Subject Access Requests (SAR)
Submit your request via email or post with proof of identity. We will respond within one calendar month at no cost to you.
Aligned with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out our commitment to handling your personal details with transparency, care, and architectural restraint.
Reflecting the principle that your personal records require the same quiet order and deliberate guardianship as our physical bathing spaces.
This policy describes the services currently provided through this website. Online booking, online payments and tracking technologies are not active website features.
When you communicate with via our website, email, or telephone, we process basic personal identifiers including your full name, email address, optional contact telephone number, and the message content of your enquiry. Our primary lawful basis under UK GDPR Article 6(1)(f) is our legitimate interest in responding effectively to guest questions, arranging preliminary visit details, and maintaining courteous communication. Where you request formal booking agreements or provide consent, processing operates under Article 6(1)(b) (contract) or Article 6(1)(a) (consent).
We follow data minimisation principles and do not intentionally collect unnecessary details. This website does not run audience analytics, advertising pixels, visitor profiling or an automated online booking system. Please avoid including sensitive information in general enquiries.
Your personal data is treated with the same quiet dignity as our thermal suites. We do not sell, rent, or trade guest records, nor do we deploy intrusive automated profiling systems.
Under Chapter 3 of the UK GDPR, you retain comprehensive control over how your personal details are collected, stored, and processed by .
You may request confirmation of whether we hold personal data concerning you, along with a free electronic copy of that data provided in a structured, commonly used format within one calendar month.
If any information we hold is incomplete or inaccurate, you have the right to have it corrected without undue delay. You may also request the deletion of your personal records where no overriding legal requirement to retain them exists.
You have the right to object to processing based on our legitimate interests or to request restriction of processing while a query regarding accuracy or lawfulness is resolved.
Personal data is preserved only for the duration strictly necessary to fulfil the purposes for which it was assembled:
We implement TLS transport encryption, role-based access controls, and strict authentication for internal systems. In the unlikely event of a personal data breach posing a risk to individual rights, we will notify the Information Commissioner’s Office (ICO) within 72 hours in compliance with Section 67 of the Data Protection Act 2018.
We do not sell personal details to advertisers or data brokers. The static website does not transmit enquiry form contents to an application server; submitting an enquiry opens your own email application. Any ordinary web hosting or email providers that handle data are subject to appropriate privacy, confidentiality and security requirements.
Where information needs to be handled outside the United Kingdom, appropriate transfer safeguards are considered under applicable data protection law. No advertising or analytics cookies are deployed by the website in its current configuration.
Our website operates cleanly without requiring marketing trackers or profiling cookies. Any optional analytics require affirmative consent and can be revoked at any time.
To submit a Subject Access Request (SAR), update your details, or raise a concern regarding our privacy stewardship, you may reach our administrative office directly using the verified corporate details below.
Submit your request via email or post with proof of identity. We will respond within one calendar month at no cost to you.
You have the statutory right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (ico.org.uk).
The enquiry form prepares an email in your own email application. It does not directly submit or store form entries through this website; sending the email is your separate action.