses, memberships, workshops and digital products are processed securely through Thinkific Payments.
Thinkific Payments uses trusted third-party payment providers to process transactions securely and in accordance with industry security standards.
We do not have access to or store your full payment card details.
For more information about how payment information is processed, please refer to Thinkific's Privacy Policy.
8. Cookies and Analytics
We use cookies and similar technologies to improve user experience, analyse website performance and understand how visitors interact with our website.
We may use:
Essential cookies required for website functionality
Analytics cookies such as Google Analytics
Performance and functionality cookies
Analytics data may include:
Pages viewed
Time spent on pages
Device information
General location information
You can manage cookie preferences through your browser settings and any cookie consent tools available on our website.
9. International Data Transfers
Some third-party providers we use, including Thinkific, ActiveCampaign and Google, may process personal information outside the United Kingdom.
Where international transfers occur, we rely on appropriate safeguards such as adequacy regulations, standard contractual clauses or other legally approved transfer mechanisms to protect your personal information.
10. Data Retention
We retain personal information only for as long as necessary for the purposes outlined in this policy.
Typical retention periods include:
Transaction and accounting records: up to 6 years
Membership and course account information: while your account remains active
Marketing information: until you unsubscribe or request removal
Analytics information: according to our analytics provider settings
Where information is no longer required, it will be securely deleted or anonymised.
11. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.
12. Children's Privacy
Our services are intended for adults and business owners.
We do not knowingly collect personal information from individuals under the age of 18.
If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to remove that information.
13. Your Rights Under UK GDPR
You have the right to:
Request access to your personal information
Request correction of inaccurate information
Request deletion of your personal information
Request restriction of processing
Object to certain processing activities
Request transfer of your information to another provider
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact:
We will respond to legitimate requests within one month as required by UK data protection law.
14. Data Protection Complaints
If you have concerns about how we collect, use or store your personal information, please contact us first so that we can investigate and attempt to resolve the issue.
You can submit a complaint by emailing:
We will acknowledge and investigate your complaint and aim to provide a response within a reasonable timeframe.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
The ICO can be contacted via:
15. Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure and we cannot guarantee absolute security.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or business practices.
The latest version will always be available on our website and will include the date it was last updated.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact at [email protected]