Legal
Privacy Notice
What personal data Recovery Lab UK Ltd collects when you book a sauna session, why we hold it, how long for, and the rights you have over it. This version sets out the structure so it can be completed and reviewed before launch.
Legal copy to be reviewed by a qualified solicitor before production launch.
This is a structural placeholder, not a data protection notice you can rely on. It must be completed and reviewed against the UK GDPR and the Data Protection Act 2018 — including the retention table and the record of processing activities — before anyone can create a real account.
Who controls your data
Placeholder — Recovery Lab UK Ltd as data controller, our ICO registration number, and the address for data protection enquiries.
What we collect
Placeholder — the categories of personal data we hold and where each comes from.
- Placeholder — account details you give us: name, email, phone.
- Placeholder — booking and session records, including check-in and access events.
- Placeholder — payment metadata from Stripe. We never hold your card number.
- Placeholder — device and analytics data, and what we deliberately do not collect.
Why we use it, and our lawful basis
Placeholder — each purpose mapped to a lawful basis: contract for bookings and payments, legitimate interests for security and service improvement, consent for marketing, legal obligation for financial records.
Cabin access and safety records
Placeholder — what the smart lock and cabin sensors record, why those records exist (safety, fault detection, dispute resolution), and how long they are kept. To be drafted with care: this is the most sensitive processing we do.
International transfers
Placeholder — where data is hosted, which processors sit outside the UK, and the safeguards relied on for those transfers.
How long we keep it
Placeholder — a retention table by data category, including the statutory minimum for financial records and the shorter periods for access logs and analytics.
Your rights
Placeholder — access, rectification, erasure, restriction, portability, objection, and withdrawing consent; how to exercise each and our response time.
Marketing and your choices
Placeholder — what we send, how consent is captured, and how to unsubscribe in one click.
How we protect it
Placeholder — encryption in transit and at rest, access controls, staff training, and our breach notification process.
Children's data
Placeholder — our services are for over-18s and we do not knowingly collect data about children.
Complaints and the ICO
Placeholder — how to complain to us first, and your right to complain to the Information Commissioner’s Office.
Changes to this notice
Placeholder — how we version this notice and how you will be told about material changes.
Questions about this page?
Email hello@recoverylab.co.uk or use the contact form and we will point you at the right person.
Contact us