Privacy Policy

To keep you and your data safe

Your privacy is important to us. This information tells you what to expect if you share your personal information with us.

It is Wood Lane Pool and Sauna's policy to respect your privacy regarding any information we may collect from you across our website, http://www.woodlanepoolandsauna.com, and other sites we own and operate.

We only ask for Personal Information (name, e-mail address, address, contact phone number, payment details,) when you provide it to us voluntarily. This information is used for addressing your query and providing you with a service. In addition, we may collect the Internet protocol (IP) address used to connect your computer to the Internet. We don’t share any personally identifying information publicly or with third-parties, except when required to by law.

Data is collected by fair and lawful means, with your knowledge and consent. We only retain collected information for as long as necessary to provide you with an answer or the requested service. Wood Lane Pool and Sauna does not accept any responsibly for failures by suppliers or third parties. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page.

If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at woodlanepoolandsauna@gmail.com or send us mail to: Wood Lane Pool and Sauna, The Bungalow, Wood Lane, Little Ellingham, NR1`7 1JZ.

We use wix.com to provide you with this website, contact form and payment facility. Your information is collected via a wix.com online form and as such data is stored and processed accordingly to Wix Privacy Policy (https://www.wix.com/about/privacy). All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies. You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions or don’t want us to process your data anymore, please contact us at woodlanepoolandsauna@gmail.com or send us mail to: Wood Lane Pool and Sauna, The Bungalow, Wood Lane, Little Ellingham, NR1`7 1JZ.

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

NHS Test and Trace:

Recording customer details: how we use your information

To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.

By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.

As a customer/visitor of Wood Lane Pool and Sauna you will be asked to provide some basic information and contact details. The following information will be collected:

the names of all customers or visitors, or if it is a group of people, the name of one member of the group
a contact phone number for each customer or visitor, or for the lead member of a group of people
date of visit and arrival time and departure time

The venue/establishment as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.

The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.

In addition, if you only interact with one member of staff during your visit, the name of the assigned staff member will be recorded alongside your information.

NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.

For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).

We will require you to pre-book appointments for visits or to complete a form/scan a QR code on arrival.

Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.

However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.

Your information will always be stored and used in compliance with the relevant data protection legislation.

The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we as a venue/establishment are subject to. The legal obligation to which we’re subject, means that we’re mandated by law, by a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of corona virus.

By law, you have a number of rights as a data subject, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you.

You have the right to request that we erase personal data about you that we hold (although this is not an absolute right).

You have the right to request that we restrict processing of personal data about you that we hold in certain circumstances.

You have the right to object to processing of personal data about you on grounds relating to your particular situation (also again this right is not absolute).

If you are unhappy or wish to complain about how your information is used, you should contact a member of staff in the first instance to resolve your issue.

If you are still not satisfied, you can complain to the Information Commissioner’s Office. Their website address is www.ico.org.uk.

This policy is effective as of 12 October 2019.

Updated 14 September 2020, 20 September 2020 and 14 December 2020.