Spa Babies Ltd will always abide by the the laws regarding the protection of your data.
Why we need your data
To book a space on one of our Spas we need to know who you are and how to contact you. We also need to know the age of your child(ren) to make sure the child is within the age limits set. We will hold details of your name, address, contact details, name and age of your child(ren) and details of the session you have attended. Finally, when you are paying, the payment provider needs to know your details to verify the card (this information is not retained by us).
Who we share your data with
We share your data with third party companies who help us in processing the data in hosting the website and companies who process payments on our behalf.
Why we would prefer you opt-in to our communications
When booking for the first time we would prefer you opt-in so that we can tell you about any offers or discounts we may have. If you choose not to opt-in you can still check the website for the latest availability and follow us on social media for any updates or news.
All offer’s or information will only be from Spa Babies Ltd. We will never sell or share your data with others without your consent and your decision to do so Unless required by applicable law or pursuant to a court or similar order.
You can withdraw your consent at any time. Simply email us at firstname.lastname@example.org and we will confirm when we have done this. If you wish a copy of all information held, please email the same address. If you believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).
How long do we keep hold of your information
We retain your information for the minimun period possible for business or legal reasons. For legal reasons this is often set at a minimum of 6 years.
All companies and the GDPR acknowledge that data breaches can and do occur. Spa Babies has processes and controls put in place to minimise the possibility of a breach, but also when there is a breach to minimise the impact and to ensure that those affected are kept informed. Our policy to communicate a breach is available on request.
Within your relationship with Spa Babies, you will interact with several Data Controllers. This is not unusual or unique to us and they include the specialist companies that perform certain functions for us such as taking payment or running the shopping page and session booking system. We have contracts with each of these companies and review their policies and procedures on a very regular basis.
www.spababies.co.uk uses 1 type of ‘Cookie’ to function:
Google Analytics is a free service provided by Google inc. which sets a cookie to that allows us to evaluate how visitors use the site, and give us broad trends in how people access the website such as whether using a computer or a mobile phone. This is essential to us in helping make sure we provide the right information in the right format for our visitors.
EU Cookie Directive