Privacy policy

Turkish Baths 1877, 67 Victoria Street, Sheffield, S3 7QD, is the data controller for personal data collected through the website (turkishbaths1877.com) and the booking site (booking.turkishbaths1877.com).

Contact us at info@turkishbaths1877.com or via the contact form.

Depending on how you use the sites, we may collect:

• Identity and contact details — name, email, phone, and optional postcode.
• Booking details — date, time, guests, experiences, treatments, add-ons, gift cards, and discounts.
• Account details if you sign in — including the identifier issued by our sign-in provider, Clerk.
• Payment status and references from Stripe. We never store full card numbers.
• Health and safety answers you submit before a visit. This is special-category health data and is only collected with your explicit consent on that form.
• Marketing preferences if you opt in to email or SMS.
• Messages you send through the contact form or the “Ask us” chat.
• Technical and usage data such as browser type, pages viewed, and (if you allow it) cookies and advertising identifiers. See the cookie policy.

• To take and manage bookings, gift cards, and payments (contract).
• To send confirmations, calendar files, reminders, and health-and-safety form links (contract / legitimate interests).
• To keep you and other guests safe using health-and-safety answers (explicit consent).
• To create or recognise your customer record and show bookings in My Account (contract).
• To run loyalty rewards where that programme applies (legitimate interests / contract).
• To send marketing only if you have opted in (consent). You can unsubscribe at any time.
• To understand how the website and booking site are used, if you allow statistics cookies (consent).
• To measure advertising and recover abandoned baskets, if you allow advertising cookies (consent).
• To keep the service secure, prevent fraud, and meet legal and accounting duties (legal obligation / legitimate interests).

We use specialist providers. They only receive what they need to provide their service:

• Clerk — sign-in and account security.
• Convex — hosting the booking database (EU region).
• Stripe — card and wallet payments.
• Resend — transactional email (confirmations, reminders, gift cards, cart recovery).
• Klaviyo — email and SMS marketing, only where you have consented or the send is a service message.
• Google Analytics — site statistics, only with statistics consent.
• Advertising partners we enable (for example Google Ads, Meta, TikTok, or LinkedIn) — only with advertising consent.
• OpenAI — to power the optional “Ask us” assistant. Do not include unnecessary personal or health details in chat.

Some providers may process data outside the UK. Where they do, they use approved transfer tools such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

We do not sell your personal data. Staff only see what they need to run the baths.

• Confirmed bookings, payments, and gift cards — for as long as needed to fulfil the visit and meet accounting and legal duties (typically up to six years for financial records).
• Health-and-safety forms — for the visit and a short period afterwards for safety and insurance, then deleted or archived as required.
• Abandoned baskets — up to 7 days, then removed.
• Unpaid reservations — cancelled after about 30 minutes.
• Loyalty points — expire after 12 months of inactivity in the programme rules.
• Cookie consent — stored for 12 months. You can change it sooner.
• Contact messages and chat — kept long enough to reply and improve our answers.

Under UK GDPR you can ask us to:

• access the personal data we hold about you
• correct inaccurate data
• erase data where we have no ongoing need to keep it
• restrict or object to certain processing
• receive a copy of data you provided (portability)
• withdraw consent (marketing, cookies, or a health-and-safety form you have not yet relied on for a visit)

Email info@turkishbaths1877.com or use the contact form. You can also complain to the Information Commissioner’s Office.

The website and booking site are intended for adults arranging visits. If a booking includes a young person, we expect a parent or guardian to provide their details. We do not knowingly run marketing to children.

Necessary cookies run the website, bookings and security. Statistics and advertising cookies are optional. Read the cookie policy and change your choices at any time from Cookie settings .