Who we are and what this covers
This policy explains how The Holistic Workshop Ltd, the company that trades as The Workshop Naturist Spa, handles personal information collected through this website, naturistmassage.co.uk.
We are the data controller, which means we decide what is collected and how it is used. The company is registered in England and Wales (company number 04035705) at Lower Gower Road, Royston, Hertfordshire, SG8 5EA.
What we collect
We collect very little. Most bookings are taken by phone, and the site has no accounts, contact forms or checkout, so there is nowhere on it to hand us your details. If you call, write or message us on WhatsApp to book, we keep what you tell us only for as long as we need to arrange your appointment and deal with anything that follows from it.
For website statistics we use Fathom Analytics, which is cookieless. It sets nothing in your browser, does not track you across other sites, and does not build a profile of you. It records anonymised page views and where visits came from, so we can see which pages are read and which people leave quickly. Your IP address and browser are used only momentarily to generate an anonymous signature, and are not stored in a way that identifies you. Because nothing on the site sets cookies, you will not see a cookie consent banner.
How we use it
We use the website statistics to keep the site working and to improve it, fixing pages people leave quickly and seeing which guides are useful. We use the booking details you give us to arrange and run your treatment, and for nothing else. We do not send marketing emails, because we do not hold your email. The lawful basis for this is our legitimate interest in running the spa and improving the website, under Article 6(1)(f) of the UK GDPR. You can object to processing based on legitimate interest; see Your rights below.
Who sees it
We do not sell your information and we do not share it for marketing. The only processor that handles website data is Fathom, as described above. We would disclose information only if the law required it, for example in response to a court order, and in over a decade of running the spa that has never come up.
If we ever sold or transferred part of the business, information you have given us could pass to the new owner along with the relevant part of the company. We would take reasonable steps to keep the protection of this policy in place.
How long we keep it
We hold booking details only for as long as we need to run the appointment and handle anything that comes up afterwards. The analytics data is anonymised and aggregated, and the short-lived signatures Fathom generates are discarded within a couple of days. If you would like us to delete something we hold about you, ask and we will, where we are allowed to. Some records, such as the financial records HMRC requires, we have to keep for set periods even if you ask.
Keeping it secure
We take reasonable technical and organisational steps to protect what we hold. Booking notes are kept locally, on equipment that is not connected to the public internet, and the website is served over HTTPS. If you think anything has been mishandled or accessed without permission, call the spa on 01763 258002 and we will look into it straight away.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you can ask what we hold about you, ask us to correct anything that is wrong, ask us to delete it (subject to our legal obligations), ask us to limit how we use it, ask for it in a portable format, or object to our using it under legitimate interest.
To exercise any of these, contact us using the details below. We will respond within one calendar month, as the law requires. If you are unhappy with how we have handled a complaint about your data, you can refer it to the Information Commissioner's Office at ico.org.uk.
Other sites we link to
The site links out from time to time, for example to Google Maps on the location page or to WhatsApp from the footer. Once you click through, the destination site's own privacy policy applies, not this one.
Changes to this policy
We may update this policy when the law changes or the way we run things changes. Any update is posted here with a new review date in the notice at the top of the page. This policy is governed by the law of England and Wales, and disputes about it fall under the jurisdiction of the English and Welsh courts.
How to contact us
If you have any questions about this policy or about how we handle your information, you can reach us by phone on 01763 258002, by post at The Workshop Naturist Spa, Lower Gower Road, Royston, Hertfordshire, SG8 5EA, or on WhatsApp.