Privacy policy

Last updated: 4 September 2026

1. About This Privacy Policy

UKASTA – UK Academy of Sound & Therapeutic Arts (“UKASTA”, “we”, “us” or “our”) is operated by SLO-YIN Wellness Ltd, a company registered in England and Wales under company number 17305181.

SLO-YIN Wellness Ltd is the data controller responsible for personal information processed through UKASTA, except where another organisation, such as Shopify, acts as an independent controller for particular processing activities.

UKASTA operates this website, online store and professional training academy, including related information, content, courses, resources, features, tools, products and services (collectively, the “Services”).

Our website and online store are powered by Shopify, which enables us to provide our online Services.

This Privacy Policy explains how we collect, use, store and disclose personal information when you:

  • visit or use our website;

  • purchase or enrol on a UKASTA course;

  • participate in online, practical or in-person training;

  • submit assessments, reflections, case studies or other course work;

  • are enrolled onto a programme by your employer or another organisation;

  • contact or communicate with us;

  • subscribe to marketing or newsletters; or

  • otherwise interact with UKASTA.

Please read this Privacy Policy carefully. By using our Services, you acknowledge that you have read and understood how we process personal information as described in this policy.

2. Personal Information We Collect

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with UKASTA, we may collect or process the following categories of personal information.

Contact Information

This may include:

  • your name;

  • email address;

  • telephone number;

  • billing address;

  • postal address; and

  • other contact details you provide to us.

Account Information

This may include:

  • username or account identifiers;

  • password or authentication information;

  • preferences and settings; and

  • information associated with your UKASTA or course account.

Transaction & Payment Information

This may include:

  • courses or services purchased;

  • transaction history;

  • payment method;

  • payment confirmation;

  • billing information;

  • refunds or cancellations; and

  • other information relating to your purchase.

Payments may be processed by third-party payment providers. UKASTA does not necessarily receive or store your complete payment-card details.

Learner & Training Information

Where you participate in UKASTA training, we may collect and process information including:

  • course enrolments;

  • course progress and completion information;

  • quiz or knowledge-check results;

  • reflective exercises;

  • written assignments;

  • case studies;

  • practical assessments;

  • video or other assessment submissions where applicable;

  • tutor feedback;

  • attendance at practical or live training;

  • completion status;

  • certificates issued;

  • learner communications; and

  • other records relating to your participation in UKASTA training.

Professional Information

Where relevant to your training, we may collect information you choose to provide about your:

  • job role;

  • employer;

  • professional background;

  • qualifications;

  • training experience; and

  • professional interests or intended use of the training.

Corporate Enrolment Information

Where your employer or another organisation purchases or arranges UKASTA training on your behalf, we may receive information such as:

  • your name;

  • work email address;

  • job title or role;

  • employer;

  • nominated course or programme; and

  • information necessary to administer your enrolment.

Communications With Us

We may collect information contained within communications you send to us, including enquiries, customer-support requests, course-support communications, feedback and complaints.

Device & Usage Information

When you use our website or online Services, information may be collected automatically, including:

  • device information;

  • browser information;

  • network connection;

  • IP address;

  • unique identifiers;

  • pages visited;

  • interactions with the website;

  • how and when you navigate or use the Services; and

  • information collected through cookies and similar technologies.

3. Where We Obtain Personal Information

We may obtain personal information:

Directly From You

For example, when you:

  • create an account;

  • purchase or enrol on a course;

  • complete course activities;

  • submit assessments;

  • attend training;

  • subscribe to communications;

  • contact us; or

  • otherwise provide information to UKASTA.

Automatically

Certain information may be collected automatically when you use our website or Services, including through cookies and similar technologies.

From Your Employer or Another Organisation

Where an employer, spa, hotel, educational institution or other organisation purchases or arranges training on your behalf, they may provide us with information necessary to create and administer your individual enrolment.

From Service Providers

We may receive information from organisations that provide technology or services to UKASTA, including Shopify, learning-management systems, payment providers, email and communication services and other suppliers.

From Other Partners or Third Parties

We may receive information from professional partners or other third parties where there is an appropriate lawful basis for doing so.

4. How We Use Your Personal Information

We use personal information only where we have an appropriate reason and lawful basis to do so.

Depending on your relationship with UKASTA, we may process information for the following purposes.

Providing Our Services

We may use personal information to:

  • process purchases and payments;

  • fulfil orders;

  • create and manage accounts;

  • provide access to courses;

  • communicate important information about your purchase or account;

  • provide customer support; and

  • administer our relationship with you.

This processing will commonly be necessary to perform our contract with you or take steps at your request before entering into a contract.

Education, Assessment & Certification

We may process learner information to:

  • enrol you onto UKASTA programmes;

  • provide and administer training;

  • monitor course participation and progress;

  • review and assess submitted work;

  • provide tutor feedback;

  • provide learner support;

  • administer practical or live training;

  • maintain appropriate learner and training records;

  • determine successful completion; and

  • issue and verify certificates.

This processing is generally necessary to provide the training services you or your organisation have purchased and for our legitimate interests in operating and maintaining appropriate standards within our professional training academy.

Corporate Training

Where your employer or another organisation purchases training on your behalf, we may process your information to:

  • administer the corporate booking;

  • create your individual enrolment;

  • communicate with you about the programme;

  • provide training;

  • manage course participation; and

  • confirm appropriate information relating to enrolment or completion to the purchasing organisation.

Where appropriate, we may confirm to the purchasing organisation whether a learner has enrolled, participated in or successfully completed the programme.

We will not normally share the detailed content of confidential learner reflections, assessments, case studies or tutor communications with an employer or purchasing organisation unless:

  • this has been clearly agreed as part of the programme;

  • it is necessary for the administration or assessment of the programme;

  • the learner has consented;

  • there is a legitimate safeguarding, legal or regulatory reason; or

  • we are otherwise permitted or required by law to do so.

Communication & Learner Support

We use personal information to respond to enquiries, provide learner and customer support, communicate about training and maintain our professional relationship with learners, customers and corporate partners.

Marketing & Newsletters

Where permitted by law, we may use your contact information to send you information about:

  • UKASTA courses;

  • new training programmes;

  • events;

  • educational resources;

  • professional updates;

  • news; and

  • relevant products or services.

Where consent is required, we will ask for it.

You can unsubscribe from marketing emails at any time using the unsubscribe option included within our emails or by contacting us.

Unsubscribing from marketing will not prevent us from sending essential service communications relating to your account, purchase, course or certification.

Improving UKASTA

We may use information about how people interact with our Services to understand and improve:

  • website performance;

  • learner experience;

  • course delivery;

  • course content;

  • customer service; and

  • our products and Services.

Where possible, we may use aggregated or de-identified information for these purposes.

Security & Fraud Prevention

We may use information to:

  • authenticate accounts;

  • protect our website and Services;

  • detect or investigate suspected fraud;

  • identify malicious or unauthorised activity;

  • protect UKASTA, learners and customers; and

  • enforce our Terms & Conditions.

Legal & Regulatory Purposes

We may process personal information where necessary to:

  • comply with applicable law;

  • maintain appropriate financial and business records;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims;

  • investigate potential breaches of our terms or policies; and

  • protect our legal rights or the rights of others.

5. Lawful Bases for Processing

Under UK data-protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide a course, product or service that you have purchased or requested.

Legitimate Interests

Where processing is reasonably necessary for UKASTA’s legitimate business and educational interests and those interests are not overridden by your rights and freedoms.

This may include operating our academy, maintaining appropriate learner and certification records, improving our Services, protecting our business and communicating appropriately with corporate partners.

Consent

Where you have given us permission to process your information for a particular purpose, such as certain forms of marketing.

Where we rely on consent, you may withdraw it at any time.

Legal Obligation

Where processing is necessary for us to comply with applicable legal or regulatory obligations.

Other lawful bases may apply where permitted under applicable data-protection law.

6. How We Share Personal Information

We do not sell your personal information in the ordinary meaning of selling customer information for money.

We may share or disclose personal information where reasonably necessary to operate UKASTA and provide our Services.

This may include:

Shopify

Our website and online store are powered by Shopify.

Learning & Technology Providers

We may use third-party learning-management, hosting, video, communication, cloud-storage or other technology providers to deliver and administer training.

Payment Providers

Payment information may be processed by Shopify and/or other authorised payment processors.

Professional Service Providers

We may share information with professional advisers or suppliers who support our business, such as accountants, IT providers or legal advisers, where appropriate.

Marketing & Advertising Providers

Where applicable and permitted by law, we may work with providers that help us send communications, analyse website activity or advertise our Services.

Your Employer or Purchasing Organisation

Where your course has been purchased by an employer or another organisation, we may provide appropriate information about enrolment, participation or completion as described in this Privacy Policy.

Legal & Business Requirements

We may disclose information where reasonably necessary to:

  • comply with legal obligations;

  • respond to lawful requests;

  • enforce our agreements;

  • protect our rights or the rights of others; or

  • support a legitimate business transaction such as a restructuring, merger or sale.

Service providers processing personal information on our behalf are expected to handle information appropriately and in accordance with applicable data-protection requirements.

7. Our Relationship With Shopify

Our website and online store are hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of our website in order to provide its services to UKASTA and, in some circumstances, for Shopify’s own purposes.

Information submitted through our website may therefore be transmitted to Shopify and other service providers, including organisations located outside the United Kingdom.

Shopify may also provide enhanced services that use information about interactions with our store and, potentially, other Shopify merchants.

Where Shopify acts as an independent controller of personal information, Shopify is responsible for that processing and for responding to applicable privacy-rights requests relating to its own processing.

Further information about Shopify’s processing practices and privacy controls is available through Shopify’s own privacy information and privacy portal.

8. Cookies & Similar Technologies

Our website uses cookies and similar technologies.

Cookies may be used to:

  • enable essential website functionality;

  • maintain accounts and shopping baskets;

  • process transactions;

  • remember preferences;

  • understand website usage and performance;

  • improve our Services; and

  • support marketing or advertising where applicable.

Where required by law, non-essential cookies will only be used with appropriate consent.

You can manage applicable cookie preferences through the cookie controls made available on our website.

Please note that disabling certain cookies may affect website functionality.

9. Third-Party Websites & Links

Our website, courses or learning resources may contain links to third-party websites, services or resources.

UKASTA is not responsible for the privacy, security, accuracy or practices of third-party websites that we do not control.

If you follow an external link, you should review the relevant organisation’s privacy information before providing personal information.

10. Children’s Data

UKASTA professional training programmes and Services are not generally intended for children.

We do not knowingly collect personal information from children where we do not have an appropriate lawful basis to do so.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and, where appropriate, delete the information.

11. Assessment, Case Study & Sensitive Information

Some UKASTA programmes may ask learners to complete reflective exercises, case studies or practical assessments.

Learners should avoid including unnecessary identifying information about clients, guests, colleagues or other individuals within course submissions.

Where case studies involve another person, learners are responsible for following the confidentiality, consent and professional requirements applicable to their practice and should anonymise information wherever appropriate.

Learners should not submit unnecessary medical, health or other sensitive personal information about themselves or another person unless specifically required for an appropriate educational or assessment purpose.

Where UKASTA receives sensitive personal information as part of legitimate training or assessment activity, we will handle it with appropriate care and in accordance with applicable data-protection requirements.

12. Security

We take reasonable organisational and technical measures to protect personal information against inappropriate access, loss, misuse, alteration or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Learners and customers are responsible for keeping account credentials secure and should not share passwords or course login information with other people.

We recommend that sensitive or confidential information is not sent through unsecured communication channels.

13. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our Services, maintaining appropriate training records, meeting legal obligations, resolving disputes and enforcing agreements.

Retention periods may vary depending on the type of information.

Learner & Certification Records

We may retain appropriate learner and certification records after course completion so that we can:

  • verify training and certification;

  • respond to future certificate enquiries;

  • maintain the integrity of our training records;

  • meet accreditation or endorsement requirements where applicable; and

  • demonstrate appropriate administration of our programmes.

Assessment Materials

Detailed assessments, case studies, reflections, practical submissions and tutor feedback will be retained only for as long as reasonably necessary for educational, quality-assurance, accreditation, legal or administrative purposes.

Financial Records

Transaction and financial information may be retained for the periods required by applicable tax, accounting and company-law obligations.

Marketing Information

Where we process information for marketing, we will retain appropriate records of preferences and consent or opt-out requests so that we can respect your choices.

When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

14. International Transfers

Some of our technology and service providers, including Shopify, may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data-protection law.

These may include transfers to countries recognised as providing an adequate level of protection or use of approved contractual safeguards and other recognised transfer mechanisms.

15. Your Data-Protection Rights

Depending on the circumstances and subject to applicable legal exemptions, UK data-protection law may give you rights including:

Right of Access

You may request information about the personal data we hold about you and request a copy.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may ask us to delete personal information.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how we use your personal information.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format or request that it be transferred to another organisation.

Right to Object

You may have the right to object to certain processing, including processing based on legitimate interests and direct marketing.

Right to Withdraw Consent

Where we rely on your consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

You will not be discriminated against for exercising your data-protection rights.

We may need to verify your identity before responding to a request.

To exercise your rights, please contact:

info@ukasta-academy.co.uk

16. Marketing Preferences

You can unsubscribe from promotional email communications at any time using the unsubscribe link within the relevant email.

You may also contact us at:

info@ukasta-academy.co.uk

We may continue to send essential non-marketing communications relating to your purchases, account, course participation, assessment or certification.

17. Complaints

If you have concerns about how UKASTA handles your personal information, please contact us first so that we have an opportunity to investigate and resolve the issue.

Email:

info@ukasta-academy.co.uk

You also have the right to raise a complaint with the UK Information Commissioner’s Office (ICO), the independent authority responsible for data-protection regulation in the United Kingdom.

Information about making a complaint and your data-protection rights is available through the ICO.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • changes to our Services;

  • new courses or technologies;

  • changes to our privacy practices;

  • operational requirements; or

  • legal or regulatory developments.

Where we make changes, we will publish the updated Privacy Policy on our website and update the “Last updated” date.

Where required by law, we will provide additional notice of material changes.

19. Contact UKASTA

For questions about this Privacy Policy, our privacy practices or your personal information, or to exercise your data-protection rights, please contact:

UKASTA – UK Academy of Sound & Therapeutic Arts

Operated by SLO-YIN Wellness Ltd
Company number: 17305181
Registered in England and Wales
Registered office: 3 The Brownings, Corsham, Wiltshire, SN13 8HP, United Kingdom

Email: info@ukasta-academy.co.uk
Website: www.ukasta-academy.co.uk
Telephone: +44 (0)330 043 9744

For the purposes of applicable UK data-protection law, SLO-YIN Wellness Ltd is the data controller responsible for personal information processed by UKASTA, except where another organisation acts as an independent controller for its own processing activities.