Yorkshire Spa Retreat is the trading name of Yorkshire Spa Retreat (Helmsley) Ltd, registered in England and Wales under company number 10696077.
Registered Office:
Medina House
2 Station Avenue
Bridlington
East Riding of Yorkshire
YO16 4LZ
For the purposes of UK data protection law, Yorkshire Spa Retreat (Helmsley) Ltd is the “Data Controller” responsible for your personal information.
Yorkshire Spa Retreat is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, contact us, make a booking, enquire about ownership, or use our services.
We process personal data in accordance with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations (PECR)
We may collect and process the following information:
Name, Email address, Telephone number, Postal address, Date of birth
Booking details
Ownership enquiry details
Communication preferences
If you make a payment with us, payments are securely processed by authorised third-party payment providers. Yorkshire Spa Retreat does not store full debit or credit card details.
When you visit our website, we may automatically collect:
IP address
Browser type
Device information
Website usage data
Cookie and tracking information
Approximate geographic location
In limited circumstances, we may collect health or dietary information where relevant to spa treatments, accessibility requirements, restaurant bookings, or your stay. This information is only collected where necessary and handled securely.
We may use your information to:
• Respond to enquiries and brochure requests
• Process bookings and ownership enquiries
• Provide services during your visit or stay
• Send booking confirmations and important service updates
• Improve our website and customer experience
• Provide customer support
• Send marketing communications where you have consented or where lawful to do so
• Prevent fraud and protect our business
• Comply with legal and regulatory obligations
Under UK GDPR, we rely on the following lawful bases:
Where processing is necessary to provide services, bookings, ownership enquiries, or purchases.
For the operation and improvement of our business, customer service, security monitoring, and relevant communications.
Where you have given consent for marketing communications or optional cookies/tracking technologies.
Where we are required to process data for legal, tax, accounting, or regulatory purposes.
If you opt in to receive marketing communications, we may send you:
• Ownership updates
• Lodge availability
• Special offers
• Events and open days
• Spa and retreat news
You can unsubscribe or update your preferences at any time by:
Clicking the unsubscribe link in emails
Contacting us directly at info@yorkshire-spa-retreat.co.uk
We use Mailchimp and other trusted marketing providers to manage communications securely.
Our website uses cookies and similar technologies to improve your browsing experience and help us understand website performance.
These may include:
• Essential website cookies
• Analytics cookies (such as Google Analytics)
• Advertising and remarketing technologies (including Meta/Facebook Pixel)
Non-essential cookies are only activated after you provide consent through our cookie banner.
You can manage or withdraw your cookie preferences at any time through your browser settings or cookie preferences panel.
Please also refer to our separate Cookie Policy for further details.
We use Google reCAPTCHA on certain website forms to help prevent spam and abuse.
reCAPTCHA may collect information about your device and interaction with the website in accordance with Google’s Privacy Policy and Terms of Service.
CCTV operates in certain areas of Yorkshire Spa Retreat for the purposes of:
• Guest safety
• Crime prevention
• Security monitoring
CCTV footage is securely stored and retained only for as long as reasonably necessary.
We do not sell your personal information to third parties.
We may share your information with trusted service providers where necessary, including:
• Booking systems
• Payment processors
• Marketing providers
• Website hosting companies
• IT and CRM providers
• Professional advisers or legal authorities where required
All third parties are required to process your information securely and lawfully.
Some of our third-party providers may process personal data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place to protect your information, including approved contractual protections where required under UK GDPR.
We only retain personal information for as long as necessary for the purposes outlined in this policy.
Retention periods may include:
• Booking and transaction records
• Ownership enquiries
• Marketing preferences
• CCTV footage
• Legal and accounting requirements
When information is no longer required, it is securely deleted or anonymised.
Under UK GDPR, you have the right to:
• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Withdraw consent
• Request transfer of your data
• Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us using the details below.
If you have any questions about this Privacy Policy or how we handle your information, please contact:
Yorkshire Spa Retreat
Gale Lane
Nawton
York
YO62 7SD
Email: info@yorkshire-spa-retreat.co.uk
You also have the right to contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office (ICO)
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services. Any updates will be published on this page with a revised “Last Updated” date.
Which brochure are you interested in?
