Privacy policy
Sauna Shop Ltd ("we") is the data controller for personal data collected through saunashopltd.co.uk. This policy explains what we collect, why, and your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
What we collect
- Order data: name, billing and delivery address, email, phone, items ordered, payment confirmation (card details are handled by our payment provider; we never see or store full card numbers).
- Enquiries: what you send us by email, contact form, live chat or WhatsApp.
- Website use: IP address, browser, pages viewed and basket contents, via cookies described in the cookie policy.
Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking payment, delivering goods, handling returns and warranty claims | Performance of a contract |
| Keeping accounting and tax records (6 years) | Legal obligation |
| Answering enquiries, preventing fraud, improving the site | Legitimate interests |
| Marketing emails about products and offers | Consent, which you can withdraw at any time via the unsubscribe link |
Who we share it with
Only the services needed to run the shop: our payment provider (to be confirmed), delivery couriers (name, address, phone for the delivery), our email and live-chat providers, our accountants, and manufacturers when a warranty claim needs their involvement. Where a provider processes data outside the UK we rely on UK adequacy regulations or the International Data Transfer Agreement. We never sell personal data.
How long we keep it
Order records for 6 years after the order (tax law). Enquiries for 2 years. Marketing consent until you withdraw it. Website analytics for up to 26 months.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, restrict or object to processing, and ask for a portable copy. Email sales@saunashopltd.co.uk and we respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
Security
The site is served over HTTPS, payments are handled by PCI-DSS compliant providers and access to order data is limited to staff who need it.
Children
Our products are sold to adults; we do not knowingly collect data from under-18s.
Contact
Sauna Shop Ltd, [Registered office address — to be supplied by Sauna Shop Ltd]. Email sales@saunashopltd.co.uk, phone [Phone number — to be supplied], WhatsApp [WhatsApp number — to be supplied]. Company number [Company number].