At Escape Spa, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your information when you make a booking, visit the spa or receive a treatment from us.
Information We Collect
When you make a booking or visit Escape Spa, we may collect personal information such as your name, contact details, booking information, treatment history, preferences and payment-related information.
Before treatments, we may also ask you to complete a consultation form containing information relevant to your health and wellbeing, such as allergies, medical conditions, pregnancy, injuries or medications. We only request information that is relevant to providing your treatment safely and appropriately.
How We Use Your Information
We use your personal information to manage your booking, communicate with you regarding your visit, provide and personalise your treatment, process payments, maintain appropriate treatment records and ensure the health and safety of our guests. We will only use your personal information where we have a lawful basis to do so under applicable data protection legislation.
Health & Treatment Information
Information relating to your health is considered special category personal data under the General Data Protection Regulation (GDPR) and is treated with additional care and confidentiality. Where required, we will obtain your explicit consent to process health information provided as part of your spa consultation. This information will only be accessed by authorised team members who require it to assess the suitability and safe delivery of your treatment.
Confidentiality During Your Treatment
Your privacy and dignity are important to us. Information discussed with your therapist during a consultation or treatment will be treated confidentially and will only be shared where necessary for the safe provision of our services or where we are required to do so by law. Our therapists will also take appropriate steps to respect your physical privacy and comfort throughout your treatment.
How We Store & Protect Your Information
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure. Access to guest consultation and treatment information is limited to authorised personnel who require the information as part of their role.
How Long We Keep Your Information
We retain personal information only for as long as necessary for the purpose for which it was collected and to meet our legal, regulatory and legitimate business requirements. Our retention periods are regularly reviewed, and personal information will be securely deleted or anonymised when it is no longer required.
Sharing Your Information
We do not sell, rent or share any of your personal information with any other party including any third-party joint promoters, nor use it for unapproved commercial purposes.
Marketing Communications
We will only send marketing communications where we have an appropriate lawful basis to do so. Where marketing is based on your consent, you can withdraw that consent at any time.
Your Data Protection Rights
Under GDPR, you may have the right to access the personal information we hold about you, request that inaccurate information is corrected, request deletion or restriction of your information in certain circumstances, object to certain processing, request data portability and withdraw your consent where processing is based on consent.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your information is handled, please contact us using the privacy contact details provided by the Imperial Hotel / Escape Spa.
This Privacy Policy should be read alongside any wider Privacy Policy applicable to the Imperial Hotel and its associated services.