Privacy Policy
Last updated: 12 October 2026
Who we are
Suvi Sauna Ltd runs saunas at Clevedon Marine Lake and The Pickle Factory in Easton, Bristol, and brings mobile saunas to festivals and events around the UK. We are the "controller" of your personal information, which means we decide how it is used.
Suvi Sauna Ltd, company number 16061633. Registered office: Brookfield Court, Selby Road, Garforth, Leeds LS25 1NB. Email: hello@suvisauna.co.uk. ICO registration number: ZC047465.
What information we collect
- Contact details: name, email address, phone number, billing address.
- Booking information: sessions, locations, dates, group size, gift purchases, memberships.
- Payment information: processed by Stripe and Square for online bookings, and SumUp for payments in person. We do not see or store your full card number.
- Messages: emails, phone calls and social media messages you send us.
- Health and safety information: your confirmation that you meet the health requirements in our booking waiver, anything else you tell us about your health (for example pregnancy or a heart condition), records of any accident or incident, and waiver records (your acceptance of our booking terms when booking, and any additional waiver a parent or guardian signs for an under-16).
- Website data: cookies and similar technologies, only where you allow them (see Cookies).
We collect this through our booking system, email, phone, social media and in person at our sites and events, including any under-16 waiver signed on arrival.
How we use it and our legal basis
| What we do | Legal basis |
|---|---|
| Take and manage bookings, memberships and gift purchases | Performing our contract with you |
| Send confirmations, changes, cancellations and safety information | Performing our contract with you |
| Take payments and give refunds | Performing our contract with you |
| Answer questions and provide customer service | Legitimate interests: responding to people who contact us |
| Use AI tools to help us draft replies to your emails (a member of our team always checks and sends each reply) | Legitimate interests: answering enquiries quickly and consistently |
| Share information with venue partners or event organisers after an incident or safeguarding concern | Legitimate interests; vital interests in an emergency |
| Keep accounting and tax records | Legal obligation |
| Send marketing emails about our own sessions, events and offers | Legitimate interests, under the "soft opt-in" rules for existing customers, or your consent |
| If you book after clicking one of our ads on Facebook or Instagram, we tell Meta that the click led to a booking (the booking value and time, the ad click ID, and your email address and phone number in hashed, scrambled form) so Meta can measure and improve our ads. We only do this for bookings that came from a Meta ad, not for other customers, and we don't use it to build advertising audiences. | Legitimate interests: measuring whether our advertising works. You can object at any time (see below). |
| Website analytics and advertising cookies | Your consent |
We do not make decisions about you using solely automated means.
How we use AI
We use Claude, an AI assistant made by Anthropic, to help draft replies to customer emails and to help with other business tasks, which can involve customer information such as names, contact details and booking details. We do not use customer information to train AI models. Our staff review AI-drafted messages before they are sent. If you'd prefer we handle your emails without AI, just tell us.
Health information
Our booking waiver asks you to confirm that you don't have health conditions that make sauna use unsafe. If someone else booked for you, they accept our booking terms on your behalf, and our health notice is displayed at the sauna. We keep a record of your acceptance, so we can keep people safe and, if needed, deal with legal claims. If you tell us about your health in other ways, we use it only for your safety during visits. In an emergency we may call for medical help and share relevant details with emergency services to protect your life or health.
Children
Children aged 8 and over are welcome, and under-16s must be accompanied by an adult at all times. We collect children's details only from the adult making the booking, and a parent or guardian signs an additional waiver on arrival for under-16s.
Marketing
If you book with us, we may send you occasional emails about Suvi Sauna's own sessions, events, new locations and offers. You can say no when you book, unsubscribe using the link in any email, or contact us. If you unsubscribe, we keep your email address on a suppression list so we don't email you again. You will still receive essential emails about your bookings.
Advertising audiences: We may securely share your email address and/or phone number with Facebook/Meta, in hashed (encrypted) form, to create or exclude you from advertising audiences.
Ad measurement and how to opt out
When someone books after clicking one of our Facebook or Instagram ads, we send Meta a short confirmation of that booking from our booking system, not from your browser, so no cookies are involved. It contains the booking value and time, the ad click ID, and your email address and phone number in hashed form. Meta receives this as an independent controller under its own terms and privacy policy. If you don't want us to do this, email hello@suvisauna.co.uk with "Meta opt-out" in the subject and we'll stop sending your bookings to Meta.
Who we share it with
We do not sell your personal information. We use trusted service providers who process it on our behalf and under contract:
- Session (bookasession.org): bookings, memberships and booking-form answers for all of our sauna locations.
- Stripe, Square and SumUp: card payments.
- Google (Gmail / Google Workspace): email.
- Anthropic (Claude): AI assistance with drafting email replies and with other business tasks such as preparing reports and analysing booking and customer information.
- Session (bookasession.org): bookings, memberships, booking-form answers and email campaigns for all of our sauna locations.
- Meta: advertising measurement. Meta pixel cookies are only used if you accept them; if you book after clicking a Meta ad we also send Meta a limited booking confirmation (see above).
- Make (make.com): automation of booking, email and marketing workflows. It processes booking and contact details on our behalf.
We may also share relevant information with venue partners (such as Clevedon Marine Lake or The Pickle Factory), event organisers, emergency services or authorities where necessary after an injury, a safety or safeguarding concern, or where the law requires it. We share only what is necessary.
International transfers
Some of our providers, including Anthropic, Google, Meta and Make (make.com), process data outside the UK, including in the United States. Where this happens, the transfer is protected by the UK's approved safeguards, such as the UK International Data Transfer Addendum or the UK–US Data Bridge.
How long we keep it
| Information | How long |
|---|---|
| Booking and payment records | 6 years after the booking (tax and accounting law) |
| Emails and enquiries not linked to a booking | Up to 5 years after our last contact |
| Waiver records and health information you share | Waivers: 6 years after your visit; if linked to an incident, until any claim is settled and at least until a child involved turns 21. Other health information: 12 months after your last visit |
| Accident and incident records | 6 years, or until any claim is settled and a child involved turns 21, whichever is later |
| Marketing list | Until you unsubscribe; then your email stays on our suppression list |
| AI tools (Claude) | Held in our Claude account until we delete it. Our own copies of the underlying records follow the periods above. |
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it;
- object to how we use it where we rely on legitimate interests, and to direct marketing at any time;
- ask for your data in a portable format;
- withdraw consent at any time where we rely on it.
Email hello@suvisauna.co.uk. We will respond within one month.
Cookies
Our website uses cookies. Analytics and advertising cookies, including the Meta pixel, are only set if you accept them in our cookie banner. You can change your choice at any time. Our booking confirmations to Meta described above are sent server-side and do not use cookies on your device.
Complaints
If you are unhappy with how we have handled your information, please email hello@suvisauna.co.uk with "Data complaint" in the subject. We will acknowledge your complaint within 30 days and tell you what we are doing about it.
You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this policy when our practices change and show the date at the top.