Privacy Policy

Last updated: 25 June 2026

1. Who we are

This Privacy Policy explains how Tanned Lux ("we", "us", "our") handles your personal data in connection with our website and tanning-studio services. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), the data controller is:

• Studio address: Tanned Lux, 12 Keptie Street, Arbroath, DD11 1RG
• Email: customerservice@tannedlux.com
• Phone: 07564 984112

If you have any questions about this policy or how we handle your data, please use the contact details in section 14.

2. Information we collect

We keep data collection to a minimum. Depending on how you use this website, we may collect the following:

a. Information you give us directly

When you complete our contact / booking form, you provide:

• Your name
• Your email address
• Your message — and any personal details you choose to include in it (for example your preferred appointment times, questions, or service interests).

We only ask for the information needed to reply to your enquiry or arrange a booking. Please avoid including sensitive information (such as health details) in your message unless it is necessary.

b. Information collected automatically by third-party resources

Our website loads a small number of resources from third-party providers. When your browser requests these, those providers may automatically receive technical information such as your IP address, browser type and device information:

• Map tiles — loaded from OpenStreetMap to display our location.
• Fonts — loaded from Google Fonts.
• Scripts & styles — loaded from the unpkg / Cloudflare content delivery network (for the map library).

We do not control the data these providers collect; their own privacy policies apply.

c. Preferences stored on your device

To remember your display choices, we store a small amount of data in your browser's local storage (not cookies) under the key tannedlux.settings. This holds your selected theme (dark/light), colour-accessibility mode, and motion preference. This information stays on your device, is never transmitted to us, and you can clear it at any time via your browser settings.

We do not use analytics, advertising, or tracking technologies on this site.

3. Contact form & Web3Forms

Our contact form is processed using Web3Forms, a third-party form-to-email service that delivers your submission to our inbox. We use Web3Forms so that we do not have to operate our own server to receive messages.

When you submit the form, the details you entered (name, email and message) are transmitted to Web3Forms, which forwards them to us by email. Web3Forms may also process limited technical data (such as your IP address) to deliver the message and protect against spam and abuse. Web3Forms acts as a data processor on our behalf.

You can read how Web3Forms handles data in their privacy policy at web3forms.com/privacy.

Note: the current contact form on this website is a front-end demonstration. Once Web3Forms is connected, your submissions will be delivered to us as described above.

4. How we use your information

We use the information you provide to:

• respond to your enquiries and questions;
• arrange, confirm and manage your bookings and appointments;
• provide the services you have requested;
• keep records of our communications with you; and
• comply with our legal obligations.

We will never sell your personal data, and we do not use it for automated decision-making or profiling.

5. Legal bases for processing

Under the UK GDPR, we rely on the following legal bases:

• Consent — when you choose to send us a message through the contact form.
• Performance of a contract / steps prior to a contract — to respond to booking requests and provide our services.
• Legitimate interests — to operate and secure our website and respond to enquiries efficiently.
• Legal obligation — where we are required to keep certain records.

6. Who we share data with

We share your data only with the service providers needed to run our website and respond to you:

• Web3Forms — processes contact-form submissions and delivers them to us.
• Our email provider — receives and stores the messages forwarded to us.
• OpenStreetMap, Google Fonts and unpkg / Cloudflare — serve map, font and script resources as described in section 2(b).

We may also disclose information if required to do so by law or to protect our legal rights. We do not sell or rent your personal data to anyone.

7. Cookies & local storage

This website does not use tracking or advertising cookies. The only data we store in your browser is your display preferences in local storage, as described in section 2(c). Third-party resources (maps, fonts) may set their own cookies under their own policies.

8. How long we keep data

We keep contact-form messages and related correspondence only for as long as necessary to deal with your enquiry or booking and to maintain reasonable business records, after which they are deleted. Preferences stored in your browser remain until you clear them.

9. International transfers

Some of our service providers (for example Web3Forms and Google Fonts) may process data on servers outside the United Kingdom. Where this happens, appropriate safeguards (such as adequacy decisions or standard contractual clauses) are relied upon to protect your information.

10. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to our processing of your data;
• request portability of your data; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in section 14. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled improperly.

11. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

Our tanning services are intended for adults, and UK law restricts the use of sunbeds to those aged 18 and over. Our website is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review it periodically.

14. Contact us

If you have questions, requests, or concerns about this policy or your personal data, please contact us:

← Back to home