Privacy Policy
Last updated: 9 April 2026
Introduction
NeuroGleam Learning is committed to protecting your privacy and handling your personal information with care and respect. This policy outlines how we collect, use, store, and safeguard the data you provide when using our services or visiting our website.
We operate in accordance with UK data protection legislation, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
Information We Collect
We gather different types of information depending on how you interact with us:
Information You Provide Directly
When you contact us, book a consultation, or engage our services, you may provide:
- Your name and contact details (email address, postal address)
- Information about your style preferences, goals, and challenges
- Physical characteristics relevant to colour and body architecture analysis
- Payment information for service bookings
- Any other information you choose to share during consultations
Information Collected Automatically
When you visit our website, we may automatically collect:
- Browser type and version
- Device information and operating system
- IP address and general location data
- Pages visited and time spent on our site
- Referring website or search terms used
How We Use Your Information
We use the information we collect for specific, legitimate purposes:
- To provide style education services you've requested
- To communicate with you about appointments, services, and enquiries
- To process payments and maintain financial records
- To improve our services based on client feedback and needs
- To send occasional updates about our offerings, if you've opted in
- To comply with legal obligations and maintain business records
- To analyse website usage and enhance user experience
We will never sell your personal information to third parties or use it for purposes beyond those outlined here without your explicit consent.
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contract Performance: Processing necessary to deliver the services you've engaged us for
- Consent: Where you've given clear permission for specific processing activities
- Legitimate Interests: For business operations like improving services and maintaining security
- Legal Obligation: Where required by law, such as for financial record-keeping
Data Sharing and Disclosure
We keep your information confidential and share it only in limited circumstances:
- Service Providers: Trusted third parties who assist with payment processing, email communications, or website hosting, bound by strict confidentiality agreements
- Legal Requirements: When required by law, court order, or regulatory authority
- Business Transfers: In the unlikely event of a sale or merger, your data may be transferred to the new entity under equivalent protection
We do not share your personal information with marketing companies or unrelated third parties.
Data Security
We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Secure encrypted connections for data transmission
- Limited access to personal data within our organisation
- Regular security assessments and updates
- Secure storage of physical documents containing personal information
While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but continuously work to maintain high protection standards.
Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Client consultation records are kept for seven years to support ongoing service and legal requirements
- Financial records are retained as required by UK tax legislation
- Marketing communications data is kept until you unsubscribe or request deletion
- Website analytics data is retained in anonymised form
Once information is no longer needed, we securely delete or anonymise it.
Your Rights
Under UK data protection law, you have several rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete information
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Ask us to limit how we use your information
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Revoke consent for processing where consent was the legal basis
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Cookies and Tracking
Our website uses cookies to enhance functionality and analyse usage. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
Third-Party Links
Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
Children's Privacy
Our services are directed at adults. We do not knowingly collect personal information from individuals under 16 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via email or through a prominent notice on our website. The updated date at the top of this policy indicates when the latest revision was made.
Contact and Complaints
If you have questions about this privacy policy or how we handle your information, please contact us:
Email: [email protected]
Address: 42 Redchurch Street, Shoreditch, London E2 7DP, United Kingdom
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.