Privacy notice.

1

Who we are.

Waresley Park Estate Limited ("we", "us") decides how your personal information is used across the whole estate: stays, the spa, the lake and tipi, padel, the coffee shop and online food orders, events, gift cards, memberships and this website. We are registered in England and Wales (company number 13144933) at Waresley Park Stud, Gamlingay Road, Waresley, Sandy, Bedfordshire SG19 3DD, and registered with the Information Commissioner's Office.

Questions about your information: hello@waresleyparkestate.co.uk or 01223 491396.

2

What we collect.

Depending on what you do with us, we may collect:

• Contact and identity details: name, email, phone number, postal address and date of birth.
• Bookings, orders and memberships: what you book or buy, when, and your account on our booking portal.
• Payment details: taken and stored by Stripe, our payment provider. We see only the card type, last four digits and expiry date, never your full card number.
• Saved cards: if you choose to save a card, a record of your agreement and of any charges we make to it.
• Health and safety information: answers to spa health and consent forms, lake safety waivers and class health declarations, and any allergies you tell us about.
• Gift cards: the buyer's details, and the name, email and message for the person receiving it.
• Stays: guest names, ID where needed, arrival details and vehicle registration.
• Children: where a child is booked onto an activity, event or stay (see section 5).
• CCTV images across the estate (section 6) and recordings of phone calls (section 7).
• Marketing choices: whether you've agreed to hear from us, and how you interact with our emails.
• Website data: device, browser, pages visited and cookies (section 8).

3

Where it comes from.

Most of it comes from you: when you book online, in our booking portal, by phone, by email or in person. Some comes from others:

• someone who books for you or buys you a gift card gives us your name and email;
• booking websites, such as Airbnb, pass on the details of stays booked through them;
• our CCTV, phone and website systems.

4

Health information.

Some activities need health information so we can look after you safely: spa treatments, swimming, classes and food allergies. This is "special category" information under UK data protection law, and we give it extra protection.

• We ask for it on the health and consent form or safety waiver for your booking, and use it only with your explicit consent, or to protect you in an emergency.
• Only the staff and therapists delivering your session, and the managers responsible for safety, can see it.
• If someone else books for you, you fill in your own form, and we don't share your answers with the person who booked.
• If you'd rather not give health information, we may not be able to provide some treatments or activities safely.
• We keep forms for 7 years after your last visit, so we can respond if there is ever a question about a treatment or an incident, then delete them.

5

Children.

The spa and lake are for guests aged 16 and over. Where a child is booked onto an event, activity or stay, we collect only what we need to look after them safely, provided by their parent or guardian.

6

CCTV.

We use CCTV across the estate, including the spa, lake, tipi, padel courts, entrances, car parks and grounds, for safety, security and preventing crime (our legitimate interests). Footage is kept for up to 30 days, unless we need it longer for a specific incident, investigation or legal reason.

7

Phone calls.

We record and transcribe calls to the estate for training, quality and record-keeping. Recordings and transcripts are kept for up to 30 days unless needed longer for a specific reason.

8

Cookies and website analytics.

Our website uses cookies. Essential cookies make the site and checkout work. With your agreement, we also use:

• Analytics cookies (Google Analytics), to see how people find and use the site;
• Marketing cookies (Meta pixel and Klaviyo), to measure our advertising and show you relevant offers.

When you first visit, the cookie banner lets you accept all, decline all or choose. You can change your mind at any time with the Cookie Preferences button at the bottom of the page. Our booking portal and online shop set their own essential cookies.

9

Why we use your information.

Booking emails aren't marketing: you'll get them even if you haven't signed up for news and offers. We don't make decisions about you by automated means alone.

10

Marketing.

We only send news and offers if you've opted in, using Klaviyo. Each part of the estate keeps its own list, so signing up for spa news doesn't put you on the lake's list. You can unsubscribe at any time with the link in any email, or by emailing hello@waresleyparkestate.co.uk.

11

Who we share it with.

We share information only with companies that help us run the estate, and only what they need. They act on our instructions and must keep it secure. They include:

This list changes from time to time as we change providers.

We may also share information with our professional advisers and insurers, with booking sites you booked through, or with the police and other authorities where the law requires it or to prevent crime. We never sell your information.

12

Transfers outside the UK.

Some of these providers store or process information outside the UK, mainly in the EU and the US. Where they do, it is protected by UK-approved safeguards, such as an adequacy decision, the UK International Data Transfer Agreement or the UK addendum to the EU Standard Contractual Clauses.

13

How long we keep it.

After that, we delete it or make it anonymous.

14

Keeping it safe.

We use technical and organisational measures to protect your information, including access controls so staff see only what their job needs. Our providers must meet the same standard.

15

Your rights.

You have the right to:

• see the information we hold about you;
• ask us to correct it;
• ask us to delete it, or stop or limit how we use it, in some cases;
• get a copy to take elsewhere;
• withdraw your consent at any time, where we rely on it (this doesn't affect anything we did before);
• object to us using it for our legitimate interests or for marketing.

Email hello@waresleyparkestate.co.uk. We'll reply within one month.

16

Complaints.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

17

Changes.

We'll update this notice when how we use information changes. The version on this page is the current one.

Last updated: 6 November 2026.