By using our website or booking a session, you agree to this policy.
1. Who we are
Orchard Sauna
Castleblayney, Co. Monaghan, Ireland
Email: info@orchardsauna.com
For data protection law, Orchard Sauna is the “data controller” for the personal data we collect about you.
2. What this policy covers
This policy applies when you visit our website, make a booking or buy a package or gift voucher, contact us by email, phone, social media or contact form, or visit Orchard Sauna for a session.
It does not cover third-party websites or services we link to, such as booking or payment providers. They have their own privacy policies.
3. What personal data we collect
We only collect what we need to run the business and provide our services.
Identity and contact details
- Name
- Email address
- Phone number, if provided
Booking and purchase information
- Session date and time
- Booking history
- Package and voucher purchases
- Basic notes related to your booking
Payment information
We receive payment confirmations and transaction IDs from our payment provider. We do not store or see your full card details; these go directly to the payment provider.
Health information
Any health information you choose to share with us, such as a heart condition, pregnancy or blood-pressure issue, helps us judge if the session is suitable or needs adjustment. We only ask when relevant to your safe use of the sauna and ice bath.
Communication, feedback and technical data
We may collect messages, feedback or complaints, IP address, device and browser type, pages visited and time spent on the site. Technical data may be collected through cookies or similar tools depending on how the site is set up.
4. How we collect your data
We collect personal data directly from you when you book online, buy a package or voucher, fill in a form or contact us; from our booking system and payment provider; and automatically when you use our website through cookies and similar technologies, if enabled.
5. Why we use your data and legal bases
Under GDPR we must have a legal basis to use your data.
Bookings and services
We process bookings and payments, send confirmations and updates, and manage packages and vouchers under performance of a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)).
Safety
We may use information to understand whether heat and cold exposure is suitable, record relevant health notes you choose to share and respond to incidents. Legal bases are our legitimate interests in health and safety (Art. 6(1)(f)) and your explicit consent for special-category health data (Art. 9(2)(a)). You may withdraw consent, though this may affect whether we can safely provide services.
Communication and marketing
We respond to questions and send important service messages under contract and legitimate interests. We send direct marketing only with consent (Art. 6(1)(a)); you can unsubscribe at any time.
Website and legal obligations
We may monitor performance, prevent abuse and understand usage under legitimate interests for necessary technical data and consent for non-essential cookies. We also keep records required under Irish tax and company law (Art. 6(1)(c)).
6. Special category data
Health information is special-category data under GDPR. We process it only when you give it to us, it is needed to help keep you safe, and you explicitly consent. You may ask us not to record health details, though we may be unable to provide services if we believe it would be unsafe. We do not use health data for marketing.
7. Cookies and website tracking
Our website may use cookies or similar technologies to make the site work, remember preferences and collect basic usage statistics. If we use non-essential or analytics cookies, we will tell you and ask for consent where required. Blocking cookies in your browser may affect parts of the site.
8. Who we share your data with
We do not sell your personal data. We may share it with trusted providers who help run bookings, payments, hosting, IT, email and communications; with professional advisers where needed; and with public authorities when legally required. These parties generally act as processors and may use data only as instructed.
9. International transfers
Some providers may be outside the EEA. We will ensure the country has an EU adequacy decision, or that standard contractual clauses or other approved safeguards are in place. Contact us for more information.
10. How long we keep your data
We keep data only as long as needed for the purposes described and to meet legal and tax requirements. Booking and payment records are usually kept up to seven years. Health information is kept only as long as needed for safety and legal purposes. Contact messages are kept while we handle the request and for a reasonable follow-up period. Mailing-list data is kept until you unsubscribe or the list is no longer used. Anonymised information may be retained for statistics or planning.
11. Your data protection rights
Under GDPR you may ask to access, correct or erase your data; restrict or object to processing; receive portable data in certain cases; and withdraw consent. Legal retention duties may limit deletion. You can always object to direct marketing.
To exercise these rights, email info@orchardsauna.com. We may need to verify your identity.
12. Complaints
If you are unhappy with how we use your data, please contact us first. You may also complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, at dataprotection.ie.
13. Security
We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration and destruction. No system is 100% secure, but we limit access and reduce risk as far as reasonably possible.
14. Changes to this policy
We may update this Privacy Policy. The latest version will remain on our website with its last-updated date. For major changes, we may also notify you by email or through the website.