Privacy policy

Privacy Policy

Last updated: 11 August 2026

Heron Sauna respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, make a booking, purchase a gift voucher or otherwise interact with Heron Sauna.

This Privacy Policy applies to our website, online booking services, communications and services provided by Heron Sauna.

1. Who we are

The data controller responsible for your personal data is:

[CHORROIN LTD]
Trading as Heron Sauna
[10 THE BUNGALOWS, IRISHTOWN, NEW ROSS, CO. WEXFORD]
Ireland

Email: [HERONSAUNA@GMAIL.COM]

For data protection enquiries, you can contact us using the email address above.

Heron Sauna is the data controller for personal data processed for the purposes described in this Privacy Policy, except where another organisation acts as an independent data controller for its own processing.

2. What personal data we collect

Depending on how you interact with us, we may collect some or all of the following:

Booking and customer information

  • Name

  • Email address

  • Telephone number

  • Booking date and time

  • Number of people in a booking

  • Booking history

  • Gift voucher information

  • Membership or loyalty information, where applicable

  • Information you provide when contacting us about a booking

Payment information

Payments may be processed by third-party payment providers.

We generally do not receive or store your full payment card number, security code or other sensitive payment-card information. Payment information is processed by the relevant payment provider in accordance with its own privacy policy and security procedures.

Communications

If you contact us by email, telephone, contact form, social media or another method, we may retain the information you provide, including the contents of your communication and any information necessary to respond to your enquiry.

Website and technical information

When you use our website, certain technical information may be collected automatically, including:

  • IP address

  • browser type and version

  • device type

  • operating system

  • approximate location derived from IP address

  • pages visited

  • referring website

  • date and time of visits

  • information about how you interact with our website

The precise information collected depends on the technologies and third-party services used on our website.

Cookies and similar technologies

We use cookies and similar technologies. Some are strictly necessary for the operation of the website, while others may be used for analytics, functionality, advertising or other purposes.

Non-essential cookies and tracking technologies will only be used where we have obtained the consent required under applicable law.

Further information is provided in our Cookie Policy.

3. How we use your personal data

We may use your personal data for the following purposes:

Providing our services

We use your information to:

  • process and manage sauna bookings;

  • provide the services you have booked;

  • communicate booking confirmations, amendments and cancellations;

  • process payments;

  • provide gift vouchers and other services you purchase;

  • manage customer accounts, memberships or loyalty programmes where applicable;

  • respond to customer enquiries; and

  • provide customer support.

Operating and improving our business

We may use information to:

  • operate and maintain our website and booking systems;

  • understand how our website is used;

  • identify technical problems;

  • improve our website and services;

  • maintain business records;

  • monitor and prevent fraud, misuse and security incidents; and

  • protect our legal rights and property.

Legal and regulatory purposes

We may process personal data where necessary to:

  • comply with legal or regulatory obligations;

  • maintain accounting and tax records;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims; or

  • comply with our contractual obligations.

Marketing

Where required by law, we will only send you electronic direct marketing communications where we have obtained the appropriate consent.

In limited circumstances, Irish ePrivacy law permits an existing customer to receive marketing about our own similar services without obtaining fresh consent, provided the applicable legal conditions are satisfied, including providing an easy opportunity to object when the contact details are collected and in each subsequent marketing communication.

You can object to direct marketing at any time and without charge.

Every electronic marketing communication we send will provide an appropriate method of opting out.

The Irish Data Protection Commission confirms that the general rule is affirmative consent for electronic direct marketing, subject to a limited existing-customer exception.

4. Lawful bases for processing

We only process personal data where we have a lawful basis under the GDPR.

Depending on the circumstances, the lawful basis may be:

Contract

We process information where it is necessary to enter into or perform a contract with you, such as processing a booking or providing a service you have purchased.

Legal obligation

We process information where necessary to comply with an obligation imposed on us by law, including accounting, taxation and other legal requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

  • operating and managing Heron Sauna;

  • maintaining and improving our services;

  • maintaining website and information security;

  • preventing fraud or misuse;

  • managing customer relationships;

  • establishing or defending legal claims; and

  • conducting limited business administration.

Where we rely on legitimate interests, we consider the impact of the processing on individuals and take appropriate steps to protect their rights.

Consent

Where consent is required, we will ask you for it before carrying out the relevant processing.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.

For cookies and similar tracking technologies, consent will be obtained where required under Irish ePrivacy law.

5. Information you are required to provide

Some personal information is necessary for us to provide our services.

For example, we may need your name and contact details to process and manage a booking.

Where particular information is required to enter into or perform a contract with you, we will indicate this where appropriate.

If you do not provide information that is necessary for a booking or other service, we may be unable to provide that service.

Where information is optional, you are free not to provide it.

6. Who we share personal data with

We may disclose personal data to third parties where necessary to operate Heron Sauna and provide our services.

Depending on the services we use, these may include:

  • online booking and scheduling providers;

  • payment processors;

  • website hosting and e-commerce providers;

  • email and communications providers;

  • accounting and bookkeeping providers;

  • IT and technical service providers;

  • website analytics providers;

  • advertising and marketing providers, where applicable and where legally permitted;

  • professional advisers such as accountants, solicitors and insurers;

  • government bodies, regulators, law-enforcement authorities or courts where legally required; and

  • other service providers acting on our behalf.

Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the processing is subject to appropriate contractual and security safeguards.

Some third-party providers may process information as independent controllers rather than processors. Where this is the case, their own privacy policies may also apply.

7. Third-party services

Heron Sauna may use third-party services to operate its website, booking system, payment services, analytics, communications and other business functions.

These services may include, where applicable:

  • Shopify

  • Stripe

  • Google Analytics / Google services

  • Meta services

The services actually used by Heron Sauna may change from time to time.

Where third-party services process personal data on our behalf, we seek to ensure that appropriate data protection agreements and safeguards are in place.

Where a third party acts as an independent controller, its own privacy policy will apply to its processing.

8. International transfers

Some of our service providers may process personal data outside Ireland or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that an appropriate legal transfer mechanism is in place as required by applicable data protection law.

Depending on the circumstances, this may include:

  • an adequacy decision of the European Commission;

  • Standard Contractual Clauses approved by the European Commission; or

  • another lawful transfer mechanism recognised under applicable data protection law.

Where required, we will implement appropriate supplementary safeguards.

9. How long we keep your information

We will not keep personal data for longer than is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Our retention periods will depend on the type of information and why we hold it.

As a general guide:

Booking and customer records: We retain these for as long as reasonably necessary to administer bookings, provide customer service, resolve disputes and meet applicable legal and accounting requirements.

Payment and financial records: We retain relevant records for the period required by applicable accounting, tax and legal requirements.

Customer enquiries: We generally retain correspondence for as long as reasonably necessary to deal with the enquiry and for a limited period afterwards where necessary for customer service, legal or business purposes.

Marketing information: Where marketing is based on consent, we retain the relevant information until you withdraw consent or otherwise unsubscribe, subject to periodic review.

Website analytics information: Retention depends on the analytics service and configuration used by Heron Sauna and will be limited to what is reasonably necessary for the relevant analytical purpose.

Cookie consent records: Where applicable, we retain records necessary to demonstrate and manage your cookie preferences.

Legal claims and disputes: Information may be retained for as long as reasonably necessary to establish, exercise or defend legal claims.

Where a specific statutory retention period applies, that period will take precedence.

We periodically review the personal data we hold and securely delete or anonymise information when it is no longer required.

10. Cookies and tracking technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function or for a service that you have explicitly requested. These may be used without consent where the applicable legal exemption applies.

Other cookies, including analytics, advertising and conversion-tracking cookies, require consent under Irish ePrivacy law unless a specific exemption applies.

We will not rely on "legitimate interests" as a substitute for the consent required under the ePrivacy Regulations for storing or accessing information on your device.

Where consent is required:

  • we will ask for consent before placing or accessing the relevant cookies;

  • you will be given appropriate choices regarding different categories of cookies;

  • non-essential cookies will not be activated before the required consent is obtained; and

  • you will be able to withdraw or change your preferences.

The Data Protection Commission confirms that consent is generally required for cookies and similar tracking technologies, with limited exemptions for strictly necessary technologies and certain communications-related technologies.

11. Your data protection rights

Subject to applicable legal conditions and exemptions, you have the following rights under the GDPR:

Right of access

You can request a copy of the personal data we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to erasure

In certain circumstances, you can ask us to delete your personal data.

Right to restrict processing

In certain circumstances, you can ask us to restrict how we use your personal data.

Right to data portability

Where applicable, you may request personal data you have provided to us in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller.

Right to object

You may object to certain processing based on our legitimate interests.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where we process your personal data on the basis of consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Rights relating to automated decision-making

We do not currently make decisions about customers based solely on automated processing, including profiling, which produce legal effects or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required by law.

The DPC identifies access, rectification, erasure, restriction, portability, objection and withdrawal of consent among the principal rights that should be explained to individuals.

12. How to exercise your rights

To exercise any of your data protection rights, contact us at:

[HERONSAUNA@GMAIL.COM]

Please provide enough information for us to identify you and understand your request.

We may need to request additional information to verify your identity before fulfilling a request.

We will respond to valid requests within the time period required by applicable data protection law.

In most cases, requests are free of charge. However, where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

13. Right to complain to the Data Protection Commission

If you believe that we have not handled your personal data appropriately, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC).

The DPC is Ireland's supervisory authority for data protection.

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Website: https://www.dataprotection.ie/

You are also entitled to exercise your rights directly with Heron Sauna before, or instead of, making a complaint to the DPC.

The GDPR expressly requires individuals to be informed of their right to lodge a complaint with a supervisory authority.

14. Data security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The measures we use depend on the nature of the information and the risks associated with its processing.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Where we become aware of a personal data breach that is subject to notification requirements under applicable law, we will take the steps required by the GDPR and the Data Protection Act 2018.

15. Children's data

Our services are intended for customers who are legally permitted to use them.

We do not knowingly collect personal data from children for purposes that are unlawful or inappropriate.

Where we become aware that we have collected personal data from a child in circumstances where appropriate consent or another lawful basis was required but was not obtained, we will take reasonable steps to delete the information.

16. Social media

We may operate social media accounts and may provide links to social media platforms from our website.

If you interact with us through a social media platform, that platform may process your personal data independently of Heron Sauna.

The relevant platform's own privacy policy and terms will apply to its processing.

17. Third-party websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend that you review the privacy policy of any third-party website before providing personal information.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • our services;

  • the technology we use;

  • the personal data we process;

  • applicable laws or regulatory guidance; or

  • our business practices.

When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, provide additional notice.

19. Contact us

If you have questions about this Privacy Policy, how we process your personal data, or wish to exercise your data protection rights, please contact:

Heron Sauna
[CHORROIN LTD]
[10 THE BUNGALOWS, IRISHTOWN, NEW ROSS, CO. WEXFORD]
Ireland

Email: [HERONSAUNA@GMAIL.COM]

Cookie Policy

Last updated: 9 August 2026

This Cookie Policy explains how Heron Sauna uses cookies and similar technologies on our website.

What are cookies?

Cookies are small files that can be stored on your device when you visit a website.

They can be used to make websites function, remember preferences, understand how websites are used and, where consent has been provided, support advertising and other tracking activities.

Types of cookies we may use

Strictly necessary cookies

These cookies are necessary for the website or a service you have specifically requested to function.

They may include cookies required for:

  • website security;

  • session management;

  • booking functionality;

  • shopping-cart or checkout functionality;

  • remembering essential choices; and

  • payment or authentication functionality.

Where the relevant legal exemption applies, these cookies may be used without consent.

Analytics cookies

Analytics cookies help us understand how visitors use our website.

For example, they may help us understand:

  • how many people visit our website;

  • which pages are viewed;

  • how visitors navigate the website; and

  • whether our website is functioning effectively.

Analytics cookies will only be used where the required consent has been obtained.

Advertising and marketing cookies

Where used, these cookies may allow us or our advertising partners to:

  • measure advertising effectiveness;

  • understand interactions with advertising;

  • build audiences;

  • provide targeted advertising; or

  • measure conversions.

These cookies will only be used where the required consent has been obtained.

Managing your cookie preferences

When you first visit our website, you may be presented with a cookie consent mechanism allowing you to accept or reject non-essential cookies.

You can change or withdraw your consent at any time using our cookie preference mechanism.

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

The DPC states that users must be able to withdraw or vary cookie consent and that withdrawing consent should be as easy as giving it.

Changes to this Cookie Policy

We may update this Cookie Policy when we introduce or remove cookies, tracking technologies or third-party services.

The latest version will always be published on our website.

Contact

If you have questions about our use of cookies, contact:

[HERONSAUNA@GMAIL.COM]

Heron Sauna
[CHORROIN LTD]
[10 THE BUNGALOWS, IRISHTOWN, NEW ROSS, CO. WEXFORD]
Ireland