Introduction

You-Spa Cheshire Ltd are committed to safeguarding the privacy of our clients, website visitors and staff; in this policy we explain how we will treat your personal information. We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website.

Who are we

You-Spa Cheshire Ltd are registered in England and Wales under registration number 13537292 and our registered office is at 11 the Commons, Sandbach, Cheshire CW11 1EG. You can contact us by using our website contact form, by email to relax@you-spa.co.uk or by telephone on 01270 910224 Our website is owned and operated by You-Spa Cheshire Ltd.

What personal information we collect

We may collect, store and use the following kinds of personal information: a. information that you provide to us when using our services, or that is generated in the course of the use of those services b. information relating to any purchases you make of our services c. information contained in or relating to any communications that you send to us or send through our website (including the communication content and meta data associated with the communication) d. information about your computer and about your visits to and use of this website e. any other personal information that you choose to provide to us f. information about staff employed by You-Spa Cheshire Ltd to manage their employment

How we use your personal information

We may use your personal information to: a. send statements, invoices and payment reminders to you, and collect payments from you b. send you non-marketing commercial communications c. send you email notifications that you have specifically requested d. send you marketing communications relating to our business which we think may be of interest to you, by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications) e. deal with enquiries and complaints made by or about you relating to our website or any other service provided to you by You-Spa Cheshire Ltd f. to support your rights under Data Protection law in relation to our use of your personal information (see section 9 below) g. manage your employment (where you are a member of staff employed by You-Spa Cheshire Ltd (or working with You-Spa Cheshire Ltd) h. administer our website and business including: i. personalising our website for you ii. enabling your use of the services available on our website iii. keeping our website secure and preventing fraud

Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.

We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing. The personal data we hold about you will only be used in line with the purposes detailed above and the legal basis for this will be either for the administration of a contract we have in place with you or in line with the legitimate interests of our business (ensuring that this does not impact on your rights or freedoms in relation to privacy) or disclosed as required by law (as detailed in section 5). You-Spa Cheshire Ltd have no reason to process sensitive information (special categories or criminal convictions data) unless a staff member.

Disclosing personal information

We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy. We may disclose your personal information with, Payment Processors for secure credit card payment transactions, Hosting services, Booking engine, Email service providers to send emails pertaining to your booking. Such providers may send emails of a marketing nature if you have agreed to receive such communications. We require all Third parties to respect the security of your personal data and to treat it in accordance with the law.

We may disclose your personal information: a. to the extent that we are required to do so by law b. in connection with any ongoing or prospective legal proceedings c. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk) d. to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information Except as provided in this policy, we will not provide your personal information to third parties International data transfers Information that we collect will only be stored and processed within the UK and is protected by UK Data Protection laws.

Retaining personal information

This section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information. Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. Notwithstanding the other provisions of this section, we will retain documents (including electronic documents) containing personal data: a. to the extent that we are required to do so by law b. if we believe that the documents may be relevant to any ongoing or prospective legal proceedings c. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk) d. to support the ongoing business purposes of You-Spa Cheshire Ltd as specified in section 4 (with due consideration for the rights and freedoms of individuals' privacy) If you would like further details of how personal data is retained by our organization, please contact us directly.

Security of your personal information

We will take all reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal information. We will store all the personal information you provide on our secure servers. You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent to us over the internet.

Your rights

You have a number of rights under the Data Protection Act including: a. The right to be informed about the collection and use of your personal data e.g. via this privacy notice b. The right to access your personal data c. The right to have any inaccurate personal data rectified, or completed if it is incomplete d. The right to have your personal data erased in certain circumstances e. The right to request the restriction or suppression of their personal data in certain circumstances f. The right to data portability – to obtain and reuse your personal data for your own purposes across different services g. The right to object to our use of your information in certain circumstances e.g. for marketing or profiling purposes If you would like to access your own personal information or exercise any of the rights detailed above please contact us by email to relax@you-spa.co.uk or by telephone on 01270 910224 In the majority of cases, we will respond to your request within 30 days after receiving the necessary information required to deal with your request

We may ask you to supply appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport plus an original copy of a utility bill showing your current address) and any additional information to help us to deal with your request effectively. There may be some exemptions to dealing with your rights as specified in Data Protection law, but You-Spa Cheshire Ltd will ensure you are fully informed of this within 30 days of receiving your request. We do not carry out any profiling or automated decision making based on your personal data Full information on your rights under the Data Protection Act can be found from the following link: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

Third-party websites

Our website includes hyperlinks to, and details of, third party websites. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

Cookies

Our website uses cookies. A list of the cookies used on our website can be found below: Cookie Name Purpose Google Analytics _ga; _gid; _gat_UA; and gwcc These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Ruler Analytics __rafm To improve functionality and to help measure the amount of page visits and traffic sources our site receives, we use a monitoring service provided by Ruler Analytics. Wordfence wordfence_verifiedHuman WordPress plugin ‘Wordfence’ used to verify if the visitor is a bot or human Wordfence wfvt_3596504545 WordPress Wordfence security plugin Consent consentCookie Used to validate whether you have clicked ok to using cookies _hjid Hotjar consent Hotjar cookie that is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies. We use both first party, session and persistent cookies on our website. First party cookies are set by the website you are visiting and they can only be read by that site. Session cookies are stored only temporarily during a browsing session and are deleted from the user’s device when the browser is closed. Persistent cookies are a type of cookie that is saved on your computer for a fixed period (usually a year or longer) and is not deleted when the browser is closed. Persistent cookies are used where we need to know who you are for more than one browsing session. For example, we use this type of cookie to store your preferences, so that they are remembered for the next visit.

Most browsers allow you to refuse to accept cookies; for example: a. in Internet Explorer (version 10) you can block cookies using the cookie handling override settings available by clicking “Tools”, “Internet Options”, “Privacy” and then “Advanced”; b. in Firefox (version 24) you can block all cookies by clicking “Tools”, “Options”, “Privacy”, selecting “Use custom settings for history” from the drop-down menu, and unticking “Accept cookies from sites”; and c. in Chrome (version 29), you can block all cookies by accessing the “Customise and control” menu, and clicking “Settings”, “Show advanced settings” and “Content settings”, and then selecting “Block sites from setting any data” under the “Cookies” heading.

Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on our website. You can delete cookies already stored on your computer; for example: in Internet Explorer (version 10), you must manually delete cookie files (you can find instructions for doing so at http://support.microsoft.com/kb/278835); in Firefox (version 24), you can delete cookies by clicking “Tools”, “Options” and “Privacy”, then selecting “Use custom settings for history”, clicking “Show Cookies”, and then clicking “Remove All Cookies”; and in Chrome (version 29), you can delete all cookies by accessing the “Customise and control” menu, and clicking “Settings”, “Show advanced settings” and “Clear browsing data”, and then selecting “Delete cookies and other site and plug-in data” before clicking “Clear browsing data”. Deleting cookies will have a negative impact on the usability of many websites.

Amendments

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy. If you have a concern about how your data is being handled If you are unhappy about the use of your personal data, then please contact us directly and we will try to resolve your concern. You can also raise a concern directly with the Information Commissioner’s Office and more detail on how to do this can be found from the following link:https://ico.org.uk/concerns/

Further Information

If you have any questions which you feel have not been answered by this Privacy Notice and Cookies Policy you can contact us by using our website contact form, by email to relax@you-spa.co.uk or by telephone on 01270 910224