This notice explains how Bosham Sauna collects and uses your personal information.
For data-protection purposes, Bosham Sauna is the controller of your personal information.
Contact:
Email: hello@boshamsauna.com
1. Information we collect
Depending on how you interact with Bosham Sauna, we may collect:
Contact information
- name;
- email address;
- telephone number.
Booking information
- booking dates and times;
- booking type;
- group size;
- delivery location;
- event information;
- booking notes;
- access and site information for Mobile Private Hire.
Payment information
Payments are processed by our payment provider.
We may retain:
- Stripe customer identifiers;
- payment identifiers;
- payment status;
- amounts paid;
- refunds;
- security authorisation status; and
- limited payment information made available by the payment provider.
We do not store your full card number in our own database.
Communications
We may retain emails, enquiries, support messages and communications relating to your booking.
Technical information
When you use our website we may collect information such as:
- IP address;
- browser and device information;
- website usage information;
- cookie identifiers; and
- analytics information where you have consented where required.
Incident information
If an accident, damage incident, complaint or insurance matter occurs, we may retain information reasonably required to investigate and manage it.
2. Why we use your information
We may use your information to:
- process booking requests;
- manage and confirm bookings;
- take payments;
- collect agreed instalments;
- arrange security card authorisations;
- arrange delivery and collection;
- communicate important booking information;
- provide customer support;
- manage cancellations and refunds;
- prevent misuse or fraud;
- investigate damage or incidents;
- maintain accounting and tax records;
- improve our website and services;
- comply with legal obligations; and
- send marketing communications where we are permitted to do so.
3. Our lawful bases
Depending on the circumstances, we process personal information because:
Contract
Processing is necessary to enter into or perform our contract with you.
For example, we need your details to manage a booking, take payment and arrange delivery.
Legal obligation
We may need to retain or disclose information to comply with tax, accounting, safety or other legal obligations.
Legitimate interests
We may process information where it is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights.
This may include:
- preventing fraud;
- securing our equipment;
- handling disputes;
- investigating damage;
- improving our services; and
- keeping appropriate records.
Consent
Where consent is required — for example for certain marketing or non-essential cookies — you may withdraw it at any time.
4. Payments
We use Stripe to process card payments and related payment functions.
Your payment information is submitted securely to Stripe rather than being stored as full card details by Bosham Sauna.
Where you agree during booking, Stripe may securely retain your payment method so that we can:
- collect a disclosed future booking instalment;
- place an agreed security authorisation;
- process an agreed payment relating to the booking; or
- issue a refund.
We retain references to Stripe transactions in order to manage your booking.
5. Booking database and website services
We may use third-party technology providers to operate Bosham Sauna, including services for:
- website hosting;
- database storage;
- payments;
- transactional emails;
- mapping and distance calculations;
- analytics;
- security; and
- customer communications.
Our current technology may include providers such as Supabase, Stripe and Resend.
Where providers process personal information on our behalf, we take reasonable steps to use appropriate contractual and data-protection arrangements.
6. Marketing
Booking a sauna does not automatically mean that you must receive general marketing emails.
Where required, we will ask separately whether you want to receive marketing.
You can unsubscribe from marketing at any time using the unsubscribe link in an email or by contacting us.
Operational emails required to manage an existing booking are not marketing emails and may still be sent.
7. Sharing your information
We do not sell your personal information.
We may share information where reasonably necessary with:
- payment processors;
- database and hosting providers;
- email providers;
- professional advisers;
- insurers;
- delivery or operational partners;
- IT and security providers;
- regulators, courts or law-enforcement bodies where required; and
- other service providers necessary to fulfil your booking.
We only share the information reasonably necessary for the relevant purpose.
8. International processing
Some technology providers may process information outside the United Kingdom.
Where data-protection law requires safeguards for an international transfer, we will use an appropriate legal mechanism or provider arrangement.
9. How long we keep information
We retain information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, safety or dispute-resolution requirements.
As a general approach:
- booking and transaction records may be retained for the period required for accounting, tax and legal purposes;
- routine booking communications may be deleted when no longer required;
- marketing information may be retained until you unsubscribe or it is no longer useful;
- incident, damage or insurance records may be retained for as long as reasonably required to resolve the matter and meet applicable legal requirements.
We periodically review information we hold and securely delete or anonymise data which is no longer required.
10. Your rights
Depending on the circumstances, data-protection law may give you rights to:
- access your personal information;
- correct inaccurate information;
- request deletion;
- restrict certain processing;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing relies on consent; and
- complain about our handling of your information.
These rights are subject to applicable legal conditions and exemptions.
To exercise your rights, contact: hello@boshamsauna.com
We may need to verify your identity before fulfilling a request.
11. Data-protection complaints
If you have concerns about how Bosham Sauna has used your personal information, please contact us at: hello@boshamsauna.com
We will acknowledge a data-protection complaint within the period required by applicable law, investigate it without undue delay, keep you appropriately informed and provide you with the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO).
12. Security
We use reasonable technical and organisational safeguards designed to protect personal information against:
- unauthorised access;
- alteration;
- disclosure;
- accidental loss; and
- destruction.
No internet-based service can guarantee absolute security.
13. Cookies
Cookies and similar technologies are small pieces of information used by websites and browsers.
Our website may use:
Strictly necessary cookies
These are required for functions such as:
- security;
- booking sessions;
- payment flows;
- remembering essential settings.
These do not require consent where they are genuinely necessary to provide the service requested.
Analytics cookies
We may use analytics to understand how people use the website and improve it.
Where consent is legally required, analytics will not be activated until you choose to accept them.
Marketing cookies
If we introduce advertising or marketing tracking technologies, we will request consent where required before using them.
14. Managing cookies
You can use our cookie controls to accept or reject optional cookies.
You can also control cookies through your browser.
Rejecting optional cookies will not prevent you from making a booking, although disabling essential browser functionality may affect how the website operates.
15. Changes to this notice
We may update this Privacy & Cookie Notice when our services, suppliers or legal obligations change.
The latest version will always be available on our website.
Where a significant change affects how we use existing personal information, we will take reasonable steps to bring it to your attention.
16. Contact
Bosham Sauna
Email: hello@boshamsauna.com