This Privacy Policy explains how Base Cake Academy processes personal data when you use basecakecorner.makeup, contact us, or interact with our training-related services. It describes what we collect, why we use it, when we share it, and the choices and rights available to you.
We use personal data to provide and manage the website, respond to inquiries, process registrations or transactions, deliver training-related services, maintain security, prevent misuse, analyze site performance, improve content and functionality, comply with legal obligations, and keep appropriate business records. Where required, we also use data to communicate service updates and to manage consent or preference settings.
We may share personal data with trusted service providers that support website hosting, analytics, communications, payment processing, administration, or technical maintenance. These parties act on our instructions where required and are expected to use the data only for the services they provide. If a business reorganization occurs, relevant data may be transferred as part of that transaction subject to applicable safeguards.
We may disclose personal data where necessary to comply with legal obligations, respond to lawful requests from public authorities, protect our rights, investigate fraud or security incidents, or enforce our terms and policies. We may also share information when needed to establish, exercise, or defend legal claims.
We may collect identification details, contact information, account or registration data, payment-related records where applicable, training and inquiry history, device and browser information, and usage data such as pages viewed and interactions with site features. We do not seek to collect more data than is reasonably needed for the purposes described in this policy.
We receive personal data directly from users when they complete forms, register interest, communicate with us, or otherwise interact with Base Cake Academy. We also collect certain data automatically through the website, including technical logs, device identifiers, and cookie-based information. In some cases, we may receive data from service providers that support site operation, analytics, or payment processing.
The website may use essential cookies needed for security and core functions, preference cookies that remember selected settings, and analytics cookies that help us understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. We do not use cookies to collect unnecessary sensitive information.
You may block or delete cookies through your browser settings, and you may also use any cookie preference tools made available on the site. If you disable some cookies, parts of the website may not function as intended, especially features that rely on session management, security, or analytics.
Depending on your location and the processing involved, you may have rights to access, correct, delete, restrict, or object to the use of your personal data. You may also have the right to data portability and, where processing is based on consent, the right to withdraw that consent. Some requests may be limited where we must keep information for legal, security, or contractual reasons.
To exercise a privacy right, submit a clear request through the contact details in this policy and describe the data or processing concerned. We may ask for information needed to verify your identity and to understand the request. We will respond within the period required by applicable law and will explain any refusal or limitation where relevant.
We retain personal data for the period necessary to provide the requested service, manage our business records, meet legal and accounting obligations, resolve disputes, and maintain security. When data is no longer needed, we delete it or anonymize it, unless a longer retention period is required by law or justified by a legitimate business need.
We may update this Privacy Policy from time to time to reflect changes in our services, processing activities, legal requirements, or security practices. The revised version will apply from the date it is posted unless a different effective date is stated. Where a change is material, we will take reasonable steps to draw attention to it.
For GDPR purposes, Base Cake Academy acts as a controller for personal data processed through the website and related communications. We rely on lawful bases such as consent, contract performance, legitimate interests, and legal obligation, depending on the activity involved. Where consent is used, it may be withdrawn without affecting prior processing that was already lawful.
Where GDPR applies, you may have rights to access your data, correct inaccurate information, request deletion, restrict processing, object to certain processing, and receive a copy of data you provided in a portable form where applicable. If processing is based on consent, you may withdraw consent at any time for future processing. You also have the right to lodge a complaint with the competent supervisory authority.
