wellspace Privacy Policy

Last updated: 14 July 2026

1. Who we are

wellspace ("wellspace", "we", "us", "our") operates a marketplace platform that connects hosts who list wellness amenities (such as saunas, pools, and hot tubs) ("Hosts") with individuals who wish to book and pay to use those facilities ("Guests").

We are the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your personal data, you can contact us at:

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Scope of this policy

This policy applies to:

  • Visitors to our website and app

  • People who join our founding member / launch waitlist

  • Hosts who list wellness amenities on our platform

  • Guests who book and use those amenities

We are currently in a pre-launch phase and collecting sign-ups from prospective founding members. Where sections below describe features (such as payments) that are not yet live, they describe how we will handle data once those features launch.

3. Personal data we collect

Depending on how you interact with us, we may collect:

  • Category: Contact details / name, email address, phone number

  • Examples: Waitlist/founding member sign-up

  • When collected: Account registration

  • Category: Account information

  • Examples: Username, password (encrypted), role (Host/Guest)

  • When collected: Account creation

  • Category: Payment and billing information

  • Examples: Card details, billing address, transaction history

  • When collected: When bookings and payments go live (processed via a third-party payment provider - see Section 6)

  • Category: Listing information (Hosts)

  • Examples: Property address, amenity details, photos, availability

  • When collected: When a Host creates a listing

  • Category: Booking information (Guests)

  • Examples: Booking dates/times, facility used, communications with Host

  • When collected: When a booking is made

  • Category: Technical and usage data 

  • Examples: IP address, device/browser type, pages visited, referral source

  • When collected: Automatically via cookies and analytics tools when you use our website/app 

  • Category: Communications

  • Examples: Emails, messages, or enquiries you send us

  • When collected: When you contact us or use in-platform messaging

We do not intend to collect any special category data (such as health data) and ask that you do not share this with us unless specifically requested.

4. How we use your personal data

We use your personal data for the following purposes, and rely on the lawful bases indicated:

  • Purpose: To register you for our founding member waitlist and notify you about launch

    • Lawful basis: Consent

  • Purpose: To create and manage your account

    • Lawful basis: Performance of a contract

  • Purpose: To facilitate bookings between Guests and Hosts

    • Lawful basis: Performance of a contract

  • Purpose: To process payments

    • Lawful basis: Performance of a contract

  • Purpose: To communicate with you about your account, bookings, or enquiries

    • Lawful basis: Performance of a contract / Legitimate interests

  • Purpose: To send marketing communications about wellspace

    • Lawful basis: Consent (you can opt out at any time)

  • Purpose: To improve our website, app, and services (analytics)

    • Lawful basis: Legitimate interests / Consent (for non-essential cookies)

  • Purpose: To detect and prevent fraud, abuse, or safety issues

    • Lawful basis: Legitimate interests / Legal obligation

  • Purpose: To comply with legal and regulatory obligations (e.g. tax, accounting)

    • Lawful basis: Legal obligation

5. Cookies and analytics

Our website and app use cookies and similar technologies to:

  • Ensure the site functions correctly (essential cookies

  • Understand how visitors use our site (analytics cookies, e.g. Google Analytics or similar)

  • Support marketing efforts, where applicable

Where cookies are not strictly necessary, we will ask for your consent via a cookie banner before they are set, in line with PECR. You can manage or withdraw your cookie preferences at any time through your browser settings or our cookie preference tool [insert link once live].

6. Sharing your personal data

We may share your personal data with:

  • Hosts and Guests, as necessary to facilitate a booking (e.g. a Guest's name and booking time shared with the relevant Host)

  • Payment processors (e.g. Stripe or similar), to process transactions securely - we do not store full card details ourselves

  • Service providers, such as hosting providers, email/communications platforms, and analytics providers, who process data on our behalf under contract

  • Professional advisers, such as lawyers, accountants, or insurers, where necessary

  • Regulators or law enforcement, where required by law

  • A buyer or successor, in the event of a merger, acquisition, or sale of business assets

We do not sell your personal data to third parties.

7. International transfers

Some of our service providers (e.g. cloud hosting, analytics, payment processing) may store or process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement (IDTA) or adequacy regulations, so your data remains protected to UK standards.

8. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including:

  • Waitlist/founding member details: until launch plus a reasonable period thereafter, or until you ask us to delete them

  • Account and booking data: for the duration of your account plus a period afterward to meet legal, accounting, and tax obligations (typically up to 6 years)

  • Payment records: as required by financial regulations

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten"), in certain circumstances

  • Restrict processing in certain circumstances

  • Object to processing based on legitimate interests or for direct marketing

  • Data portability, to receive your data in a portable format

  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at contact@wellspace.co.uk. We may need to verify your identity before responding. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Data security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including encryption of sensitive data (e.g. passwords) and access controls. No system is completely secure, but we work to keep your data safe.

11. Children

wellspace is not intended for use by individuals under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time, for example as we launch new features such as bookings and payments. We will post the updated version here with a revised "Last updated" date, and where changes are significant, we will notify you directly.

13. Contact us

If you have questions about this policy or how we handle your data: