Skip to content
Cloud9 Head Spa

Legal

Privacy Policy

Last updated: 10 September 2026

This notice explains how Cloud 9 Head Spa uses personal information collected through this website.

Who we are

This website is provided by Cloud 9 Head Spa, a head spa in Harpenden. Cloud 9 Head Spa is the trading name used on this site.

Website: cloud9headspa.co.uk

How to contact us

For privacy-related enquiries, contact Cloud 9 Head Spa at:

Information we collect through this website

The Register Your Interest form collects:

  • name (required)
  • email address (required)
  • telephone number (optional)
  • an optional, separate request to receive occasional updates (unticked by default)

The Contact page enquiry form collects:

  • name (required)
  • email address (required)
  • telephone number (optional)
  • enquiry type (optional)
  • message (required)

The Contact page form does not collect address, postcode, a preferred appointment date, or a marketing opt-in. Submitting it is treated as an enquiry only. Both forms include a privacy acknowledgement linking to this notice.

This website does not collect payment card details, consultation notes, or other clinical information. It does not run advertising pixels, newsletter platforms, CRM tools, or an embedded booking widget. Optional website analytics may be used only with your consent, to help understand how people use the site. Analytics are not enabled until you accept them through the cookie preferences controls. See our Cookie Policy for details.

Why we use this information

If you submit either form, we use your details to respond to your enquiry, to provide the information you requested, and to help arrange an appointment where that is what you have asked for. Notifications are delivered to our business email address.

Lawful basis

Where you send an enquiry, we process your details so we can respond to you, provide the information you have asked for, and take steps at your request before a treatment is provided.

Where you separately ask to receive updates, we rely on your consent.

We may also process limited technical information where necessary for our legitimate interests in keeping the website secure and preventing automated abuse of our forms.

Marketing

We only use your details for marketing updates if you have separately opted in. That optional request appears on the Register Your Interest form and is not pre-ticked. The Contact page enquiry form does not include a marketing checkbox.

You can withdraw consent at any time by contacting us at cloud9headspaharpenden@gmail.com. Withdrawal does not affect the lawfulness of processing before that point. This website does not add people to a separate mailing list or newsletter platform automatically.

Bookings, consultations and maps

This website does not currently collect consultation or clinical information, and it does not take payments. If you ask us to help arrange an appointment, we will use your enquiry to respond to you.

Online booking is intended as an external service rather than an embedded calendar on this website. When a booking system is used, that provider will handle booking, payment and any consultation information under its own terms. We will update this notice if that processing becomes part of how this website works.

On the Contact page, a Google Maps embed loads only after you choose to show it. Opening the map may allow Google to set its own cookies or similar technologies. You can instead use the external Google Maps link.

Service providers

Enquiry and register-interest submissions are sent from the website server using Resend, a transactional email provider. Resend processes those emails on our behalf. The Resend API key is not exposed in the browser.

Notification emails are delivered to our business mailbox cloud9headspaharpenden@gmail.com, which is hosted by Google.

If you follow a link to Instagram or Facebook, those platforms are responsible for their own privacy practices.

You may also choose to contact Cloud 9 Head Spa through WhatsApp using the numbers shown on this website. Information you send that way is processed through WhatsApp / Meta's service and is subject to that provider's own privacy practices. Website enquiry and register-interest forms are not submitted to WhatsApp.

Some service providers used to operate the website and communications may process information outside the UK. Where this occurs, the relevant provider is responsible for operating appropriate safeguards required by applicable data-protection law.

Typefaces are bundled and served by this website. They are not loaded from Google in your browser.

Retention

This website does not store form submissions in its own database. Copies exist in the notification email (and any confirmation email) sent through Resend, and in the inbox that receives them.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries and meeting any applicable legal or administrative requirements.

Different retention periods may apply to booking, consultation or treatment records once those services are introduced. This website does not currently hold those records.

Security

Form data is validated on the server and sent to Resend over HTTPS. We do not store the Resend API key in client code. No website is completely secure; please only send information you are comfortable providing.

Your rights

Under UK data protection law you may have the right to:

  • access the personal information we hold about you
  • ask us to correct inaccurate information
  • ask us to delete information, where applicable
  • ask us to restrict how we use information, where applicable
  • object to certain processing, where applicable
  • withdraw consent, where we rely on consent (this does not affect processing already carried out)

These rights are not always absolute. To make a request, contact Cloud 9 Head Spa at cloud9headspaharpenden@gmail.com.

Complaints

If you are unhappy with how we use your information, please contact us first at cloud9headspaharpenden@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk/make-a-complaint

Cookies

Please see our Cookie Policy for cookies and similar technologies used by this website.

Changes

We may update this notice when the website or our practices change. The date at the top of this page will be revised when that happens.

Back to the website