Privacy & Cookie Notice
Last updated 3 June 2025

1  Who We Are
Soap School Ltd ("Soap School", "we", "us") is the data controller for the personal data you provide.
Registered in England & Wales: Company No. 08415103
Registered office (postal service only): 20 The Grove, Huddersfield HD2 1BL
Principal place of business: 1 York Avenue, Fartown, Huddersfield HD2 2QR
Email: sarah@soapschool.com | Tel: +44 (0)1484 310014
Data Protection Officer: Shawn Dritz

2  What This Notice Covers
This notice explains how we collect, use, share and protect your personal data when you:

visit soapschool.com ("Site"),

purchase an online or in‑person course, consultancy or related services,

subscribe to our newsletter or contact us.

The Site is not intended for children, and we do not knowingly process data of anyone under 18.

3  The Data We Collect
Category Examples Why we need it
Identity First & last name, account username Create your booking, validate support requests
Contact Billing / postal address, email, phone Send confirmations, updates, marketing if opted‑in
Transaction Courses purchased, payment amount, partial card details Manage orders, refunds, accounting
Technical IP address, browser type, operating system, device IDs, cookies Secure the Site, prevent fraud, analyse usage
Usage Pages visited, time on page, referring site, clicks Improve content & user experience
Marketing Preferences Opt‑in/opt‑out status Honour your communication choices
We do not collect special‑category or criminal‑offence data.

4  How We Collect Data
Directly from you – when you create an account, complete checkout, email or call us.

Automated technologies – cookies, server logs and similar technologies.

Third‑party sources – payment processors (Stripe, PayPal) confirm your payment status.

5  Why & How We Use Your Data
Purpose Lawful basis (UK GDPR art. 6)
Register you as a customer Contract: performance of a contract with you
Provide & administer courses, workshops, consultancy Contract; Legitimate interest in delivering services efficiently
Process payments, detect fraud Contract; Legitimate interest in preventing fraud
Send service emails (booking confirmations, updates) Contract
Send marketing you have opted‑into Consent; Legitimate interest in promoting similar services where legally allowed
Improve the Site, products & services (analytics) Legitimate interest in running and growing our business
Comply with tax, accounting and legal obligations Legal obligation
You can withdraw consent at any time via the unsubscribe link in emails or by contacting us.

6  Marketing Choices
Opt‑in: We send newsletters only if you explicitly request them or have previously bought from us and not opted‑out.

Opt‑out: Click "unsubscribe" in any email or email sarah@soapschool.com
We never sell your data or share it with third parties for their own marketing.

7  Cookies & Similar Tech
We use cookies and pixels to:

make the Site work (session cookies);

remember preferences (functional cookies);

analyse traffic (Google Analytics);

show relevant ads (Google Ads, Facebook Pixel).

You can manage cookies in your browser settings. Blocking cookies may affect Site performance.
See our detailed Cookie Policy for full list and retention periods.

8  Who We Share Data With
We only share personal data with:

Service providers – infrastructure & software vendors under contract, including hosting (SiteGround), cloud infrastructure (AWS), website builder (Webflow), email & productivity (NTLworld/Virgin Media, Google Workspace), marketing‑automation & learning‑platform/CRM (Kajabi, Kit). The specific list may change; we maintain an up‑to‑date internal register available on request.

Payment processors – Stripe, PayPal (PCI‑DSS compliant);

Professional advisers – accountants, lawyers, insurers;

Regulators & authorities – HMRC, ICO, courts, where required by law;

Analytics & ad partners – Google, Meta Platforms (Facebook/Instagram) – data is pseudonymised where possible.
All third‑party processors are bound by written agreements to keep your data secure and use it only on our instructions.

9  International Transfers
Some partners (e.g. Google, Meta, Stripe) are located outside the UK/EEA. Transfers are protected by:

UK adequacy regulations or EU adequacy decisions, or

Standard Contractual Clauses approved by the UK/EU, plus additional safeguards (encryption, limited data).

10  Security
We implement up‑to‑date administrative, technical and physical safeguards including SSL encryption, access controls, staff training and breach‑response procedures.

11  Data Retention
Booking & transaction records: 6 years after last purchase (tax law).

Marketing data: until you withdraw consent or after 2 years of inactivity.

Server logs & analytics: 26 months (Google Analytics default) unless aggregated sooner.
We may anonymise data for statistical purposes; anonymised data is not subject to this notice.

12  Your Rights
You have the right to:

Access your personal data;

Correct inaccurate data;

Erase data we no longer need;

Restrict or object to processing;

Port data to another provider;

Withdraw consent at any time;

Complain to the ICO (see §14).
To exercise any right, email sarah@soapschool.com We normally respond within one month.

13  Automated Decision‑Making
We do not use your data for automated decision‑making that produces legal or similarly significant effects.

14  Complaints
We hope to resolve any query; email Shawn Dritz at sarah@soapschool.com or call +44 (0)1484 310014.
If unsatisfied, you may contact the Information Commissioner’s Office: 0303 123 1113 | ico.org.uk | Wycliffe House, Water Lane, Wilmslow SK9 5AF.

15  Changes to This Notice
We may update this notice to reflect changes in law or our practices. The new version will be posted on this page with a revised "Last updated" date.

© 2012‑2025 Soap School Ltd. All rights reserved.

To register you as a new customer

To register you as a new customer

To register you as a new customer

To register you as a new customer

To register you as a new customer

To register you as a new customer

To register you as a new customer