Privacy Policy

Last updated: 20th October 2026

1. Introduction

Bed and Breakfast Academy respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, subscribe to our newsletter, purchase a course or contact us.

It also explains your rights under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

2. Who we are

Bed and Breakfast Academy is owned and operated by Karen Thorne, trading as Bed and Breakfast Academy.

For the purposes of UK data protection law, Karen Thorne is the data controller responsible for personal information collected through the business.

Our contact details are:

Bed and Breakfast Academy
Hopton House
Hopton Heath
Craven Arms
Shropshire
SY7 0QD

Website: www.bandbacademy.co.uk

Email: [email protected]

If you have any questions about how we use your information, please contact us.

3. Information we collect

Depending on how you interact with us, we may collect the following personal information.

Information you provide directly

Your name and email address.
Your postal address, where provided.
Contact details supplied when making an enquiry.
Information provided when purchasing a course.
Information you choose to share in emails, surveys or feedback.
Your newsletter subscription preferences.

Course and account information

Details of courses purchased.
Purchase dates and payment status.
Account registration and login information.
Course access and progress information made available through our learning platform.
Records of customer support enquiries and communications.

Website and technical information

When you visit our website, certain technical information may be collected automatically, including:

IP address.
Browser and device information.
Pages visited and website interactions.
Cookie and similar technology information.

Payment information

Payments are processed through third-party payment providers.

We do not receive or store your full payment card details.

We may retain transaction records, payment status, amounts paid and information needed for accounting, refunds and customer support.

4. How we use your information

We use personal information for the following purposes.

Purpose	Lawful basis
Processing course purchases and providing access	Performance of a contract
Managing customer accounts and responding to course-related enquiries	Performance of a contract
Maintaining financial and tax records	Legal obligation
Responding to general enquiries	Legitimate interests in operating our business
Sending newsletters and promotional emails	Consent, or another lawful basis where permitted by applicable marketing rules
Maintaining website security and preventing misuse	Legitimate interests in protecting our website and business
Improving our website and services using necessary operational information	Legitimate interests
Using non-essential analytics or marketing cookies	Consent where required
Communicating important changes to purchased courses, including closure arrangements	Performance of a contract or legitimate interests, as applicable

Where we rely on legitimate interests, we consider the impact on your privacy and use your information only where those interests are not overridden by your rights and freedoms.

We will not use your personal information for unrelated purposes without an appropriate lawful basis.

5. Email newsletters and marketing

If you subscribe to our newsletter, we may send you emails containing B&B advice, blog posts, course information, business updates and occasional promotional offers.

We will send marketing emails only where permitted by applicable data protection and electronic marketing rules.

You can unsubscribe at any time by clicking the unsubscribe link included in our marketing emails.

You can also contact us directly to request removal from our marketing list.

Unsubscribing from marketing emails does not prevent us from sending essential communications relating to a course you have purchased.

We do not sell your email address or personal information to third parties.

6. How we share your information

We use trusted third-party service providers to help operate our website and business.

These may include:

Kajabi, which provides our website, course delivery and email marketing platform.
Payment processors used to securely handle transactions.
Website hosting, domain and security providers.
Email and communication services.
Accounting and professional service providers.
Cloud storage services, including Google Drive, where used for business administration or course materials.

These providers may process personal information on our behalf where necessary to deliver their services.

We require appropriate safeguards when personal information is processed by third parties acting on our behalf.

We may also disclose information where required by law, to comply with a lawful request or to establish, exercise or defend legal claims.

We do not sell or rent personal information to third parties.

7. International data transfers

Some of the services we use, including Kajabi and other technology providers, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place, as required by UK data protection law.

Depending on the circumstances, these may include UK adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms.

You may contact us for further information about the safeguards applicable to your personal information.

8. Cookies and website analytics

Our website uses cookies and similar technologies.

Cookies are small files stored on your device that help websites function and, where enabled, provide information about how visitors use them.

We may use:

Essential cookies

These are necessary for the website to function, including account login, security and checkout features.

Analytics cookies

These help us understand how visitors use the website so we can assess and improve its performance.

Marketing cookies

Where enabled, these may help measure advertising performance or provide more relevant marketing.

Non-essential cookies will be used only where the required consent has been obtained.

You can manage your cookie preferences through the controls provided on our website, where available, or through your browser settings.

Disabling essential cookies may affect the operation of some website features.

Further details of the cookies used, their providers and their duration should be available through our cookie information or preference controls.

9. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting and contractual obligations.

Our general retention approach is:

Purchase and accounting records

Normally retained for six years after the end of the relevant financial year, or longer where required by law or necessary to resolve a legal matter.

Course account information

Retained while necessary to provide course access and manage the closure of Bed and Breakfast Academy, subject to any continuing legal or contractual obligations.

Newsletter information

Retained while you remain subscribed, or until the mailing list is closed. Limited suppression information may be retained where necessary to respect unsubscribe requests.

General enquiries

Retained only for as long as reasonably necessary to respond to the enquiry and deal with any related matters.

Technical and website information

Retained according to operational requirements and the retention arrangements of the relevant service providers.

When personal information is no longer required, we will delete or anonymise it securely, subject to any continuing legal obligations.

10. Closure of Bed and Breakfast Academy

Bed and Breakfast Academy is scheduled to close in June 2027.

As part of the closure, we will review the personal information held through our website, course platform and email marketing services.

We will retain information only where necessary to meet legal obligations, deal with outstanding customer matters, honour existing rights or maintain appropriate business records.

Personal information that is no longer required will be securely deleted or anonymised.

Course materials may be transferred to Google Drive or another storage service. We do not intend to transfer student account information unnecessarily.

Where personal information needs to be retained after closure, it will continue to be handled in accordance with applicable data protection law.

11. Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures include using established service providers, controlling access to personal information and maintaining appropriate account security.

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to protect the information we hold.

12. Your data protection rights

Under UK data protection law, you may have the following rights:

The right to be informed about how your personal information is used.
The right to request access to personal information we hold about you.
The right to have inaccurate information corrected.
The right to request deletion of your information in certain circumstances.
The right to restrict how your information is processed in certain circumstances.
The right to object to certain types of processing.
The right to receive or transfer certain personal information where the right to data portability applies.
Rights relating to qualifying automated decision-making.

Where we rely on your consent, you may withdraw that consent at any time.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact us at [email address].

We may need to verify your identity before responding.

We will normally respond within one calendar month, subject to any lawful extension.

You will not normally be charged for exercising your data protection rights.

13. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: www.ico.org.uk

Telephone: 0303 123 1113

14. Children's privacy

Our website and courses are intended for adults.

We do not knowingly collect personal information from children for the purpose of providing our courses.

If we become aware that personal information has been collected from a child without an appropriate lawful basis, we will take steps to address the matter.

15. External websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of those websites.

We recommend reading their privacy policies before providing personal information.

16. Automated decision-making

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

We may use standard website, email marketing and reporting tools to organise information and understand how our services are used.

17. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our business, technology or legal requirements.

The latest version will be published on our website with an updated date.

Where a change materially affects how we use personal information, we will provide additional information where required by law.

18. Contact us

For questions about this Privacy Policy or your personal information, please contact:

Karen Thorne
Bed and Breakfast Academy
Hopton House
Hopton Heath
Craven Arms
Shropshire
SY7 0QD