The Millinery & Business Academy
Last updated: 5th August 2026
This privacy policy explains how we collect, use, and protect your personal information when you use our website, our online courses, and related services. We've tried to keep this clear and readable rather than full of unnecessary legal language - our aim is to collect only what we need, use it responsibly, and keep it secure.
The Millinery & Business Academy
Data controller: Katherine Elizabeth
Contact email: Katherine@katherineelizabethhats.com
Address: 103, Oxo Tower Wharf Barge House Street, London SE1 9PH
We are responsible for deciding how and why your personal data is processed.
- Name, email address, and (where relevant) phone number
- Account and login details when you register on our course platform
- Payment details (processed securely by our payment providers - we do not store your card details ourselves)
- Course progress, enrolment history, and any assignments or messages you submit through the platform
- Marketing preferences and consent
- Anything you tell us directly via email, our contact form, any of our social media platforms or via telephone
- IP address and browser/device details (for security and site functionality)
- Website usage information (pages visited, how you interact with the site)
- Whether a marketing email was opened or a link was clicked
- Cookie data (see Cookies and tracking below)
| Purpose |
Lawful basis under UK GDPR |
| To create and manage your course account |
Performance of a contract |
| To process payments |
Performance of a contract |
| To respond to enquiries |
Legitimate interests |
| To send course-related communications (e.g. updates to a course you're enrolled on) |
Performance of a contract / legitimate interests |
| To send marketing emails |
Consent |
| To run and measure advertising (including via Meta/Facebook) |
Consent |
| To improve our website, courses, and communications |
Legitimate interests |
We will never use your information for a purpose unrelated to why you gave it to us.
We work with a number of trusted providers to deliver our courses and run our business. Each only processes the data needed to perform its function:
- LearnWorlds - our course platform. Hosts your account, course enrolments, progress, and any content you submit within courses.
- Mailchimp - sends our marketing emails and newsletters. Used only where you've opted in; you can unsubscribe at any time via the link in any email.
- Stripe and PayPal - process payments securely. We do not see or store your full card or bank details; these are handled entirely by the payment provider.
- Zoom - used for live sessions, workshops, or 1:1 calls. If a session is recorded, we'll let you know beforehand.
- Google Workspace - used for email and internal document storage/business communications.
- Meta (Facebook/Instagram, including the Meta Pixel) - used for advertising and to measure how people interact with our ads. The Meta Pixel only runs where you've consented via our cookie banner.
- Facebook Group - if we run a community group for students, participation is optional and governed separately by Meta's own privacy policy and terms, alongside our group's own community guidelines. We don't control what Meta does with data inside the group itself.
- Zapier - used to automate certain processes between our other tools (for example, syncing email data and automatically adding or removing tags within LearnWorlds based on your account activity). Zapier processes data only as needed to complete these automations, in line with its own privacy policy.
Where a provider processes data outside the UK (for example, in the United States), appropriate safeguards are in place - such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms recognised under UK GDPR. You can contact us for more details.
We use cookies and similar technologies (including the Meta Pixel) on our website. These help us:
- make sure the website and checkout work properly
- understand how visitors use our site
- measure and improve the performance of our advertising
Where required by law, we ask for your consent before using non-essential cookies or tracking pixels - you'll see this via the cookie banner on our site, and you can change your preferences at any time.
We keep personal data only as long as necessary for the purposes set out in this policy, including delivering courses you've purchased, meeting legal/accounting obligations (for example, UK tax law generally requires financial records to be kept for six years), and resolving any disputes. When data is no longer needed, it's securely deleted.
Under UK GDPR, you have the right to:
- Access - ask us for a copy of the personal data we hold about you
- Rectification - ask us to correct inaccurate or incomplete data
- Erasure - ask us to delete your personal data in certain circumstances
- Restriction - ask us to limit how we use your data
- Object - object to us processing your data in certain circumstances
- Data portability - ask us to transfer your data to you or another organisation
- Withdraw consent - where we rely on consent (e.g. marketing emails), withdraw it at any time
You are not charged for exercising these rights. If you make a request, we'll respond within one month.
To exercise any of these rights, contact us at Katherine@katherineelizabethhats.com.
If you're unhappy with how we've used your data, please contact us first at Katherine@katherineelizabethhats.com with “complaint” in the subject line - we'd welcome the chance to put things right.
You can also complain to the Information Commissioner's Office (ICO) at any time:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date.
Katherine@katherineelizabethhats.com
