Privacy Policy

Last updated: May 2025

1. Who we are

Muse Lab Spa Ltd is a women’s wellness studio based in Glasgow, Scotland. We operate the website muselab.spa and the booking system at bookings.gettimely.com/muselabspa/bb/book.

Data controller: Muse Lab Spa Ltd, Glasgow, Scotland.
Contact: hello@muselab.spa

2. What data we collect

  • Booking data — name, email, phone number, appointment details, payment records. Collected via Timely booking software.
  • Contact enquiries — name, email, message content submitted through our contact form.
  • Newsletter subscription — email address, if you opt in.
  • Website analytics — anonymised usage data (pages visited, session duration) via Google Analytics.
  • Cookies — see Section 7.

3. How we use your data

  • To confirm and manage your appointments
  • To send booking confirmations, reminders and follow-ups
  • To respond to your enquiries
  • To send marketing emails, where you have opted in
  • To improve our website and services
  • To comply with legal obligations

4. Legal basis for processing

  • Contract — processing your booking
  • Legitimate interests — improving our services and communicating with clients
  • Consent — marketing emails and cookies
  • Legal obligation — financial record-keeping

5. Data sharing

We do not sell your data. We share it only with:

  • Timely — our booking software provider (New Zealand, with EU-standard data protections)
  • Mailchimp / email provider — for newsletters you opt into
  • Google Analytics — anonymised website analytics
  • Payment processors — for card transactions made at point of sale

6. Data retention

Booking and financial records are kept for 7 years to meet HMRC requirements. Marketing consent records are kept until you unsubscribe. Website analytics data is retained for 26 months.

7. Cookies

Our website uses essential cookies (required for the site to function) and analytics cookies (Google Analytics, only with your consent). You can manage cookie preferences via the cookie banner when you first visit the site.

8. Your rights

Under UK GDPR you have the right to: access your data, correct inaccurate data, request deletion, restrict or object to processing, and data portability. To exercise any right, email hello@muselab.spa. You also have the right to complain to the ICO.

9. Changes to this policy

We may update this policy from time to time. The current version will always be available at /privacy-policy/.