When you contact us, book a session, or place an order, we collect the information you provide: your name, email address, phone number (optional), your message or booking details (service, staff preference, date and time, notes), and for orders, the items you purchase.
Only to run the spa: responding to your messages, scheduling and confirming your sessions, fulfilling your orders, and sending you confirmations about those things. We do not sell your information, share it for advertising, or send marketing you did not ask for.
Card payments are handled by a PCI-DSS compliant third-party payment processor, on that processor's own secure checkout page. Your card details never reach our servers — we never see or store your card number. The processor collects your payment and, for shipped orders, your delivery address, and handles that data under its own privacy policy, which is linked from the checkout page. We can tell you who our processor is on request.
We use a small number of third parties to operate this site. By category, they are: a payment processor, a content delivery and bot-protection provider, hosting and cloud infrastructure providers, file and image storage, an email delivery service, and an SMS delivery service for staff alerts. Each receives only the minimum it needs to do its job, and none of them is permitted to use your information for their own purposes.
We keep a current written record of every provider, what it processes and under what contract. If you would like to know which specific companies we use, or which ones hold your information, contact us and we will tell you.
We do not use advertising or analytics trackers. Your browser's local storage may hold your shopping cart and, for staff, an admin sign-in token. Our bot-protection provider may set a cookie solely to confirm you are a person rather than an automated script; it is not used to track you across sites.
When you submit a form, we record your IP address and browser identification alongside it. We use this to prevent abuse of our forms and, where you have agreed to a policy or consent document, as part of the record of that agreement — so we can show when and from where it was given. It is not used for advertising, profiling, or tracking you across sites.
Web fonts on this site are loaded from a third-party content delivery network, which receives your IP address as a technical necessity of serving the font files.
Messages, bookings, and order records are kept as long as needed for spa operations and bookkeeping. You can ask us at any time to see or delete the information we hold about you — reach us through the contact form or the details in the site footer, and we will take care of it.
This policy may be updated as the site evolves; material changes will be posted here.