Privacy Policy

Summary of Key Points

This summary highlights key points from our Privacy Notice. Use the table of contents to jump to any section for full details.

• Personal information processed depends on how you interact with us and the Services, and what you choose to share. See What Information Do We Collect?
• We do not process sensitive personal information. We do not collect information from third parties.
• We process data to provide and improve Services, communicate, protect security, and comply with law. See How Do We Process Your Information?
• We share data only in defined situations with specific parties. See When And With Whom Do We Share?
• We use reasonable safeguards, but no system is 100% secure. See How Do We Keep Your Information Safe?
• Your rights vary by region; you may access, correct, or delete data. See What Are Your Privacy Rights?
• To exercise rights, submit a request or contact us. See How Can You Review, Update, Or Delete Your Data?

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information you provide when you request information, participate in activities, or contact us.

The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Billing addresses

Sensitive Information: We do not process sensitive information.

Payment Data: We may collect payment details to process purchases. Payment data is handled by Stripe. See Stripe's Privacy Notice.

All personal information you provide must be true, complete, and accurate, and you must notify us of changes.

Information automatically collected

We collect device and usage information (e.g., IP address, browser, device, location, language, referring URLs, usage times). This supports security, operations, and analytics. We also use cookies and similar technologies.

Log and usage data may include:

• IP address, device info, browser type and settings
• Activity timestamps, pages/files viewed, searches, feature use
• Device events (system activity, error reports, hardware settings)

Google API: Our use of information received from Google APIs adheres to the Google API Services User Data Policy (including Limited Use).

2. How Do We Process Your Information?

We process information to provide, improve, and administer Services; communicate; protect security; and comply with law. We may also process for other purposes with your consent.

• Request feedback and contact you about your use of Services.
• Send marketing and promotional communications (per your preferences).
• Deliver targeted advertising tailored to your interests and location.
• Protect Services, including fraud monitoring and prevention.
• Identify usage trends to improve Services.
• Measure effectiveness of marketing and promotional campaigns.
• Protect vital interests, including preventing harm.

3. What Legal Bases Do We Rely On?

Under GDPR/UK GDPR, we process personal information only when we have a valid legal basis:

• Consent (you can withdraw at any time).
• Legitimate interests (balanced against your rights and freedoms).
• Legal obligations (e.g., regulatory or law enforcement requirements).
• Vital interests (protecting life or safety).

4. When And With Whom Do We Share?

We share data only in specific situations with defined parties and contracts to protect your information.

Third parties we may share with:

• Communicate and chat with users: Zoho Mail, Cal.com, WhatsApp
• Invoice and billing: Stripe
• Web and mobile analytics: Vercel
• Website hosting: Vercel
• Website performance monitoring: Vercel
• Website testing: Vercel

Additional situations: business transfers; use of Google Maps Platform APIs; affiliates; business partners.

5. Do We Use Cookies And Tracking Technologies?

We may use cookies and similar technologies (e.g., web beacons, pixels) for security, preferences, functionality, analytics, and advertising (including tailored ads and reminders). See our Cookie Notice for details and controls.

6. How Long Do We Keep Your Information?

We retain personal information only as long as necessary for the purposes outlined, unless a longer period is required by law. When no longer needed, we delete or anonymise data, or securely store and isolate it until deletion is possible.

7. How Do We Keep Your Information Safe?

We use reasonable technical and organisational measures to protect personal information. No system is 100% secure; transmission is at your own risk. Access Services within a secure environment.

8. What Are Your Privacy Rights?

Depending on your region (e.g., EEA, UK, Switzerland), you may have rights to access, correct, delete, restrict processing, portability, or object. You can also withdraw consent where applicable and opt out of marketing communications.

If you believe we process data unlawfully, you may complain to your local data protection authority.

9. Controls For Do-Not-Track Features

There is no uniform standard for DNT signals, so we do not currently respond to them. If a standard emerges, we will follow it and update this notice.

10. Do We Make Updates To This Notice?

Yes. We update this notice as needed to stay compliant. The revised date will be updated. Material changes may be communicated via notice or direct notification.

11. How Can You Contact Us?

Email: privacy@belfastheadspa.co.uk

Address: Belfast Head Spa, Kings House, 39–41 High Street, Holywood BT18 9AB, UK

12. How Can You Review, Update, Or Delete Your Data?

Depending on your location, you may request access to the personal information we hold, details on processing, corrections, or deletion. You may also withdraw consent where applicable. These rights may be limited by law in some circumstances.