Privacy Policy

Last updated: 15 May 2026. This Privacy Policy explains how SaunaCentral.co.uk (“we”, “us”, “our”) collects and uses personal data when you use this website. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

The data controller for personal data collected through this website is SaunaCentral, contactable at /contact/. If you have a question about how your data is used, please write to us at that address.

What data we collect

We collect personal data in the following limited circumstances:

  • When you enquire about a builder. The enquiry form on each builder profile collects your name, email address, optional phone number, and the message you write. This is sent to the builder you’ve chosen, with our admin email copied in for support purposes.
  • When you contact us. The form on our Contact page collects your name, email address, and message, and routes it to our editorial team.
  • When you subscribe to our mailing list (when launched). We collect your email address and, optionally, your first name. You can unsubscribe at any time using the link in every email.
  • Analytics and visit data. We use Google Analytics 4 (via Google Tag Manager) to understand how visitors use the site. Analytics data is pseudonymised and aggregated. IP addresses are anonymised in transit. We do not use analytics data to identify individual visitors.
  • Cookies and similar technologies. See the Cookies section below.

Legal basis for processing

Under UK GDPR we rely on the following lawful bases:

  • Legitimate interests — for routing builder enquiries to the chosen builder, for responding to contact-form messages, and for measuring how the site is used at an aggregated level.
  • Consent — for non-essential cookies (analytics, advertising) and for mailing-list signups.
  • Legal obligation — where we are required by law to retain certain records.

How long we keep your data

  • Builder enquiries: we retain a copy of the email in our outbound mail log for 24 months for support purposes, then delete it. The builder you’ve enquired with has their own retention practices, which they will publish on their own site.
  • Contact form messages: retained for 24 months unless you ask us to delete them sooner.
  • Mailing list: retained until you unsubscribe.
  • Analytics: Google Analytics 4 default retention (14 months) applies. We do not store any personally identifying analytics data ourselves.

Who we share your data with

We do not sell your personal data. We share it only with:

  • The builder you’ve enquired with. Builder enquiries are routed by email to the chosen builder. Once your enquiry is delivered, that builder is an independent data controller for the data you’ve shared with them.
  • Our service providers. Hosting (Kinsta), analytics (Google), and email delivery — each acting as a data processor on our behalf under appropriate data processing agreements.
  • Authorities, only where we are legally required to disclose information.

International transfers

Some of our service providers (notably Google for analytics) may transfer data outside the UK. Where they do, we rely on the UK Government’s adequacy regulations or, where those do not apply, standard contractual clauses approved by the ICO.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you;
  • Have inaccurate data corrected;
  • Request that we erase your data (the “right to be forgotten”);
  • Restrict or object to our processing of your data;
  • Receive a copy of your data in a portable format;
  • Withdraw consent at any time where we rely on consent as the lawful basis;
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us. We will respond within 30 days.

Cookies

This site uses the following categories of cookies:

  • Strictly necessary cookies — required for the site to function (session, security, cart on shop pages). No consent needed.
  • Analytics cookies — set by Google Analytics 4 via Google Tag Manager. Set only after consent.
  • Advertising cookies — we do not currently use advertising cookies. If that changes, this page will be updated and consent will be required.

You can manage your cookie preferences at any time via the cookie banner footer link.

Children

SaunaCentral is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be highlighted on the homepage or via email to mailing-list subscribers.