Escape Spa (“we”, “us”, “our”) operates the website http://escapespamcr.co.uk/ (the “Site”) and uses Treatwell as our primary booking platform. This Policy explains how we collect, use, share and protect your personal data when you (i) visit our Site; (ii) make a booking via Treatwell; or (iii) book group packages directly with us.
By using our services, you consent to the practices described in this Policy.
Escape Spa
1 First St
Greater Manchester
M15 4RP
Email: info2@escapespamcr.co.uk
We are the data controller under UK GDPR.
Bookings via Treatwell
When you book appointments through Treatwell, they collect:
Contact details: name, email, phone number. Booking information: selected treatment, date/time, any special requests
Payment details: securely processed by Treatwell (we do not see full payment details)
Treatwell’s own Privacy Policy applies to that data: https://www.treatwell.co.uk/privacy-policy/.
Group Bookings & Packages
When you enquire or book group treatments or packages directly with us, we may collect:
Contact details (as above)
Group size and preferences
Dietary or medical requirements (if relevant)
Payment information (processed by our chosen payment provider)
Website Visitors
When you browse our Site, we automatically collect:
Device & usage data: IP address, browser type, pages visited, clickstream
Cookies & similar technologies: see our Cookie Policy below.
To provide and manage treatments (including group bookings).
To communicate confirmations, reminders, changes or promotions.
To improve our services: analytics, site functionality, treatment offerings.
Legal compliance & fraud prevention.
We rely on the following legal bases under UK GDPR:
Contractual necessity (to fulfil your booking)
Legitimate interests (to operate and improve our business)
Consent (for marketing communications – you may unsubscribe anytime).
Treatwell: for individual appointment bookings.
Payment processors: for group/package deposits and payments.
IT service providers: website hosting, analytics (e.g., Google Analytics).
Legal & regulatory: if required by law or to protect our rights.
We require all third parties to process data in accordance with UK GDPR.
Our Site uses cookies to enhance your experience:
Essential cookies: enable core functionality (e.g., booking modules).
Performance cookies: track usage to improve the site.
Marketing cookies: for targeted advertising (only with your consent).
You can manage or disable cookies via your browser settings. Disabling certain cookies may affect site functionality.
Booking data: retained for 7 years for business, legal and insurance purposes.
Website analytics: aggregated and anonymised data retained for up to 2 years.
Marketing consents: until you withdraw consent.
Under UK GDPR, you have the right to:
Access, rectify or erase your personal data
Restrict or object to our processing
Data portability
Withdraw consent at any time (e.g., unsubscribe from marketing)
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, contact us at info2@escapespamcr.co.uk.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration or loss. Our staff receive regular training on data protection.
We may update this Policy from time to time (e.g., to reflect changes in law or services). The “Last updated” date at the top will reflect major revisions. Please revisit regularly.
Contact Us
If you have any questions about this Privacy & Booking Policy, please email info2@escapespamcr.co.uk or write to:
Escape Spa, 1 First St, Greater Manchester, M15 4RP.
