Privacy Policy
Privacy Policy
Last Updated: May 2026
Welcome to SunSpa®. Your privacy matters to us, and we are committed to protecting your personal information and handling it responsibly.
This Privacy Policy explains how SunSpa® collects, uses, stores, and protects your information when you visit our website, purchase our products, contact us, or interact with us online.
By using our website, you agree to the practices outlined in this policy.
1. Who We Are
SunSpa® is a supplier of self-tanning products including spray tan solutions, mousse tan products, and professional tanning supplies for salons and beauticians.
For the purpose of UK data protection law, SunSpa® is the “data controller” responsible for your personal data.
If you have any questions regarding this policy or your personal data, you can contact us at:
Email: hello@sunspatanning.co.uk
Address: 71 Castle Rd, St Albans, Herts, AL1 5Q
Phone: +44 1727 809 440
2. Information We Collect
We may collect and process the following personal information:
Information You Provide Directly
- Name
- Billing and delivery address
- Email address
- Telephone number
- Payment information
- Order history
- Account login details
- Messages sent through contact forms or email
Information Collected Automatically
When you use our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Website usage data
- Cookies and tracking data
- Pages visited and time spent on site
Marketing Information
If you subscribe to marketing communications, we may collect:
- Email preferences
- Engagement with newsletters and promotions
3. How We Use Your Information
We use your personal information to:
- Process and deliver orders
- Manage customer accounts
- Respond to enquiries and customer support requests
- Provide salon and trade account services
- Improve our website, products, and customer experience
- Send order confirmations and delivery updates
- Send marketing communications where consent has been given
- Prevent fraud and protect website security
- Comply with legal and regulatory obligations
4. Legal Basis For Processing
Under UK GDPR, we rely on the following lawful bases for processing personal data:
Contractual Necessity
To fulfil orders and provide services requested by you.
Legitimate Interests
To improve our services, maintain website security, and operate our business effectively.
Consent
For email marketing communications and certain cookies.
Legal Obligations
Where we are required to retain records for tax, accounting, or legal compliance purposes.
5. Marketing Communications
If you choose to receive marketing from SunSpa®, we may send you:
- Product launches
- Promotions and special offers
- Beauty and tanning advice
- Salon and trade updates
You can unsubscribe at any time by:
- Clicking the unsubscribe link in any email
- Contacting us directly
We will never sell your personal information to third parties for marketing purposes.
6. Sharing Your Information
We may share your information with trusted third parties where necessary to operate our business, including:
- Payment providers
- Delivery and courier companies
- Website hosting providers
- Marketing platforms
- IT and software providers
- Professional advisers and accountants
All third parties are required to process your information securely and lawfully.
7. International Transfers
Some of our service providers may store or process data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
8. Data Security
We take reasonable technical and organisational measures to protect your information from:
- Unauthorised access
- Loss or misuse
- Alteration
- Disclosure
However, no online transmission or storage system can ever be guaranteed to be completely secure.
9. Data Retention
We only keep your personal information for as long as necessary to:
- Fulfil the purposes outlined in this policy
- Meet legal, tax, and accounting obligations
- Resolve disputes and enforce agreements
When data is no longer required, it will be securely deleted or anonymised.
10. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request transfer of your data
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us using the details above.
11. Cookies
Our website may use cookies and similar technologies to:
- Improve website functionality
- Analyse traffic and user behaviour
- Remember preferences
- Deliver relevant advertising
You can manage cookie settings through your browser preferences.
For more information, please see our Cookie Policy.
12. Third-Party Links
Our website may contain links to external websites or social media platforms. We are not responsible for the privacy practices or content of those third-party websites.
We encourage you to review their privacy policies separately.
13. Children’s Privacy
SunSpa® products and services are not intended for children under the age of 16, and we do not knowingly collect personal data from children.
14. Changes To This Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements, technology, or business operations.
Any updates will be posted on this page with the revised “Last Updated” date.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
SunSpa®
Email: hello@sunspatanning.co.uk
Address: 71 Castle Rd, St Albans, Herts, AL1 5Q
Phone: +44 1727 809 440