top of page

Privacy Policy Sensate Spa & Studios


Who are we? 

Sensate spa and studios is an exclusive outdoor spa, treatment room and yoga/fitness studio, hidden within the city of Bristol. 


The Sensate space has been designed with nature and curiosity in mind. Carefully hand-crafted and built from 80% recycled and up-cycled materials, every inch of the place has its own story to tell, from the ancient Japanese acer, to the up-cycled benches.


Vision - Our vision is to create an ever growing urban jungle of green. A space of relaxation, joy, fun, laughter and release. To help those, help themselves. 


At Sensate Spa and Studios we are committed to keeping your personal data safe and secure. We are registered with the Information Commissioner's Office, Registration No.  ZB693355.

Our business address is;  

The Garden, Sensate Spa and Studios, 68 Northumbria Drive, Bristol BS9 4HW

The purpose of this policy

This Privacy Policy is designed to help you understand what kind of information we collect in connection with our service/s or space rental and how we will process and use this information. In the course of providing you with services/space rental we will collect and process information that is commonly known as personal data. 

This Policy describes how we collect, use, retain and safeguard personal data. It also sets out your individual rights to know what data is held about you, how this data is processed and how you can place restrictions on the use of your data.


Data Protection Principles 

We have policies, procedures and training in place to ensure all staff at Sensate Spa and Studios understand their responsibilities to protect personal data. We work with the following principles:

  1. Lawfulness, fairness and transparency - we will use personal data in a way which complies with the law.

  2. Purpose Limitation - we will only use personal data for the reasons we collect it for and not for something unrelated or additional. 

  3. Data Minimisation - we limit the amount of personal data we collect to what we need it for. 

  4. Accuracy - we will ensure our records are accurate and up to date.

  5. Storage Limitation - we will only keep data for as long as we need it. When it is no longer needed, we will securely destroy or delete the personal data.

  6. Integrity and Confidentiality - we will ensure personal data is kept securely and that the details of our customers, team and hirers are protected yet accessible when required. 

  7. Accountability - we will take responsibility and have appropriate measures in place and keep records to demonstrate how we achieve data protection compliance.   

Collection of personal data

We may collect personal data in person, at events, via phone, email, post, sms, whatsapp, from our website or social media accounts. Personal data is information which can identify you such as your name, email address, postal address etc. 

This may include:

  • Contact details such as title, name, email address and phone numbers 

  • Credit or debit card details and any purchases you have made

  • Any specific needs to allow us to provide the best service 

  • Dietary requirements where this is required for catering purposes

In respect of working with us as a Spa Angel or hiring one of our studio spaces we may also collect: 

  • Your image

  • Date of birth 

  • Your bank account details 

  • References

  • Contact details of family members or next of kin

  • Qualification details 

  • Public and professional indemnity insurance details 

  • Right to work in the UK

  • DBS Certificate 

We process personal data where it is in our legitimate interests to do so and where we are confident that such processing will not infringe on your rights and freedoms. Our “legitimate interests” in this context include supplying our spa services, selling associated products and rental of our studio spaces.

Where required we will process personal data to comply with our legal obligations, to assist the prevention and detection of crime, and to assist the police and other authorities with investigations. (including criminal and safeguarding investigations.)  



Lawful basis for processing 

To respond to a query 

Consent/ legitimate interests

To provide a spa service 

Create a contract 

To process a request to book one of our studio spaces

Create a contract 

To consider a request to run an event 

Create a contract 

To process your order from our online shop 

(our online shop is run by Wix Payments and has a separate data controller) 

Create a contract 

To send marketing messages to you 


To consider applications to work or volunteer with us

Consent /legitimate interests

To improve our web site and services to 

Legitimate interest 


Customers - We hold the data of all our customers in the WIX booking system. We hold this data under the legal basis of legitimate interest and will send our customers operational information relating to their booking in order to ensure that their experience with us is of the highest possible quality.


How we protect your personal data

We guard against unauthorised access to our systems by reviewing our information collection, storage and processing practices, including physical security measures. 


Restrictions are in place to ensure only those who require access to information are able to access it. Information held digitally is password protected and online we use the following tools to protect our customers;  PCI-compliant payment processing; SSL secure payments, Secure on-site and in-app checkout with HTTPS/TLS data encryption; Common fraud attack protection with Wix’s AI and rule-based risk system 3D; Secure 2 authentication at checkout for EU card payments.


Transfer of personal data outside the UK

If you attend one of our international events, your data may be given to one of our overseas partners in order to make your booking process and experience with us smooth. 



Our website uses cookies for important reasons, such as; 

  • To provide you with a great experience when you visit our site.

  • To identify registered members (if you have registered on our site.)

  • To monitor and analyse the performance, operation and effectiveness of Wix's platform.

  • To ensure our platform is secure and safe to use. 

Our web site also collects IP addresses from all visitors, including users who are not logged in. However, this information is used solely for the benefit of the user experience, and we  do not sell or share IP addresses with any third parties. 


Links / social media

Our Website or social media platforms may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of the other sites you visit. 

Your rights

Under the General Data Protection Regulations, you have rights as an individual which you can exercise in relation to the information we hold about you.

  • the right to be informed; 

  • the right of access; 

  • the right to rectification/update and change your details; 

  • the right to erasure; 

  • the right to restrict processing; 

  • the right to data portability; 

  • the right to object; and 

  • the right not to be subject to automated decision-making including profiling. 

All requests should be addressed to We aim to respond within one month. Please note that we may be entitled to refuse requests where exceptions apply, for example where we believe that the data we hold is accurate or we can demonstrate that our processing is necessary for a lawful purpose set out in this policy. 


Accessing your Information

Sensate Spa and Studios is happy to give people access to their personal information. You can find out if we hold any of your personal information by contacting us, or making a “Right of Access” request under the General Data Protection Regulation. We will aim to respond within one month. 


How long do we keep your personal information? 

We keep the information that you provide or that we collect only for as long as we need to in line with the reason it was collected or until you inform us that you would like us to delete it. 



For the purposes of meeting the Data Protection Act 2018 territorial scope requirements, the United Kingdom is the named territory where the processing of personal data takes place. 

Any dispute or claim arising out of this Privacy Policy and the use of your personal information will be governed by English law and the courts of England and Wales have exclusive jurisdiction to resolve any such dispute or claim.

If you require more information about our service processes or further details on how we collect personal data, please contact us on; 


Changes to this policy 

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. You can check any changes on our website. If you continue to use our services after we have changed this Privacy Policy, the updated version will apply.


What to do if you have a query?

For more information about our privacy practices or if you would like to make a complaint, please contact our Data Protection Officer;  Sarah Matthews by emailing

bottom of page