Privacy Policy

1. Who is responsible for your information?

Crystal Salt Cave Ltd (company number 15754351), registered in England and Wales, is the data controller. Our registered office is 113 Shenley Road, Borehamwood, WD6 1AG. Contact our privacy team at info@crystalsaltcave.uk or 07404 404200.

2. Information we use

• Contact and identity details, such as name, email address and phone number, when you contact us or make a booking or purchase.
• Booking, membership, event and order details, including the service or product, appointment date, attendees, payment status and communications about your request.
• Billing and delivery details needed to fulfil an order. Online payments are handled through the external checkout; we do not receive or store your full payment-card number.
• Information you choose to provide about accessibility or safety needs. Please share only what is needed to discuss your visit. Information about health can be sensitive personal data, so we use it only where necessary and with an appropriate legal condition.
• Basic technical information about your visit, such as IP address, browser and device details, pages requested and security logs. Optional advertising technologies are described below.

3. Why we use it and our legal grounds

• To respond to questions, make or manage bookings, provide sessions and fulfil orders: to take steps at your request or perform our contract with you.
• To take payment, issue refunds, keep accounts and meet legal requirements: contract and legal obligation.
• To protect the website, premises, customers and business, and to handle complaints or claims: our legitimate interests, balanced against your rights.
• To send promotional emails or texts: your consent where required. You can opt out at any time using the unsubscribe link or by contacting us. We may send limited marketing to existing customers only where the law permits and an opt-out was offered when details were collected.
• To use optional advertising tags or similar technologies: your consent. You can reject or withdraw this choice using Cookie preferences on this site.

4. Booking, checkout and other organisations

Our booking, membership and gift-card links currently take you to a checkout hosted by Wix. When you follow that link, Wix and its payment providers may collect information directly from you under their own privacy notices. We receive the information needed to confirm and provide your booking or purchase. If you buy a shop product, relevant order and delivery details may be shared with payment and delivery providers.

We also use service providers who support website hosting, email, security and maintenance. Google Fonts helps display the site's typeface and receives technical information, such as your IP address and browser details, when your browser requests font files. The Google Map in the footer remains unloaded until you select “Load Google Map”; Google then receives technical information to provide it. Optional Google Ads technology is loaded only after you accept optional cookies. Google's own privacy information applies to its services.

We do not sell your personal information. We may disclose it where necessary to comply with law, protect legal rights, or respond to a lawful request. If a service provider processes information outside the UK, we use a lawful transfer mechanism where required.

5. Cookies and similar technologies

The site uses technologies needed for core operation, security and remembering your cookie choice. These may include session or security cookies. We ask before loading the Google Ads tag, which may use device storage or identifiers for advertising measurement. Selecting “Reject optional cookies” leaves that tag disabled. You can change your choice at any time using the Cookie preferences link in the footer. You can also manage or delete cookies through your browser, though some site features may then work differently.

When you choose to use an external booking, payment or map service, that service may use its own cookies and technologies under its own notice. The provider's controls apply once you leave our site.

6. How long we keep information

We keep information only for as long as reasonably necessary for the purpose collected, including providing services, resolving queries or disputes, and meeting legal and accounting duties. Financial and tax records are normally kept for six years after the end of the relevant financial year. Enquiry and booking records are reviewed when no longer needed for customer service or legal claims. Marketing information is kept until you opt out, with periodic checks for inactive records. We may keep a minimal suppression record so we can respect an opt-out.

7. Your data protection rights

Depending on the circumstances, you can ask us for access to your information, correction, erasure, restriction or a copy in a portable format. You can object to processing based on legitimate interests and always object to direct marketing. Where we rely on consent, you can withdraw it at any time; this does not affect processing already carried out. Some rights are subject to legal limits.

To make a request, email info@crystalsaltcave.uk. We may need to verify your identity. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

8. Children

Our Family Room is intended for families, including children. A parent or responsible adult should make a child's booking and provide only information needed to arrange and safely provide the visit. We do not knowingly use children's information for direct marketing.

9. Changes to this notice

We may update this notice when our practices or legal obligations change. The current version and update date will appear on this page. If we make a material change to how we use information already collected, we will provide further information where the law requires.