Skip to content
— Data Protection

Privacy Policy & Personal Data

Aligned with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out our commitment to handling your personal details with transparency, care, and architectural restraint.

Statutory UK GDPR
Legal Standard

Data Protection Act 2018

Reflecting the principle that your personal records require the same quiet order and deliberate guardianship as our physical bathing spaces.

Restricted Access
Publication Status

This policy describes the services currently provided through this website. Online booking, online payments and tracking technologies are not active website features.

Information Governance

We collect only what is essential to answer enquiries, ensure safety, and conduct our business with integrity.

Scope & Lawful Basis

When you communicate with via our website, email, or telephone, we process basic personal identifiers including your full name, email address, optional contact telephone number, and the message content of your enquiry. Our primary lawful basis under UK GDPR Article 6(1)(f) is our legitimate interest in responding effectively to guest questions, arranging preliminary visit details, and maintaining courteous communication. Where you request formal booking agreements or provide consent, processing operates under Article 6(1)(b) (contract) or Article 6(1)(a) (consent).

We follow data minimisation principles and do not intentionally collect unnecessary details. This website does not run audience analytics, advertising pixels, visitor profiling or an automated online booking system. Please avoid including sensitive information in general enquiries.

Stone tile architecture reflecting calm water inside an indoor bathing retreat
Architectural Stillness Restraint in technology mirrors our physical spaces: serene, uncrowded, and free from intrusive commercial monitoring.
Our Core Commitment

Privacy as an Architectural Principle

Your personal data is treated with the same quiet dignity as our thermal suites. We do not sell, rent, or trade guest records, nor do we deploy intrusive automated profiling systems.

Read Visitor Information
Onward Processing

Transparent service partnerships governed by strict data processing agreements and UK adequacy safeguards.

Processors & Transfers

We do not sell personal details to advertisers or data brokers. The static website does not transmit enquiry form contents to an application server; submitting an enquiry opens your own email application. Any ordinary web hosting or email providers that handle data are subject to appropriate privacy, confidentiality and security requirements.

Where information needs to be handled outside the United Kingdom, appropriate transfer safeguards are considered under applicable data protection law. No advertising or analytics cookies are deployed by the website in its current configuration.

Serene indoor bath architectural pool reflecting pale daylight through clean arches
Restrained Infrastructure We select infrastructure partners who respect strict UK data residency and rigorous encryption baselines.
Cookie Governance

Independent Consent Control

Our website operates cleanly without requiring marketing trackers or profiling cookies. Any optional analytics require affirmative consent and can be revoked at any time.

Contact Regarding Data Transfers