Privacy Policy

01Who we are

Cave Academy ("Cave Academy", "we", "us") is a business education and coaching service for beauty industry professionals. For the purposes of UK data protection law, the data controller is [legal entity name], [registered address][, company number if registered].

This policy applies to our websites, landing pages, application forms and email communications. It explains what we do with the personal information you give us, or that we collect about you.

02What we collect

Information you give us

• Contact details: your first name, email address and, optionally, your Instagram handle.
• Application answers: the responses you give in our waitlist or call-booking questions (for example, your business stage, where your bookings come from, and what's holding you back).
• Booking details: the date and time you select for a call, via our scheduling provider.
• Purchase information: if you buy a product, your order details. Card payments are handled by our payment provider; we do not store full card numbers.
• Anything else you choose to send us: for example, when you email or message us.

Information collected automatically

• Usage and device data: pages visited, approximate location, browser and device type, collected through cookies and similar technologies.
• Advertising data: where you arrive from an ad, limited data that helps us measure and improve our campaigns.

03How we use your information

• To review applications and decide whether our programmes are a fit for you.
• To arrange, confirm and prepare for calls, and to deliver any product or programme you join.
• To respond to your questions and provide support.
• To send you relevant emails about our products, where you have asked to hear from us.
• To measure and improve our website, content and advertising.
• To meet our legal and accounting obligations.

04Our lawful bases

Under UK GDPR we rely on the following bases to process your information:

• Contract: to deliver a product or programme you have purchased or applied for.
• Legitimate interests: to run and improve our business, review applications, and contact applicants about their enquiry, balanced against your rights.
• Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.
• Legal obligation: to keep records required by law, such as for tax.

05Marketing

If you join a waitlist, book a call or buy from us, we may send you emails about Cave Academy products and content. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or by contacting us. Opting out of marketing does not stop essential service messages, such as a booking confirmation.

06Who we share it with

We do not sell your personal information. We share it only with trusted providers who help us run Cave Academy, and only as far as needed:

• Scheduling: to book and manage your call [e.g. Calendly].
• Email & CRM: to manage contacts and send communications [e.g. Kajabi / GoHighLevel].
• Payments: to process purchases securely [e.g. Stripe].
• Analytics & advertising: to understand and improve performance [e.g. Meta, Google].

These providers act on our instructions under their own privacy terms. We may also disclose information where required by law.

07Cookies

Our site uses cookies and similar technologies to keep it working, to remember your preferences, and to measure traffic and advertising. Essential cookies are needed for the site to function. Non-essential cookies (such as analytics and advertising) are used only with your consent, which you can manage or withdraw in your browser settings [or via our cookie banner, if used].

08How long we keep it

We keep your information only as long as needed for the purposes above: to manage your relationship with us, to meet legal and tax obligations, and to resolve disputes. When it is no longer needed, we delete or anonymise it.

09Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information, where there is no reason to keep it.
• Restrict or object to how we use it, including for marketing.
• Receive your information in a portable format.
• Withdraw consent at any time, where we rely on it.

To exercise any of these, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.

10Security & international transfers

We take reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, but we work to keep your data safe.

Some of our providers may store or process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved standard contractual clauses) to protect it.

Our services are not directed at children. We do not knowingly collect information from anyone under 18.

11Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date above. Significant changes will be made clear on this page.

12Contact us