Privacy Policy

1. Introduction

Sunny Bank Suntan Ltd (trading as Tan & Wellness) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information.

2. Information We Collect

We collect the following types of information:

• Personal Information: Name, email address, phone number
• Booking Information: Service selections, appointment dates and times
• Payment Information: Payment card details (processed securely by DOJO)
• Communication: Any notes or special requests you provide
• Technical Data: IP address, browser type, device information

3. How We Use Your Information

We use your information for the following purposes:

• Processing and confirming your bookings
• Sending booking confirmations and reminders
• Processing payments securely
• Communicating with you about your appointments
• Improving our services and website
• Complying with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract Performance: To fulfill our booking agreement with you
• Legitimate Interests: To improve our services and communicate with you
• Legal Obligation: To comply with tax and accounting requirements
• Consent: For marketing communications (where applicable)

5. Data Sharing

We share your information only with trusted third parties:

• Payment Processor: DOJO (for secure payment processing)
• Email Service: Resend (for sending booking confirmations)
• Hosting Provider: Firebase/Google Cloud (for data storage)

We never sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-DSS compliant providers
• Regular security updates and monitoring
• Access controls and authentication
• Encrypted data storage

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Booking Data: 7 years (for tax and accounting purposes)
• Payment Records: 7 years (legal requirement)
• Marketing Data: Until you unsubscribe or request deletion

8. Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at info@tanwell.co.uk

9. Cookies

Our website uses essential cookies to ensure proper functionality. We do not use tracking or advertising cookies. Essential cookies include:

• Session cookies for booking functionality
• Authentication cookies for secure access

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated revision date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: