Baked Sauna Ltd is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how it is used and your rights under UK data protection law.

1. Who We Are

Baked Sauna Ltd
Lanteague, Scotland Road
Zelah, Truro
Cornwall TR4 9JG

Email: info@bakedsauna.co

Baked Sauna Ltd is the data controller responsible for your personal information.

2. Information We Collect

Depending on how you interact with Baked Sauna, we may collect:

Personal and contact information

• Your name

• Email address

• Telephone number

• Emergency contact name and telephone number

Booking information

• Session dates and times

• Booking history

• Passes and gift vouchers

• Private and group booking information

• Booking preferences and communications relating to your visit

Health and safety information

Before participating, we may ask you to complete a health questionnaire and waiver. This may include information about medical conditions, pregnancy, medication or other health circumstances relevant to safe sauna and cold-water use.

Health information is treated as special category personal data and receives additional protection under UK data protection law.

We only ask for health information that we reasonably need for safety purposes.

Technical information

When you use our website, we may collect information such as:

• IP address

• Browser and device information

• Cookie information

• Website usage and analytics information

Payment information

Payments are processed securely by our payment provider. Baked Sauna does not store your full payment card details.

3. Why We Use Your Information

We may use your personal information to:

• Create and manage your bookings

• Process payments, passes and gift vouchers

• Send booking confirmations, reminders and important information about your session

• Maintain appropriate health and safety records

• Contact an emergency contact where reasonably necessary

• Provide customer support

• Maintain financial and business records

• Protect the security and operation of our website and booking systems

• Send newsletters and marketing where you have chosen to receive them

• Meet our legal and regulatory obligations

4. Our Lawful Bases

Under UK GDPR, we must have a lawful basis for using personal information.

Depending on the circumstances, we rely on:

Contract — where processing is necessary to make and manage a booking, payment, pass or gift voucher.

Consent — where you have chosen to receive marketing communications or where consent is otherwise appropriate.

Legitimate interests — where necessary to operate and protect our business, provide customer service and improve our services, provided those interests do not override your rights.

Legal obligation — where we need to retain or process information to comply with applicable law, including financial and tax requirements.

Health Information

Health information collected through our health questionnaire is special category data.

Where we rely on explicit consent to process this information, you will be asked to actively confirm your consent to us processing the health information you provide for the stated safety purpose.

You may withdraw that consent, although doing so may mean we cannot safely provide services that require us to process that information.

5. Health Questionnaires & Waivers

Health questionnaires and waivers are collected to help us operate Baked Sauna safely and maintain appropriate records relating to participation.

Please provide accurate information and update it if your circumstances change.

For group bookings and Baked Gatherings, each participating guest may be required to complete their own health questionnaire and waiver.

We do not use health information for advertising or unrelated marketing purposes.

6. Who We Share Information With

We only share personal information where reasonably necessary to operate our business or where required by law.

This may include service providers supporting:

• Our Sway booking system

• Payment processing, including Stripe

• Our Squarespace website and hosting

• Email and newsletter services

• Website analytics

• Professional advisers, insurers or authorities where reasonably necessary or legally required

These providers may process information on our behalf in accordance with their own contractual and data protection obligations.

We do not sell your personal information.

7. International Data Transfers

Some of the technology providers we use may process information outside the UK.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place as required by UK data protection law, such as applicable adequacy regulations or approved contractual safeguards.

8. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and safety requirements.

As a general guide:

• Booking and financial records may be retained for up to 6 years where required for accounting, tax or legal purposes.

• Marketing information is retained until you unsubscribe, withdraw consent or it is no longer reasonably required.

• Cookie and analytics information is retained according to the settings of the relevant service.

• Health questionnaires and waivers are retained only for as long as reasonably necessary for health and safety, insurance and legal purposes.

We periodically review the information we retain and securely delete or anonymise information when it is no longer required.

9. Marketing

We will only send marketing emails where we have an appropriate lawful basis to do so.

You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing will not prevent us from sending essential communications relating to an existing booking.

10. Cookies

Our website uses essential cookies required for functions such as website operation and booking.

We may also use non-essential cookies, including analytics cookies. Where required, these are used only after you have provided consent through our cookie banner.

You can manage your preferences through our cookie controls and your browser settings.

11. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.

Access to personal information, particularly health information, should be limited to people who reasonably need it for the operation and safety of Baked Sauna.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• Ask for access to your personal information

• Ask us to correct inaccurate information

• Ask us to erase your information in certain circumstances

• Ask us to restrict how your information is used

• Object to certain types of processing

• Request data portability in certain circumstances

• Withdraw consent where processing relies on consent

These rights are not absolute and may depend on the lawful basis on which we hold the information.

To exercise your rights, contact:

info@bakedsauna.co

You also have the right to make a complaint to the Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.

13. Changes to This Privacy Policy

We may update this Privacy Policy as our services or legal obligations change.

The latest version will always be published on this page with an updated effective date.