Privacy notice

Template — have this reviewed by your data protection adviser before launch.

Who we are

Aesori (“we”) provides the Aesori Academy Learning Platform to aesthetics training academies. Each academy decides what student information it collects and why, so the academy is the data controller for its students’ and tutors’ data and Aesori is the data processor. For academy account and billing information, Aesori is the controller. Contact: support@aesori.co.uk.

What we hold

• Account details: name, e-mail, phone (optional), role and sign-in history.
• Learning records: enrolments, lesson progress, submissions, marks and feedback.
• Uploaded files: documents, treatment photographs and videos uploaded by students and tutors. Photographs of clients may be special-category (health) data; academies must hold written client consent, which students confirm when uploading.
• Security logs: IP address and actions taken, kept to protect accounts.
• Billing details for academies (card payments are handled by Stripe; we never see full card numbers).

Where it is stored

All platform data — database and file storage — is hosted in the European Economic Area (EU (Frankfurt, Germany)). Uploaded files are encrypted with AES-256 before storage. Data is transferred over encrypted (TLS) connections only.

Cookies

We use a single, strictly necessary session cookie to keep you signed in and protect forms from forgery. We do not use advertising or analytics cookies, and we do not load fonts or scripts from third-party servers.

Who we share it with

• Your academy (the controller) and the tutors it authorises.
• Sub-processors: our EU hosting provider, our e-mail delivery provider, and Stripe for academy subscription payments.

How long we keep it

Data is kept while the academy account is active. Academies can erase individual students at any time. When an academy closes its account, its data and files are permanently deleted within 30 days, except billing records we must keep by law.

Your rights

You can download a copy of your data at any time from My account → Download my data. To correct or erase your data, contact your academy first; you can also contact us. You may complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority.