Privacy Policyسياسة الخصوصية

The data controller is Yasmina Cafe Ltd (Companies House no. 15069042; registered office: Union Chambers, Grainger Street, Newcastle upon Tyne NE1 5JE), trading as Yasmina Academy from 45 Grainger Street, Newcastle upon Tyne NE1 5JE. ICO registration number: ZC274973. Contact: theacademy@yasminacafe.com.

Through the application form: full name; email; phone/WhatsApp; date of birth and age confirmation; student status and institution; home address; the name, relationship to you and phone number of an emergency contact; preferred days and availability; preferred language; prior experience; dietary, allergy or access needs (which may include health information); consents; and, for applicants under 18, a parent/guardian's name, phone, email and consent. We also create a booking reference (YA-XXXX). We check your photo ID in person on your first day and do not keep a copy.

How you found us: your answer to "How did you hear about us?" and, if you arrived from an advert or another website, the campaign details in the link you followed (such as the source, medium and campaign name, and Facebook or TikTok click IDs), the website that referred you and the first page you landed on. This is kept with your application.

Through BrightHR (trainees only): your clock-in and clock-out times and your location at the moment you clock in.

Through payment: Stripe collects your name, email, phone and card details. We receive confirmation of payment and limited details (for example the last four digits of the card) — we never see or store your full card number.

Your answers are also saved in your own browser (local storage) so you don't lose them; you can remove them with “Clear form”.

• Contract: to assess your application, arrange your training days, take payment, contact you about the Programme, register you for the BrightSafe courses and issue certificates.
• Legal obligation: to keep financial and tax records and meet health and safety duties.
• Consent / explicit consent: for dietary, allergy, health or access information you choose to give us, used only to keep you safe and make adjustments; and parent/guardian consent for under-18s. You can withdraw consent at any time.
• Legitimate interests: to run and improve the Programme and keep our premises safe.
• How you found us (legitimate interests): we use this to see which adverts and channels bring in applications, so we can spend our advertising sensibly. We do not share it with Facebook, TikTok or any advertiser, and we do not use it to build a profile of you.
• Keeping you safe (legitimate interests and health and safety duties): we use your home address and your emergency contact's name, relationship and phone number to keep you safe during training and to contact someone in an emergency.
• Attendance via BrightHR (contract or legitimate interests): trainees are added to BrightHR as staff and clock in and out on the BrightHR app, which records your location at clock-in to confirm you are at 45 Grainger Street. That record is used as your attendance record. Yasmina Academy reads the clock-ins into its trainee records twice a day. We rely on contract (checking you meet the attendance requirement in our Terms) or, where that does not apply, our legitimate interests in keeping accurate, verified attendance records. Location is recorded only at clock-in.

We do not sell your data or use it for marketing without your separate consent.

• FormSubmit (formsubmit.co) — delivers your application to our inbox by email. FormSubmit is used only to pass your application on to us by email; under its privacy policy it uses submitted information only to provide the service and does not share it with third parties except where needed to provide the service or required by law. Its policy does not state where data is processed, so it may be outside the UK.
• Stripe Payments Europe / Stripe, Inc. — processes payments securely. Stripe acts as an independent controller for some payment data under its own privacy policy.
• BrightSafe — to enrol you on the certificate courses (name and email).
• BrightHR (Bright HR Ltd) — trainees are added as staff to schedule sessions and record clock-in/clock-out on the BrightHR app (name, contact details, schedule, attendance times and location at clock-in). This is our attendance record; we read the clock-ins into our trainee records twice a day.
• Our email provider and professional advisers, and authorities where required by law.

Some providers may process data outside the UK; where they do, transfers are protected by UK adequacy regulations or the UK International Data Transfer Addendum.

• Trainee records (including payment, financial, contract, attendance, BrightHR clock-in and assessment records): kept for 6 years, to meet financial record-keeping requirements and in case of possible claims under the contract, then deleted.
• Unsuccessful applications, including any allergy, dietary or access notes: archived for 12 months, then deleted.
• Home address and emergency contact details are deleted together with your application or trainee record, at the same time as the rest of that record.

Under UK GDPR you have the right to access your data; to have it corrected; to have it erased; to restrict or object to its use; to data portability; and to withdraw consent at any time. To use any of these rights, email theacademy@yasminacafe.com. We will reply within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

This website does not use advertising or analytics cookies. It uses your browser's local storage only to save your form answers and language choice, and session storage to remember how you arrived until you close the tab. Stripe's payment pages set their own cookies for security and fraud prevention. We may update this policy; the latest version will always be on this page.