Last updated: 22 October 2026
Papermill Saunas (“we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect when you visit our website, book a session, buy a gift card or get in touch with us, how we use it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Papermill Saunas is the data controller for the personal information described in this policy.
Address: Papermill Fishery, Fforestfach, Swansea, West Wales
Email: info@papermillsaunas.co.uk
Phone: 07814 741252
The information we collect
- Booking details – your name, email address, phone number, the session you book, the number of guests and any notes you add to your booking.
- Payment information – payments are taken securely by our payment provider (Stripe). We do not see or store your full card details.
- Gift cards – the purchaser’s name and contact details, and the recipient’s name and email address if you ask us to send the gift card to them.
- Enquiries – anything you send us by email, phone, WhatsApp, social media or our website forms.
- Health and safety information – if you choose to tell us about a medical condition, pregnancy or anything else that affects your use of the sauna or hot tub, we use it only to keep you safe during your visit, with your consent.
- Website usage – technical information such as your IP address, browser type and the pages you visit, collected through cookies and similar technologies (see below).
How we use your information
- To take, manage and confirm your bookings and gift card purchases, and to send you reminders or let you know about changes or cancellations (to perform our contract with you).
- To take payment and process refunds (contract and legal obligation).
- To answer your questions and provide customer service (legitimate interests).
- To keep you safe on site and meet our health and safety obligations (legal obligation, and your consent for any health information).
- To keep accounting and tax records (legal obligation).
- To send you news and offers, but only if you have opted in. You can unsubscribe at any time using the link in our emails or by contacting us (consent).
- To run, secure and improve our website (legitimate interests).
Who we share it with
We never sell your personal information. We only share it with trusted service providers who help us run the business, and only as far as they need it:
- Our online booking system provider, which stores booking and gift card records on our behalf.
- Stripe, which processes card payments.
- Our website hosting and email delivery providers.
- WhatsApp (Meta), if you choose to contact us using the WhatsApp button.
- Our accountant, and authorities such as HMRC where the law requires it.
Some of these providers may process data outside the UK. Where they do, they use appropriate safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or standard contractual clauses.
Cookies and third-party content
Our website uses cookies that are needed for it to work, such as keeping your booking details while you complete a booking. Some pages also show content from other services, including Google reviews and our Instagram feed. These services may set their own cookies and collect information about your visit, under their own privacy policies. You can block or delete cookies in your browser settings, but parts of the website, including booking, may not work properly if you do.
How long we keep it
We keep booking and payment records for six years to meet accounting and tax rules. General enquiries are kept for up to two years. Health information you share with us is kept only as long as needed for your visit, and no longer than 12 months. Marketing details are kept until you unsubscribe.
Keeping your information safe
We use secure, reputable systems and limit access to your information to people who need it to run the business.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that is wrong or incomplete;
- ask us to delete your information, where we no longer need to keep it;
- object to, or ask us to restrict, how we use your information;
- ask us to transfer your information to another organisation;
- withdraw your consent at any time, where we rely on it.
To use any of these rights, email us at info@papermillsaunas.co.uk. We will reply within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.