Last updated: 17 August 2026
Float Therapy Ltd is committed to protecting your privacy and handling your personal data responsibly. This notice explains what we collect, why, who we share it with, how long we keep it, and what rights you have.
Float Therapy Ltd, trading as Float Therapy Wilmslow, is the data controller for the information described here.
Company number 13374533, registered in England and Wales. Registered office and trading address: 82 Chapel Lane, Wilmslow, Cheshire SK9 5JH.
We are registered with the Information Commissioner's Office, registration number ZB328624.
Questions about this notice, or about your data, go to reception@float-therapy.co.uk or 07810 145975. Nathan Jones, Director, is responsible for data protection. We are not required to appoint a Data Protection Officer and have not appointed one.
• Identity and contact details: name, email address, telephone number
• Booking and service information: appointment history, services booked, preferences, memberships, packages and gift cards
• Health information you give us: the health declaration you complete before your first session and any waiver, including conditions, injuries, medication and pregnancy. This is explained separately at section 4, because the law treats it differently
• Payment information: payments are processed by third-party payment providers; we do not store full card details
• Marketing preferences: your email and SMS opt-in or opt-out status
• CCTV footage and audio: see section 7
• Website usage data: IP address, browser and device information, and pages visited, collected through cookies and analytics
To provide and manage your bookings, memberships, packages and gift cards; to send confirmations, reminders and other service messages; to keep you safe during treatments; to take payments and issue refunds; to answer enquiries; to send marketing where you have asked for it; to improve our services and website; and to meet our legal, insurance and accounting obligations.
Health information is special category data under UK data protection law, and needs a specific condition before we can process it at all.
We collect it for one reason: some of our services are not safe for everyone, and we cannot make that judgement without asking. We rely on your explicit consent (Article 9(2)(a) UK GDPR) when you complete a health declaration or waiver.
You can withdraw that consent at any time. We should be straight with you about what follows: without a current health declaration we cannot provide treatments safely, so withdrawing it generally means we cannot go ahead with a booking.
Health information is seen only by the team member treating you and by the director. It is not used for marketing, and it is never shared with advertising platforms.
• Contract: to provide the services you book with us
• Consent: for marketing communications, and for health information as set out above
• Legal obligation: accounting, tax, insurance and health and safety duties
• Legitimate interests: running and improving the business, preventing fraud, keeping our premises and our team safe, and promoting our services. Where we rely on legitimate interests you have the right to object, and we will stop unless we have compelling grounds not to
We do not sell or rent your personal data. We share it where we need to in order to run the business, with:
• Booking and client management systems, which hold your appointment records and health declarations
• Email and SMS providers, for booking messages and for marketing where you have opted in
• Payment providers, to take payment securely
• Social media and advertising platforms: see section 7
• Website hosting and analytics providers
• Professional advisers, such as accountants and legal advisers, where required
• Anyone we are legally required to share with, including where we report a matter to the police
We use a small number of established providers, and we choose them carefully. If you would like to know exactly which providers we use, ask us and we will tell you.
Advertising platforms. We advertise online, including on social media. To do this we may share contact details — such as your email address and phone number — with social media and advertising platforms, so that our ads can be shown to existing guests, and so those platforms can identify new audiences similar to our guests. Your details are converted into a non-readable form before they are sent, so the platform does not receive them in plain text. We do not share health information, appointment details, or anything about the treatments you have had.
We rely on legitimate interests for this, and you can ask us to stop at any time by emailing reception@float-therapy.co.uk — we will remove you, and it will not affect your bookings.
Analytics and advertising cookies. Our website uses analytics and advertising tools provided by third parties. These collect information about your visit and can involve personal data such as your IP address, so they are not purely anonymous. You can control them through your cookie settings and your browser.
CCTV. CCTV operates in the communal areas of the premises for the safety of our guests and our team, and to prevent and investigate crime. It does not operate in treatment rooms, changing areas or toilets.
You should know two things about it. The cameras are motion-triggered rather than recording continuously, and they record audio as well as video. Footage is automatically deleted after 14 days, is accessible only to the directors, and is reviewed only where there is a specific reason, such as an incident, an accident or a security concern. We rely on legitimate interests, and signage is displayed on the premises.
Some of our providers are based in, or store data in, countries outside the UK, including the United States. Where personal data is transferred outside the UK we rely on the safeguards permitted by UK data protection law, such as the UK extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement. You can ask us for details of the safeguard used for any particular transfer.
• Booking and treatment records, including health declarations: seven years after your last visit. This reflects the limitation periods for bringing a claim, and the record-keeping conditions of our professional insurance
• Where a guest was under 18 at the time of treatment, records are kept until seven years after their eighteenth birthday
• CCTV: 14 days, then automatically deleted
• Marketing contact details: until you opt out or ask us to delete them
• Accounting records: six years, as required by law
• Website analytics: as set by the retention settings of the tools we use
We only send marketing emails or SMS messages if you have opted in. You can withdraw at any time using the unsubscribe link, by telling reception, or by emailing us.
Service messages such as booking confirmations, reminders and changes to your appointment will still be sent, because they are part of providing the service you booked.
You have the right to access the data we hold about you, to have inaccurate data corrected, to have data deleted, to object to or restrict processing, to data portability, and to withdraw consent where we rely on it.
To exercise any of these, email reception@float-therapy.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
We do not make decisions about you by automated means alone.
Our services are for people aged 16 and over, and we do not knowingly collect data about children under 16.
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content, and we encourage you to review their own privacy notices.
We may update this notice from time to time to reflect changes in the law or in how we operate. Any updates will be published on this page, and the revised date will be shown at the top.