Enrol on 3 courses — the lowest-priced course is complimentary
RRejuvaTeaching Academy

Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how Rejuva Lab Studios Ltd trading as Rejuva Teaching Academy (we) collects, uses, shares and protects personal data when you visit our website, create an account and purchase or use our online courses. It is designed to meet UK GDPR and the Data Protection Act 2018.

1. Data controller

The data controller is Rejuva Lab Studios Ltd (registered in England and Wales, Companies House number 17015749) of 189a Elliott Street, Tyldesley, Manchester, England, M29 8DR. Contact: rejuvalabaesthetics@hotmail.com. Our ICO registration number will be added here once registration is complete.

2. Personal data we collect

  • Account details: full name, email address, password (stored hashed), account creation date.
  • Purchase details: course purchased, price paid, currency, payment reference / receipt information, refund status. Card details are handled directly by our payment processor and are not stored by us.
  • Learning data: which lessons you have viewed and marked complete, assessment attempts and scores, certificate issuance and certificate number, the name you choose to display on your certificate.
  • Support and communications: emails you send us and our replies.
  • Technical data: IP address, device and browser information, basic usage analytics such as page views and referring URL.

3. Purposes and legal bases

  • Provide the courses you have purchased — legal basis: performance of our contract with you.
  • Take payment, issue receipts, handle refunds and chargebacks — performance of contract and compliance with our legal obligations (tax, accounting).
  • Send transactional emails (purchase confirmation, password reset, account/service notices) — performance of contract.
  • Security, fraud prevention and IT operations — legitimate interests in keeping the platform secure.
  • Improve the platform (aggregated, non-identifying analytics) — legitimate interests.
  • Comply with our legal obligations (record keeping for tax, responding to lawful requests) — legal obligation.

We do not send marketing emails without your consent. We do not sell personal data to third parties.

4. Who we share data with (processors)

  • Hosting and application platform — our website and application platform provider hosts the site and database on our behalf.
  • Payment processor — Stripe Payments UK, Ltd. and its affiliates process card payments. See stripe.com/gb/privacy.
  • Email delivery provider — we use a transactional email provider to deliver purchase confirmations, password resets and account notices from our verified sender domain.
  • Professional advisers — accountants, lawyers, insurers where necessary and only under confidentiality.

Each processor is engaged under written terms and only processes personal data on our documented instructions.

5. International transfers

Some of our processors may host or process data outside the UK / EEA. Where they do, we rely on UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations. A full list of processors and countries is available on request.

6. Retention

We keep account, purchase, learning and certificate records for as long as your account is active and for a further 6 years after account closure or after the last transaction, in line with UK statutory record-keeping requirements for tax and accounting. Suppression records for people who have unsubscribed or bounced are retained on a suppression list to prevent us contacting them again.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to erase your data (subject to our legal need to keep certain records, e.g. transaction history for tax).
  • Restrict or object to processing, including profiling.
  • Request data portability for data you provided under contract or consent.
  • Withdraw any consent you have given, at any time.

To exercise any right, email rejuvalabaesthetics@hotmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

8. Cookies and similar technologies

We use strictly necessary cookies for login, session and security. We also use analytics and advertising services (including Google Analytics, Google Ads and Microsoft Clarity) to understand how the site is used and to measure the effectiveness of our advertising. If we introduce further non-essential cookies we will ask for your consent through a cookie banner and update this policy.

9. Security

We use technical and organisational measures including HTTPS, password hashing, database access controls, row-level security on user data, principle-of-least-privilege service keys, and provider-side backups. No system is 100% secure; if we become aware of a personal data breach that is likely to result in a risk to you, we will notify the ICO and you in line with UK GDPR.

10. Children

The service is intended for adults aged 18 or over. We do not knowingly collect data from under-18s. If you believe a child has provided data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. The current version will be published here with a "last updated" date.

12. Contact

Rejuva Teaching Academy (Rejuva Lab Studios Ltd) — rejuvalabaesthetics@hotmail.com — 07570 816487 — 189a Elliott Street, Tyldesley, Manchester, England, M29 8DR.