Privacy Policy
Last updated: 3 November 2026
This policy explains what personal information we collect when you use this website, why we collect it, who we share it with and the rights you have. We keep it to the minimum we need to run the site and our courses, and we never sell your data.
Who we are
Bridal Makeup Artist is run by Tahsinat Consulting LLC, the “data controller” responsible for your personal information.
For anything about your data, please get in touch through our contact page.
What we collect, and why
| Information | When we collect it | Why we use it | Lawful basis |
|---|---|---|---|
| Name and email address, plus an encrypted password if you set one | When you buy a course (your account is created from the email you pay with) | To create your account, give you access to the course you bought and let you log in | Contract |
| Purchase details: which course, date, amount, payment provider, transaction reference, and the name and email the provider gives us | When you pay | To confirm your payment, unlock your course, handle refunds and keep financial records | Contract; legal obligation (tax records) |
| Course progress (lessons you mark complete) | When you use the course | To show your progress and where to continue | Contract |
| Name, email, topic and message | When you use the contact form | To reply to you | Legitimate interests (answering your enquiry) |
| Technical information such as IP address, browser type and pages requested | When you visit the site | To deliver pages, keep the site secure and fix problems | Legitimate interests (running a secure website) |
| How you use the site (pages viewed, time on page, approximate location, device type) | Through Google Analytics, only if you accept analytics cookies | To understand which pages are useful and improve the site | Consent |
We don’t collect or see your card details or PayPal login. Payments are handled entirely on Stripe’s and PayPal’s own secure pages.
Who we share it with
We only share personal information with the services we need to run the site:
- Hostinger hosts the website, its database and its server logs.
- Stripe and PayPal process payments. They act as independent controllers for the payment details you give them, under their own privacy policies.
- Google:
- Google Analytics (through Google Site Kit) measures visits, only if you accept analytics cookies.
- Google Fonts supplies the site’s typefaces, which means your browser connects to Google’s servers.
- YouTube:
- Lesson and guide videos show a preview image from YouTube.
- The video itself only loads from YouTube’s privacy-enhanced service (youtube-nocookie.com) when you press play.
- Our email provider delivers account emails (such as “set your password”) and our replies to you.
- Professional advisers such as an accountant, and tax or other authorities, where the law requires it.
Some of these providers (Stripe, PayPal and Google) may process data in other countries. Where they do, the transfer is protected by appropriate legal safeguards.
Cookies
| Cookie | Purpose | Type |
|---|---|---|
wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie |
Keep you logged in to your account and check your browser accepts cookies | Strictly necessary |
bga_consent |
Remembers whether you accepted or rejected analytics cookies (kept for 6 months) | Strictly necessary |
_ga, _ga_… |
Google Analytics: distinguish visitors and sessions so we can count visits. Only set if you click “Accept analytics” | Analytics (optional) |
Strictly necessary cookies are needed for the site to work and don’t require consent. Analytics cookies are optional: Google Analytics doesn’t load at all until you click “Accept analytics” on our cookie banner. You can change your mind at any time with Cookie settings at the bottom of every page, and rejecting deletes any analytics cookies already set. You can also block or delete cookies at any time in your browser settings, and you can opt out of Google Analytics across all sites with Google’s opt-out browser add-on. Stripe and PayPal set their own cookies on their payment pages.
How long we keep it
- Your account and course progress: for as long as you have an account. Ask us to delete it at any time.
- Purchase records: for six years after the purchase, for tax and accounting purposes, even if you delete your account.
- Contact form messages: up to two years, then deleted.
- Analytics data: no longer than 14 months, set in our Google Analytics settings.
- Server logs: kept by our host for a short period for security, typically no more than a few weeks.
How we protect it
The site uses HTTPS encryption. Passwords are stored only in encrypted (hashed) form, and payment provider keys are encrypted. Access to the site’s dashboard is limited to the people who run it.
Your rights
Depending on where you live, you have the right to:
- Access: ask for a copy of the personal information we hold about you.
- Rectification: ask us to correct information that’s wrong or incomplete.
- Erasure: ask us to delete your information, unless we have to keep it by law.
- Restriction and objection: ask us to limit how we use it, or object to uses based on legitimate interests.
- Portability: ask for the information you gave us in a commonly used, machine-readable format.
- Withdrawing consent: where we rely on consent (analytics cookies), you can withdraw it at any time.
To use any of these rights, contact us. We’ll reply within one month. It’s free unless a request is clearly unfounded or excessive.
Complaints
If you’re unhappy with how we’ve handled your information, please contact us first so we can try to put it right. You also have the right to complain to your local data protection authority.
Children
Our courses are intended for adults. We don’t knowingly collect information from children under 16.
Changes to this policy
We’ll update this page if the way we use personal information changes, and change the “last updated” date at the top.