Heaven Local Spa home
A quiet Heaven Local Spa reception area

Legal · Data privacy

Privacy Policy

Privacy notice · Updated 30 July 2026Heaven Local Spa

Our privacy approach

Clear information about how website enquiries are handled.

This notice explains the information you may choose to provide through this website and the practical reasons it may be used.

If a booking is continued through a phone or messaging service, that provider may also process information under its own privacy terms.

This notice explains, in plain language, how information may be collected and used when someone visits this website or sends an enquiry.

01

Data Collected

When you use a contact or booking form, the website may collect details you choose to submit. Examples include your name, telephone number, email address, preferred location, treatment, date or time, and the message you send.

Information collected automatically

Website systems may also receive technical information such as IP address, browser and device type, operating system, referring page, pages viewed, approximate area, timestamps, and interactions with site features. The precise data depends on the hosting and security systems used to operate the website.

02

Purpose

Information may be used to answer enquiries, check requested appointment availability, communicate about a booking, operate and secure the website, understand page performance, improve the customer journey, measure campaigns, and meet legal obligations. The applicable legal basis depends on the purpose and circumstances; consent should not be implied where another basis is required.

03

Cookies and Analytics

This website does not currently run analytics or advertising cookies. Only the storage needed for essential site functions and your own display preferences is used.

Advertising and consent

If advertising pixels or audience tools are enabled, they may help measure campaigns or build audiences under the provider's terms. No provider, consent mode, cookie duration, or opt-out mechanism is described in this notice. Non-essential technologies should not be described as active until the implemented consent experience and regional requirements have been reviewed.

04

Sharing

Data may be handled by approved service providers that support website hosting, form delivery, communications, security, analytics, or advertising. It may also need to be disclosed to professional advisers, authorities, or a successor organisation where lawfully required. The production policy must name or clearly categorise the actual processors, explain international transfers, and state the business's verified position on selling or exchanging personal information.

05

Retention

Personal information should be kept only for as long as needed for the stated purpose, dispute handling, security, accounting, or legal compliance, then deleted or anonymised where appropriate. Retention periods depend on the information, purpose and applicable legal obligations. You may use the contact page to ask how a specific enquiry is handled.

06

Rights

Depending on applicable law and the circumstances, a person may be able to request access to personal information, ask for correction or deletion, object to or restrict certain uses, withdraw consent, request portability, or raise a complaint with the relevant authority. Identity may need to be verified before a request is completed.

Applicable law determines which rights apply, the response process and timing, and any lawful exceptions. Separate booking conditions are available in the Terms & Booking Policy.

07

Contact

Privacy questions or rights requests can be started through the contact page. A verified legal entity name, privacy contact, service address, response procedure, and jurisdiction must be added here before this notice applies to the current website.

Privacy enquiries

Do not rely on or publish this wording as final legal advice. Business-owner or legal-counsel approval is required.