We collect only what we need to run your sauna session, we never sell it, and we don't send marketing emails. This page explains what we hold, why, and the rights you have over it.
Who we are
Cool Coo Sauna is run by Nicky Donnelly, a sole trader, who is the data controller for the personal data described here.
- Address: Mill Cottage, Glenmallie Road, Lochyside, Caol, PH33 7BA
- Email: nickynoodonnelly@gmail.com
- Phone: +447884402926
What we collect
- Booking details: your name, email address, phone number (optional), chosen package, date, time and number of guests.
- Special requests: anything you type in the special requests box. Please only share what we need to look after you on the day.
- Payment details: card payments are handled by Stripe. We never see or store your full card number.
- Technical data: your IP address and browser details are processed by our hosting provider, and by Google if you choose to load the map.
Why we use it and our lawful basis
- To take and manage your booking, send your confirmation and contact you about your session: necessary for our contract with you (UK GDPR Art. 6(1)(b)).
- To keep financial and tax records: legal obligation (Art. 6(1)(c)).
- To prevent payment fraud through Stripe: our legitimate interest in secure payments (Art. 6(1)(f)).
- To show the Google Map: your consent, which you can withdraw at any time from Cookie settings.
If your special requests include health or accessibility information, we use it only to accommodate you during your visit, with your explicit consent in providing it, and we delete it once your session has passed.
Who we share it with
We use trusted service providers who process data on our behalf and under contract:
- Google Firebase (booking database)
- Stripe (payments)
- Resend (booking confirmation emails)
- Our website hosting provider
- Google Maps (only if you accept cookies)
We never sell your data or share it for advertising.
International transfers
Some of these providers store or process data in the United States. Transfers are protected by the UK–US Data Bridge or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Booking and payment records: 6 years, as required for HMRC tax records.
- Special requests: deleted after your session.
- Cancelled bookings may be deleted sooner.
Your rights
Under UK GDPR (and the EU GDPR, if you live in the EU) you have the right to:
- access a copy of your data
- have inaccurate data corrected
- have your data erased
- restrict or object to how we use it
- receive your data in a portable format
- withdraw consent at any time, where we rely on it
Email nickynoodonnelly@gmail.comto use any of these rights. We'll respond within one month. There is no automated decision-making or profiling on this site.
Cookies
See our Cookie Policy for what is stored on your device and how to change your choice.
Complaints
If you're unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes
If we change this policy we'll update the date at the top of this page.