GDPR – General Data Protection Regulations
Last updated: 4 August 2026
The General Data Protection Regulation (GDPR) brought in new legal protection for personal information from 25 May 2018.
Therefore, this document is designed to inform you of the personal information / client data that Sheldon (located at Lees Court Road, Sheldwich, Kent, ME13 0LU) collects and holds.
Furthermore, this document will provide you with a clear, concise and transparent explanation as to why such personal information / client data is required and collected, as well as serve the purpose of informing you of your rights and of ours too.
Once you have read and understood this document in its entirety, please complete and sign the declaration / statement of consent at the foot of the forthcoming pages.
Q. Why does Sheldon need to collect my personal information / client data?
A. In order to uphold and adhere to the practices, obligations, standards and methods expected of our specific industry.
By consenting to disclose your personal information / client data, Sheldon is further equipped to ensure your safety when using its spa facilities and/or throughout the administering of your requested Curated Collection.
Q. What is the lawful basis on which Sheldon can collect, hold and use my personal information / client data?
A. The lawful basis on which Sheldon can collect, hold and use your personal information / client data is:
Your active, given consent.
Please note: You do not have to share your personal information / client data with Sheldon, but if you do not, we cannot offer you a spa stay, Curated Collection or any other Service we may offer.
Q. What personal information / client data will Sheldon collect and hold?
A.
- Your name.
- Your contact details: telephone number, address and E-mail address.
- Your age.
- Medical history and other health-related information (which Sheldon will require from you at first consultation).
- Details of your booking(s), along with any notes deriving from spa stays and/or Curated Collection administered.
Please note: Sheldon will record all of the aforementioned after each consultation, booking, Curated Collection, facility hire, visit, etc.
Q. How will my personal information / client data be used?
A. Your personal information / client data will be used to confirm, reschedule, rebook, rearrange, amend or adapt (where necessary) your requested bookings, spa stay, Curated Collection, etc.
Furthermore, your personal information / client data will be used to ensure that it is safe for Sheldon to permit access to, and use of, its spa facilities and to provide you with the Curated Collection you may request.
In the event that a claim should arise, Sheldon is required to hold your personal information / client data for 7 years after your last visit or Curated Collection.
However, if you are a child or minor, the law regarding children’s data is that records must be kept until you are 25 years of age.
In addition, full consent will be required from your parent or legal guardian first.
Furthermore, if you are 17 years of age at the time you visit or are treated, then your records must be held until you reach the age of 26 years.
Sheldon will not share any of your personal information / client data with any third parties, nor disclose any of your health-related details (gathered during your consultation, Curated Collection, facility hire, visit, etc.) with anyone else other than those working within Sheldon, or as required for a legal process, claim or insurance purpose, without first explaining why it is necessary or without obtaining your consent.
Please note: Your data will not be transferred outside the United Kingdom without your consent.
Q. Will my personal information / client data be used for marketing purposes?
A. From time to time, Sheldon may like to send you some information relating to the special offers, products, Curated Collection, promotions, etc. that we offer, using the information you have shared with us.
Please note: You are under no obligation to consent to this, as your booking can still go ahead should you choose not to consent to your details being used in our marketing methods.
You may, of course, withdraw this consent at any time by E-mailing enquiries@sheldonspa.co.uk or telephoning 01795 532 418.
If you would like to be contacted for marketing purposes, please tick the relevant method boxes below to give your consent.
Post [ ]
E-mail [ ]
Telephone [ ]
Q. Will my personal information be safe?
A. Sheldon is committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, Sheldon has implemented the appropriate physical and managerial procedures to safeguard and secure the information we collect from you.
To reiterate once more, Sheldon will only ever contact you using the contact preferences you have provided above, in relation to:
Your appointment(s): information relating to your health for the purpose of permitting access to the spa facilities and administering your requested Curated Collection.
Special offers, products, Curated Collection and promotions (you may unsubscribe from this at any time).
Q. What are my rights?
A. GDPR gives you the following rights:
The right to be informed: to know why your information is being held and used (provided by this notice).
The right of access: this enables you to view the personal information held on record by Sheldon, for both identification and verification purposes.
The right to rectification: this enables you to instruct Sheldon to make amendments to your personal information should it be presented either incorrectly or incompletely.
The right to erasure (also known as “the right to be forgotten”): this enables you to request that Sheldon delete or erase any information held on record about you. However, please be fully aware that this will waive your right to ever raise an insurance claim.
The right to restrict processing of personal data: you have the right to request limits on how Sheldon uses your personal information.
The right to data portability: under certain circumstances, you can request a copy of personal information held electronically so you can reuse it in other systems.
The right to object: to be able to inform Sheldon that you do not want us to use certain parts of your information, or to instruct that it is only to be used for certain purposes.
The right to lodge a complaint with the Information Commissioner’s Office (ICO): this enables you to complain to the ICO if you feel your details are not correct, or if they are not being used in a way that you have given permission or consent for, or if they are being stored when they do not need to be.
Full details of your rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Sheldon’s rights
Please note:
If you do not agree to Sheldon keeping records of information about you and your Curated Collection, consultations, facility hire, visit, etc., or if you do not allow Sheldon to use the information in the way it needs to deliver professional and safe services, Sheldon may not be able to treat you.
Sheldon must keep record(s) of Curated Collections for the specified time period outlined above, which may mean that even if you ask Sheldon to erase any details about you, Sheldon may have to keep these details until after that specific time period has passed or lapsed.
Sheldon is permitted to move its records between its computers and IT systems, as long as your details are protected from being seen by others without your permission.
Consent
I consent to Sheldon holding and using my information as outlined above, and understand that I may withdraw that consent at any time by E-mail (enquiries@sheldonspa.co.uk) or by telephoning 01795 532 418.
I consent to share my personal information / client data with Sheldon for the purpose(s) and benefit(s) described above.
I confirm that I have also received a copy of this document.
Name: ……………………………………………………..
Date: ……………………………………………………..
Signature: …………………………………………………
Please note: For children under 18 years of age, a parental or guardian signature is required.