Privacy Policy

Go back to home page

Last updated: 02/02/2026

This Privacy Policy explains how Mare Heat Saunas LTD collects, uses and protects your personal data when you visit our website mareheatsaunas.co.uk and use our services, including booking and using our mobile sauna.

We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Mare Heat Saunas LTD
94 Shore Road, Innellan
PA237SP Argyll Scotland
Company registration number: SC874506
Telephone: 07812664415
Email: mareheatsaunas2025@gmail.com

If you have any questions about this Privacy Policy or our data protection practices, please contact us at mareheatsaunas2025@gmail.com

2. Personal Data We Collect

We may collect the following categories of personal data when you use our website or services:

2.1 Data you provide directly

  • Contact and identification details: name, email address, phone number, address (for mobile sauna location / invoice), company name (if applicable).
  • Booking and order details: date and time of booking, service type, number of guests, special requests, billing details.
  • Payment information: We use Bacs and Paypal] to process payments. We do not store full card details; these are handled securely by our payment provider.
  • Communication data: content of emails, messages sent via contact forms, chat, or social media.


2.2 Data collected automatically

When you visit our website, we automatically collect:

  • Technical data: IP address, browser type and version, device type, operating system, language settings.
  • Usage data: pages visited, date and time of access, time spent on pages, referring website/URL, click paths.


This data is collected using cookies and similar technologies. See “Cookies” below for more information.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases under GDPR:

  • To provide and manage our services
    • Managing bookings, processing payments, communicating about your booking, and delivering our mobile sauna services.
    • Legal basis: Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract.
  • Customer support and communication
    • Responding to your inquiries, messages, and feedback.
    • Legal basis: Art. 6(1)(b) GDPR – performance of a contract; and/or Art. 6(1)(f) GDPR – legitimate interest in providing customer service.
  • Marketing and newsletters (if applicable)
    • Sending you news, special offers, and information about our services, if you have subscribed or otherwise consented.
    • Legal basis: Art. 6(1)(a) GDPR – your consent.
      You can withdraw your consent at any time (see “Your Rights” below).
  • Website operation, security and improvement
    • Operating our website, preventing misuse, ensuring IT security, and analyzing usage to improve our services and user experience.
    • Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in running a secure and user-friendly website and improving our services.
  • Legal obligations and claims
    • Complying with legal obligations (e.g., tax and accounting rules) and establishing, exercising, or defending legal claims.
    • Legal basis: Art. 6(1)(c) GDPR – legal obligation; Art. 6(1)(f) GDPR – legitimate interest in asserting or defending legal claims.
  • Cookies and Similar Technologies


We use cookies and similar technologies on our website.

4.1 What are cookies?

Cookies are small text files stored on your device by your browser. They help our website remember your actions and preferences over a period of time.

4.2 Types of cookies we use

  • Strictly necessary cookies: required for basic site functionality (e.g., to remember your cookie preferences, enable booking forms).
  • Functional cookies: help us remember your settings (e.g., language preferences).
  • Analytics cookies: help us understand how visitors use the site (e.g., via [Google Analytics / Matomo / other]); data is generally aggregated.
  • Marketing cookies (if used): used to track visitors across websites and display relevant advertising.


4.3 Legal basis for cookies

  • Strictly necessary cookies are processed based on our legitimate interest (Art. 6(1)(f) GDPR).
  • Non-essential cookies (e.g., analytics, marketing) are used only with your consent (Art. 6(1)(a) GDPR), which you provide via our cookie banner and can withdraw at any time.


4.4 Managing cookies

You can manage or delete cookies through your browser settings. If you disable some cookies, parts of our website may not function properly.

5. How We Share Your Data

We share your personal data only when necessary and with appropriate safeguards:

  1. Service providers (processors)
    We may engage third-party providers who process data on our behalf, such as:
    • Web hosting and IT service providers
    • Payment processors (e.g., [Stripe/PayPal/Local Provider])
    • Email and newsletter service providers (e.g., [Mailchimp/Sendinblue])
    • Analytics providers (e.g., [Google Analytics])


These providers are bound by data processing agreements and may not use your data for their own purposes.

  1. Authorities and legal obligations
    We may disclose data to law enforcement, regulators, or other authorities if required by law or to protect our rights, property, or safety.
  2. Business transfers
    In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner, subject to the same privacy obligations.

We do not sell your personal data.

6. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as:

  • An adequacy decision by the European Commission; or
  • Standard Contractual Clauses (SCCs) approved by the European Commission; or
  • Other appropriate safeguards under GDPR.


You can request more information and copies of relevant safeguards by contacting us at [Privacy Email].

7. Data Retention

We store your personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law.

In general:

  • Booking and contract data: retained for the duration of the contractual relationship and then for 5 years thereafter to comply with legal obligations (e.g., tax, accounting) and for potential legal claims.
  • Communication data: retained as long as necessary to process your request and for 24months  afterward, depending on the context.
  • Marketing data (newsletter subscription): retained until you withdraw your consent or unsubscribe.
  • Analytics data: retained in aggregate or pseudonymized form where possible and for 24 months as configured in our analytics tools.


When data is no longer needed, it will be deleted or anonymized.

8. Your Rights under GDPR

You have the following rights regarding your personal data:

  1. Right of access (Art. 15 GDPR)
    You can request confirmation whether we process your personal data and obtain a copy of that data.
  2. Right to rectification (Art. 16 GDPR)
    You can request correction of inaccurate or incomplete personal data.
  3. Right to erasure (Art. 17 GDPR)
    You can request deletion of your personal data under certain conditions, for example, if it is no longer necessary for the purposes for which it was collected.
  4. Right to restriction of processing (Art. 18 GDPR)
    You can request that we restrict processing of your personal data in certain cases (e.g., while verifying accuracy or handling an objection).
  5. Right to data portability (Art. 20 GDPR)
    You can request to receive the data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
  6. Right to object (Art. 21 GDPR)
    • You can object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests.
    • You also have the right to object at any time to processing for direct marketing purposes (including profiling related to direct marketing).
  7. Right to withdraw consent (Art. 7(3) GDPR)
    Where processing is based on your consent, you may withdraw this consent at any time with effect for the future, without affecting the lawfulness of processing based on consent before its withdrawal.
  8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
    You may lodge a complaint with your local data protection authority if you believe that the processing of your personal data violates data protection laws.


To exercise your rights, please contact us at:
mareheatsaunas2025@gmail.com
94 Shore Road, Innellan
PA237SP Argyll Scotland

We may need to verify your identity before fulfilling your request.

9. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include, for example:

  • Use of secure (HTTPS) connections
  • Access controls and authentication
  • Regular updates and security patches
  • Data minimization and limited access to personal data

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Children’s Data

Our website and services are not directed at children under the age of 16, and we do not knowingly collect personal data from children under 16. If you believe that a child has provided us with personal data, please contact us so that we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. The updated version will be published on our website with a new “Last updated” date.

We encourage you to review this page regularly to stay informed about how we process your personal data.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Mare Heat Saunas LTD
Attention: Data Protection / Privacy
94 Shore Road, Innellan
PA237SP Argyll Scotland
Email: mareheatsaunas2025
Telephone: 07812664415