Last Updated: 02.10.2025

This Privacy Policy explains how Loominous Crafts Ltd (“we”, “our”, “us”) collects, uses, and protects your personal information when you use the website https://make-and-master.com/ (the “Website”) and the online courses we provide (the “Services”).

We are committed to respecting your privacy and ensuring compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

1. Information We Collect

We only collect the minimum personal information necessary to provide and manage our Services. This may include:

  • Your name and contact details (such as email address) to schedule courses and communicate with you.
  • Information you provide when you register, purchase a course, or contact us.

We do not collect or store any payment card or banking details. All payments are processed securely by third-party payment providers.

2. How We Use Your Information

We use your personal information to:

  • Confirm and manage your course bookings.
  • Communicate with you regarding schedules, cancellations, or updates.
  • Provide customer support and respond to your inquiries.
  • Maintain our records and ensure compliance with applicable legal obligations.

We do not sell, rent, or trade your personal information with third parties for marketing purposes.

3. Data Security

We take the protection of your data seriously and implement a range of safeguards to reduce risks of unauthorized access, alteration, disclosure, or destruction of personal data.
 Our measures include:

  • Secure communication protocols and encryption.
  • Strict internal access controls.
  • Regular reviews of our technical and organizational security practices.

While no system can be fully secure, we take reasonable steps to keep your information safe.

4. GDPR and Data Protection

We comply with the principles of the UK GDPR by ensuring that:

  • We only collect data that is relevant and limited to what is necessary.
  • Your data is processed fairly, lawfully, and transparently.
  • We keep your data accurate and up-to-date.
  • We retain your data only for as long as needed to provide our Services or as required by law.

To reinforce compliance, we carry out internal reviews, provide staff training, and continuously monitor data handling practices.

5. International Data Transfers

Your personal data may occasionally be transferred to and processed in countries outside the United Kingdom and the European Economic Area (EEA). Where this occurs, we take steps to ensure appropriate safeguards are in place, such as the use of standard contractual clauses or other lawful mechanisms recognized under data protection laws.

6. Payments, SCA and PSD2 Compliance

All payments are processed exclusively through trusted third-party payment providers. We do not collect or store any payment information on our systems.

Our providers comply with the Payment Services Directive 2 (PSD2) and apply Strong Customer Authentication (SCA) to ensure secure online transactions. This typically requires two-factor authentication, combining at least two of the following: something the customer knows (e.g., a password), something the customer possesses (e.g., a phone or token), or something inherent to the customer (e.g., fingerprint).

This means that while you are completing your payment, your identity will be confirmed through these secure methods, protecting your financial data from fraud.

7. Your Rights

Under data protection law, you have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data, subject to legal or contractual restrictions.
  • Object to certain types of processing.

  • Request data portability where applicable.

To exercise your rights, you may contact us at [email protected]. 

8. Retention of Data

We retain your personal data only for as long as necessary to provide the Services and fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or in the way we handle personal data. The updated version will always be posted on this page, and we encourage you to review it regularly.

10. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes arising in connection with it will be subject to the exclusive jurisdiction of the courts of England and Wales.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: [email protected]
Address: Loominous Crafts Ltd, 20 Wenlock Road, London, England, N1 7GU