1. Who We Are

Alba Education is a UK-based education business owned and operated by a sole trader.
For the purposes of data protection law, Alba Education (“we”, “us”, “our”) is the Data Controller responsible for deciding how your personal data is used.

Contact details
Email: alba.education.co@gmail.com
Postal address: available upon request for data protection matters.

2. The Information We Collect

We may collect and process the following personal information when you use our website or services:

  • Identity Data: your name.

  • Contact Data: your email address and postal address.

  • Transaction Data: details about payments you make to us for digital and physical products.

  • Communication Data: your preferences in receiving marketing from us, and correspondence you send to us (e.g. via contact forms or email).

We do not collect data about children or sensitive personal information.

3. How We Collect Your Information

We collect information in the following ways:

  • When you make a purchase on our website.

  • When you sign up for newsletters, freebies, or updates.

  • When you contact us via email or forms on our website.

  • Automatically through cookies and similar technologies provided by Squarespace (see Section 9).

4. How We Use Your Information

We use your personal data to:

  • Process and deliver your orders.

  • Communicate with you about your purchases or account.

  • Send newsletters, free resources, and marketing emails (only if you have given consent).

  • Manage our relationship with you (including responding to queries).

  • Comply with our legal and tax obligations.

5. Lawful Basis for Processing

We rely on one or more of the following lawful bases under the UK GDPR:

  • Contract: to process purchases and deliver products you’ve ordered.

  • Consent: when you sign up for newsletters or marketing emails.

  • Legal obligation: to comply with UK tax and accounting requirements.

  • Legitimate interests: to operate, maintain, and improve our website and services.

You can withdraw consent for marketing emails at any time by clicking “unsubscribe” or contacting us directly.

6. Payment Processing

Payments on our website are processed securely through Stripe, Apple Pay, Google Pay, Klarna, and Clearpay, via Squarespace’s integrated payment system.
We do not store or have access to your full card details. These providers process your payment information according to their own privacy policies.

7. Sharing Your Information

We do not sell or rent your personal information. We only share data when necessary with:

  • Squarespace – to host our website and store data securely.

  • Payment providers – Stripe, Apple Pay, Google Pay, Klarna, Clearpay – to process transactions.

  • Email service providers – Squarespace Email Campaigns or Gmail – to send newsletters or order confirmations.

  • Delivery couriers (for physical items) – such as Royal Mail or Evri, to deliver your order.

  • Legal and accounting bodies – e.g. HMRC or professional advisers, for compliance purposes.

All third parties are required to respect the security of your personal data and process it in accordance with the law.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements — typically up to six years after your last transaction or interaction with us.
After that, your data will be securely deleted or anonymised.

9. Cookies

Our website uses cookies — small data files placed on your device — to help it function properly and to improve your experience.
Types of cookies used:

  • Essential cookies: required for site operation (e.g. keeping you logged in, processing payments).

  • Analytics cookies: help us understand how visitors use our website (through Squarespace’s built-in analytics).

  • Functional cookies: enable enhanced features such as saving preferences.

You can control or delete cookies through your browser settings. By continuing to use our website, you consent to our use of cookies.

10. Data Security

We have implemented appropriate technical and organisational measures to prevent your data being lost, used, accessed, or disclosed in an unauthorised way.
Access to your personal data is limited to those who need it for legitimate business purposes.

11. Your Legal Rights

Under UK data protection law, you have the right to:

  • Request access to the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request erasure of your data (“the right to be forgotten”).

  • Object to or restrict processing in certain circumstances.

  • Withdraw consent at any time (for marketing).

  • Complain to the Information Commissioner’s Office (ICO) if you believe your data has been misused.

You can contact the ICO at www.ico.org.uk.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated effective date.

Contact us
If you have any questions about this Privacy Policy or how we handle your data, please email: alba.education.co@gmail.com