Privacy Policy

1. Introduction

At Fire & Ice Spa (“we”, “our”, or “us”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our spa facilities, use our website, or engage with our services.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Name and contact details (email address, phone number, postal address)
• Date of birth (for age verification and special offers)
• Health information relevant to spa treatments (allergies, medical conditions)
• Payment information (processed securely through our payment providers)
• Booking preferences and service history
• Marketing preferences

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information
• Pages visited and time spent on our website
• Referring website addresses

3. How We Use Your Information

We use your personal information to:

• Process bookings and provide our spa services
• Communicate with you about appointments and services
• Process payments and prevent fraud
• Send marketing communications (with your consent)
• Improve our services and customer experience
• Comply with legal obligations
• Ensure health and safety in our facilities

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfil our services to you
• Consent: For marketing communications and certain health information
• Legitimate interests: To improve our services and prevent fraud
• Legal obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

• Service providers who assist in our operations
• Payment processors for transaction processing
• Professional advisers (lawyers, accountants, insurers)
• Government bodies when required by law

We never sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure SSL encryption for data transmission
• Regular security assessments
• Limited access to personal information
• Staff training on data protection

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:

• Customer records: 7 years after last interaction
• Financial records: 7 years as required by law
• Marketing data: Until you unsubscribe or request deletion
• Health information: 8 years as per healthcare guidelines

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at fireandicespa@outlook.com

9. Cookies

We use cookies and similar technologies to enhance your browsing experience. For detailed information, please see our Cookie Policy.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you are not satisfied with our response to your concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):