Legal

Privacy Policy

Last updated: February 2026

1. Introduction

Chefs Bay Academy is operated by Chefs Bay Hospitality Limited (Company No. 13588811), registered in England and Wales. Our registered address is Liscard Business Centre, 188 Liscard Rd, Wallasey, CH44 5TN.

We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect the information you provide when using our website at chefsbayacademy.co.uk and our online training platform.

For the purposes of data protection legislation, Chefs Bay Hospitality Limited is the data controller.

2. Data We Collect

We may collect and process the following personal data:

  • Identity data: Your name and email address, provided when you purchase a licence or contact us.
  • Payment data: Payment card details are processed securely by Stripe. We do not store your full card details on our servers.
  • Course progress data: Information about which courses you have started, completed, and the certificates you have earned.
  • Technical data: Your IP address, browser type and version, device type, operating system, and browsing behaviour on our website. This data is collected through cookies and analytics tools.
  • Communication data: Any information you provide when you contact us by email or phone, including your name, email address, and the content of your message.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Account management: To create and manage your training platform account and provide you with login credentials.
  • Course access: To grant you access to courses, track your progress, and issue CPD accredited certificates upon completion.
  • Payment processing: To process your payment securely through Stripe and provide receipts or invoices.
  • Communication: To respond to your enquiries, send you important updates about your account or courses, and provide customer support.
  • Website improvement: To analyse how visitors use our website so we can improve the user experience, content, and performance.
  • Legal compliance: To comply with our legal obligations, including tax and accounting requirements.

We will not use your personal data for marketing purposes without your explicit consent. We do not sell or share your personal data with third parties for their marketing purposes.

4. Cookies

Our website uses cookies to ensure it functions correctly and to help us understand how visitors use it.

Essential cookies

These cookies are necessary for the website to function and cannot be switched off. They include cookies that remember your preferences and enable core functionality like secure payment processing.

Analytics cookies

We use Google Analytics to understand how visitors interact with our website. These cookies collect information such as the number of visitors, which pages are visited, and how long visitors spend on each page. This data is aggregated and anonymised. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Vercel Analytics

We use Vercel Analytics to monitor website performance and loading times. Vercel Analytics is privacy-focused and does not use cookies to track individual users.

5. Third Parties

We share your data with the following third-party service providers, who process it on our behalf:

We ensure that all third-party providers have appropriate data protection measures in place and process your data only for the purposes we have specified.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

  • Account data: Retained for the duration of your licence plus 12 months, to allow you to access your certificates and re-purchase if needed.
  • Payment records: Retained for 7 years as required by UK tax and accounting legislation.
  • Course completion records: Retained for 3 years after your licence expires, so we can verify certificate authenticity if requested by you or your employer.
  • Communication records: Retained for 2 years after your last interaction with us.
  • Analytics data: Aggregated and anonymised analytics data may be retained indefinitely.

7. Your Rights Under GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
  • Right to erasure: You can ask us to delete your personal data, subject to our legal obligations to retain certain records.
  • Right to restrict processing: You can ask us to limit how we use your personal data in certain circumstances.
  • Right to data portability: You can request your personal data in a structured, commonly used, machine-readable format.
  • Right to object: You can object to the processing of your personal data in certain circumstances, including processing for direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days. There is no fee for making a request, unless the request is clearly unfounded or excessive.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. How to Contact Us

If you have any questions about this privacy policy, or wish to exercise your data protection rights, please contact us:

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Ready to Start Training?

130+ CPD accredited courses. £29 all-in. No subscriptions.

Get Full Access — £29