Privacy Policy

Last updated: July 2026

Who We Are

Makeup Academy Manila (“we”, “us”, “our”) provides professional makeup training in Quezon City, Philippines through our Basic, Advanced, Professional, and Personal Makeup classes. We act as the personal information controller or data controller for personal data collected through our website, inquiry channels, enrollment process, and related communications, in accordance with applicable data protection laws, including the Philippine Data Privacy Act of 2012 (RA 10173) and, where applicable, the General Data Protection Regulation (GDPR) and other similar privacy laws.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information from website visitors, prospective students, enrolled students, and other individuals who communicate with us regarding our classes and services.

Scope of This Policy

This Privacy Policy applies to personal information collected through the Makeup Academy Manila website, contact and inquiry forms, enrollment processes, social media or messaging inquiries, email communications, and in-person or remote interactions related to our classes and services.

This Policy does not apply to third-party websites, payment providers, social media platforms, or external services that may be linked to or used alongside our website. Those third parties operate under their own privacy policies and practices.

Information We Collect

We may collect and process the following categories of personal information:

• Contact information, such as your name, email address, mobile number, city or location, and social media handle when you contact us, complete a form, or communicate with us about classes or enrollment.
• Inquiry and enrollment information, such as the class you are interested in, preferred training dates, schedule details, prior experience level, payment status, and other information needed to process or manage your class reservation.
• Identity verification information, such as copies of or details from valid government-issued identification, when reasonably necessary for enrollment verification, fraud prevention, safety, or recordkeeping. Under Philippine law, some of this information may qualify as sensitive personal information.
• Limited health and safety information, such as short declarations relevant to studio safety, hygiene, or temporary health screening requirements, where reasonably necessary for in-person training. We do not collect detailed medical histories unless specifically required for safety and voluntarily provided.
• Communication records, such as messages, emails, form submissions, chat inquiries, call notes, and social media communications about our classes, schedules, and services.
• Technical and usage data, such as IP address, browser type, device type, pages visited, referring pages, approximate location, and website interaction data collected through server logs, cookies, or analytics tools. Depending on the context, this may constitute personal data under applicable law.

We do not intentionally collect financial account passwords or full banking credentials through our website. Payments are handled through external payment methods or channels that operate under their own privacy and security practices.

How We Collect Information

We collect personal information directly from you when you:

• Submit a contact, inquiry, or enrollment form.
• Communicate with us by email, phone, social media, or messaging apps.
• Provide enrollment documents or verification details.
• Visit and interact with our website.
• Participate in our classes, consultations, or studio processes.

We may also receive limited information from third-party tools or platforms you use to contact us, such as website form providers, analytics tools, or messaging platforms, subject to their own privacy settings and terms.

Purposes of Processing

We use your personal information only for legitimate and relevant business, educational, and compliance purposes, including:

• Responding to inquiries about classes, schedules, pricing, enrollment, and availability.
• Processing and managing reservations, enrollments, attendance, and related student records.
• Verifying identity where reasonably necessary for enrollment and studio administration.
• Sending class reminders, instructions, updates, and other service-related communications.
• Issuing certificates, maintaining training history, and responding to verification requests relating to prior class completion.
• Supporting in-studio hygiene, safety, and operational protocols.
• Improving our website, communication flow, educational content, and service experience through internal review, analytics, and feedback.
• Complying with legal, tax, regulatory, or law-enforcement obligations.

Where you have separately opted in, we may also send you marketing or promotional updates about new classes, events, schedules, or academy-related announcements. You may withdraw or opt out of such communications at any time.

Legal Bases for Processing

Where required by applicable law, we rely on one or more of the following legal bases for processing your personal information:

• Consent, such as when you voluntarily submit information, agree to receive marketing messages, or provide optional information.
• Contractual necessity, where processing is required to take steps before entering into a contract with you or to perform our obligations relating to your enrollment, schedule, or class participation.
• Legitimate interests, including managing operations, securing our business, improving services, maintaining records, and administering communications, provided these interests are not overridden by your rights where applicable.
• Legal obligation, where we must process information to comply with Philippine laws, tax rules, regulatory duties, or valid legal requests.

Where sensitive personal information is processed, we do so only on an appropriate lawful basis and only to the extent reasonably necessary for the stated purpose.

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to support essential website functionality, remember user preferences, measure traffic, and understand how visitors use the site.

These technologies may include:

• Essential cookies necessary for the operation, security, and basic functionality of the website.
• Analytics or performance cookies used to understand website traffic, visitor behavior, and content effectiveness.

Where required by applicable law, including for certain visitors from the European Economic Area, United Kingdom, or similar jurisdictions, non-essential cookies and similar tracking technologies should only be used after obtaining valid consent through an appropriate consent mechanism. You may also control cookies through your browser settings, although doing so may affect certain website functions.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose limited personal information only where necessary and appropriate to the following categories of recipients:

• Instructors, administrative personnel, or authorized internal staff who need the information to manage classes, attendance, enrollment, student support, or certification.
• Service providers and processors who help us operate the website, communications, storage, scheduling, analytics, or other legitimate business systems, subject to confidentiality and data protection obligations.
• Professional advisers or service partners where reasonably necessary for legal, compliance, or operational purposes.
• Courts, regulators, government agencies, or law enforcement where disclosure is required by law, lawful order, or to protect rights, safety, or legal interests.

We require third-party processors and service providers, where applicable, to process personal information only under appropriate instructions and safeguards consistent with applicable law.

International or Cross-Border Data Transfers

Because some of our service providers, website tools, communication systems, or storage infrastructure may operate outside the Philippines, your personal information may be processed or stored in other jurisdictions.

Where such cross-border processing occurs, we take reasonable and appropriate steps to protect your information, which may include using contractual safeguards, limiting data access, selecting reputable providers, and requiring service providers to implement appropriate privacy and security measures.

If you access our website from outside the Philippines, you understand that your information may be transferred to and processed in the Philippines or other countries where our providers operate, subject to applicable safeguards.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, legal compliance, recordkeeping, and dispute resolution.

As a general guide:

• General inquiries and incomplete enrollment records may be retained for up to 12 months from the last meaningful interaction.
• Active student and enrollment records may be retained for up to 5 years after course completion for certificate verification, accounting, and internal recordkeeping.
• Government-issued ID copies or related identity verification documents should be deleted within 30 days after course completion unless a longer retention period is required by law or necessary to resolve a legitimate issue.
• Limited health or safety screening records should be retained only for a short period reasonably necessary for safety tracking, after which they should be securely deleted.
• Website analytics and technical logs may be retained for a limited period reasonably necessary for security, diagnostics, and traffic analysis.

When personal information is no longer required, we take reasonable steps to securely delete, destroy, anonymize, or de-identify it in accordance with applicable legal and operational requirements.

Data Security

We implement reasonable organizational, physical, and technical safeguards to protect personal information from unauthorized access, disclosure, misuse, alteration, loss, or destruction. These measures may include access controls, account security practices, limited file access, device protection, secure storage practices, and appropriate administrative controls.

However, no method of internet transmission or electronic storage is completely secure. While reasonable efforts are made to protect personal information, absolute security cannot be guaranteed.

Your Privacy Rights

Subject to applicable law and the circumstances of the request, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate, outdated, or incomplete information.
• Request deletion, blocking, or erasure of personal information where legally available.
• Object to certain processing activities, including direct marketing.
• Request restriction of processing in specific circumstances.
• Request portability of personal information where applicable.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.

Residents of the Philippines may also raise concerns with the National Privacy Commission. Individuals in the European Union, United Kingdom, or similar jurisdictions may have the right to lodge a complaint with their local supervisory authority, where applicable.

To exercise privacy rights, please contact us using the contact details listed below. We may need to verify your identity before responding to certain requests.

Children’s Privacy

Our website and services are generally intended for adults and older students seeking makeup education and professional training. We do not knowingly collect personal information online from young children without appropriate consent or lawful basis. If you believe that a child has provided personal information inappropriately, please contact us so the matter can be reviewed and addressed.

Automated Decision-Making

We do not use personal information to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on individuals.

Third-Party Links and Platforms

Our website may include links to third-party websites, social media pages, maps, messaging tools, or external services. We do not control and are not responsible for the privacy, security, or content practices of these third parties. Users should review the privacy policies of those external services separately before providing personal information to them.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website practices, legal obligations, or operational needs. The updated version will be posted on this page with a revised “Last updated” date. Where required by law or where changes are material, additional notice may be provided through the website or other appropriate channels.

Contact Us

For questions, privacy requests, complaints, or concerns about this Privacy Policy or how personal information is handled, please contact: