Privacy Policy
Your Privacy Is Important To Us
At The Bath House, we recognise that it is important to protect your privacy.
This privacy policy explains how and why we use any personal information.
By using our website you consent to the collection and use of your information in accordance with this policy. The processing of personal information is regulated in the UK by the EU General Data Protection Regulation which has replaced the Data Protection Act 1998.
This privacy notice aims to be completely transparent about how we handle and use your personal information. If you have any questions or suggestions, please contact us, using the contact details at the bottom of this page.
-
This section tells you what personal data we may collect from you:
When you register or place orders through our website we collect:
Any personal information needed to process your order.
This can include your name, billing/delivery address, email address, phone number, and any further information you wish to supply.
Your payment details. While we do not hold any card/bank details we may take this info temporarily over the phone if processing your order manually.
Technical information including but not limited to, user device type (desktop/tablet/phone), web browser type, location, IP address.
Personal data you provide about yourself anytime you contact us about our services (for example, your name, username and contact details), including by phone, email or post or when you speak with us via social media. When you visit our website, we may collect data including, but not limited to, traffic data, location data, weblogs, page functionality tracking and other communication data.
When you enter a competition, we may collect limited personal details in order to process your entry.
Information collected using cookies stored on your device(s) about the use of our online services.
Your feedback and contributions to customer surveys, reviews and questionnaires.
-
Use of personal information under UK data protection laws must be justified under one of a number of legal grounds and we are required to set out the grounds in respect of each use in this policy. An explanation of the scope of the grounds available can be found on this page.
The main uses of your information include:
Customer Support and Marketing - to respond to enquiries and to bring you news, offers and events.
We use your personal data for customer care and for personalised communication of our product and service information, with your consent where necessary. For these purposes we may transmit this data to authorised third parties.
In order to ensure that you receive relevant and personalised communications, we will use data we hold about you to create an individual customer profile. This may include but is not limited to data you have provided to us or which is generated by your use of our products.
Legal requests for your information – to comply with our legal obligations, including requests from law enforcement, regulators and the court service.
We may be legally required to provide your information to law enforcement agencies, regulators, courts and third party litigants in connection with proceedings or investigations anywhere in the world. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.
-
Personal information which we collect may be transferred to or accessed by third parties on our behalf, with your consent where necessary.
The types of third parties include:
Marketing and research companies who run and manage marketing and research campaigns. Companies who assist us with the provision of customer services support. IT providers who provide us systems and services for customer support. Companies who provide document archiving services.
When data is shared it is always done in a secure manner and we ensure that it is only used for the purpose it was collected for and do not allow third parties to abuse their agreements with us.
We may transfer your personal information to a third party without your consent if there is an alternative legal ground, for example, it is in our legitimate interest, or if there is a contractual obligation to do so.
-
Your personally identifiable information is kept secure in electronic format.
We keep your information only as long as is necessary for the purpose for which we obtained it and any other permitted linked purposes. If information is used for two purposes we will retain it until the purpose with the longest period expires. We will stop using it for the purpose with a shorter period once that period expires. We will then dispose your information by permanently deleting from our files.
We restrict access to your information to only those persons who need to use it for the relevant purpose.
We will always take appropriate technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We ensure your data is encrypted and secure.
We ensure those third parties who process your data operate under a Data Sharing Agreement.
-
We hold all customer data in a secure location for as long as necessary.
-
Right to be informed: We will always be transparent in the way we use your personal data. You will be fully informed about the processing through relevant privacy notices.
Right to access: You have a right to request access to the personal data that we hold about you and this should be provided to you, under the Data Protection Act 1998, within 40 days. We will need to take an administration fee of £10 to process your request. If you would like a copy of your personal data, please contact us via the Contact us section.
Right to rectification: We want to make sure that the personal data we hold about you is accurate and up to date. If any of your details are incorrect, please let us know and we will amend them.
Right to erasure: You have the right to have your data ‘erased’ in the following situations:
Where your personal data is no longer necessary in relation to the purpose for which it was originally collected or processed.
If you withdraw consent
If you object to the processing (and there is no overriding legitimate interest for continuing the processing)
In the event your personal data was unlawfully collected and used
If your personal data has to be erased in order to comply with any legal obligation
If you would like to request erasure of your personal data, please contact us via the contact us section.
Please note: Each request will be reviewed on a case by case basis and, where we have a lawful reason to retain said data, we may opt to hold that information. Also, any deletion of data could delay any claims processing, if all details relating to said order are removed on request.
Get the help you need.
For more straightforward questions, send us an email and we’ll quickly reply.