Who we are
Our website address is: http://glowroom.uk. Glowroom Wellness & Spa is committed to protecting the privacy of our clients and website visitors.
Comments
Keep the existing text (about collecting data for spam detection and Gravatar) BUT add a note to inform users: Note: Our primary interaction is through service bookings, not public comments. We encourage clients to use direct contact methods or verified review platforms for feedback.
Media
Keep the existing text (avoiding EXIF GPS data).
Cookies
Keep the existing text (for comments and logins) AND add: Necessary Cookies for Services: We use essential cookies to manage your booking session, retain appointment details during the process, and recognize your membership status upon logging in.
Embedded content from other websites
Keep the existing text (videos, images, etc.).
Who we share your data with
We share data only as necessary to conduct our services, including: 1. Payment Processing: With third-party processors (e.g., Stripe, PayPal) to complete transactions securely. 2. Booking Software: With our third-party scheduling software provider (e.g., Mindbody, Vagaro) to manage appointments and membership details. 3. Legal Obligation: If required by law, such as if you request a password reset, your IP address will be included in the reset email.
How long we retain your data
For clients who book a service or are part of our Lifestyle Program, we retain your personal and service history data for a period necessary to comply with legal, accounting, and reporting requirements (e.g., 6 years for financial records) or until you request its erasure. Keep the existing text for comments and registered users.
What rights you have over your data
Keep the existing text (requesting export/erasure) BUT add clarity for service data: If you have an account or have booked services with us, you can request an exported file of the personal data we hold about you. You can also request the erasure of any personal data. This right is subject to our legal obligation to retain certain client service records and transaction data for administrative and regulatory purposes
Where your data is sent
Visitor comments may be checked through an automated spam detection service. Client service data is securely stored and processed within the European Economic Area (EEA) via our chosen booking management platform.