Privacy Policy

Last Updated: [Dec 2025]

1. Introduction

Welcome to The Derma Academy. We operate an online platform offering beauty, laser, and aesthetic treatment courses, as well as related books and learning materials. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use www.thedermaacademy.com. We operate in Germany, and we comply with the EU General Data Protection Regulation (GDPR). If you use our website, create an account, purchase a course or book, or interact with us, you agree to the terms in this Privacy Policy.

2. Data We Collect

We may collect the following types of data:

2.1 Personal Information (Provided by You)

• Name
• Email address
• Phone number
• Billing address
• Shipping address (for books, if applicable)
• Account login details
• Course enrollment information
• Communication preferences

2.2 Payment Information

Payments are processed by a third-party payment provider (e.g., Stripe, PayPal, or other services chosen in the future). We do not store your full credit card details on our servers.

2.3 Automatically Collected Information

• IP address
• Browser type
• Device information
• Pages visited
• Basic cookies required for website functionality (We currently do NOT use Google Analytics or marketing tracking tools.)

2.4 Cookies

We use essential cookies for:

• Login
• Course access (Tutor LMS)
• Shopping cart

You will be informed if any additional cookies are added in the future.

3. How We Collect Data

We collect your data in the following ways:

• When you create an account
• When you purchase a course or book
• When you enroll in or take an online course
• When you contact us by email
• Through cookies and basic website tools
• Through Tutor LMS when you use the learning system

4. How We Use Your Data

We use your data for:

4.1 Providing Services

• Processing course registrations
• Delivering online course access via Tutor LMS
• Delivering purchased books
• Managing your account
• Sending order confirmations

4.2 Improving Our Platform

• Improving course experience
• Fixing technical issues
• Ensuring website security

4.3 Communication

• Sending important updates about your courses
• Sending receipts or purchase confirmations
• Responding to your questions

4.4 Marketing (Optional)

We may send newsletters or promotional emails only if you subscribe. You can unsubscribe anytime.

5. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: To provide purchased courses or books.
• Consent: For newsletters or marketing emails.
• Legitimate Interest: To improve website functionality and security.
• Legal Obligation: Record-keeping, invoices, tax purposes.

6. Sharing Your Data

We only share your data with trusted third parties when necessary:

6.1 Service Providers

• Payment processors (e.g., Stripe, PayPal)
• Web hosting providers
• Learning system (Tutor LMS)
• Shipping providers (if books are ordered)

6.2 Legal Requirements

If required by a German or EU authority, we may share information as legally required.

We DO NOT:

• Sell your personal data
• Share your data with advertisers
• Share your data for unrelated purposes

7. Data Storage & Security

We use appropriate technical and organizational measures to protect your data. However, no online system is 100% secure. Your data is stored within the European Union whenever possible.

8. Data Retention

We retain your data only for as long as needed:

• Account and course access: as long as your account remains active
• Orders/invoices: stored as required by German law (usually 6–10 years)
• Email communication: based on operational needs

You may request account deletion anytime.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (“Right to be forgotten”)
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent for marketing

To exercise your rights, contact us at: info@dermacontour.co.uk

10. Children’s Data

Our services are not intended for children under 16. We do not knowingly collect data from minors.

11. International Transfers

If your data is transferred outside the EU by a service provider, we ensure GDPR-compliant safeguards (e.g., Standard Contractual Clauses).

12. Changes to This Policy

We may update this Privacy Policy when necessary. The “Last Updated” date will always be shown at the top.

13. Contact Us

If you have questions or requests, please contact: The Derma Academy info@dermacontour.co.uk www.thedermaacademy.com Germany