Privacy Policy

How Wild Sauna UK handles data - short version: as little as possible, with your consent for anything beyond strictly necessary.

Last updated: May 2026.

This page explains what data Wild Sauna UK ("we", "the site") collects when you visit, what we do with it, and the rights you have under UK GDPR and the Data Protection Act 2018.

What data do we collect?

Server logs. Standard request logs (IP address, user agent, requested URL, timestamp, referrer) are collected by our hosting provider (Cloudflare). These are used for security and abuse prevention and are retained for a short rolling window.

Analytics. With your consent, we use Google Analytics 4 to understand which content is read and how the site is used. GA4 sets cookies and collects pseudonymous identifiers, page paths, device type, approximate location (country/region) and engagement metrics. IP addresses are not stored. You can refuse analytics cookies via the consent banner.

Affiliate clicks. When you click an affiliate link, the destination retailer (Amazon, specialised sauna retailers, etc.) may set their own cookies under their own privacy policy. We do not see or store the contents of those cookies. We see - at most - that a link with a particular tracking ID was clicked.

Tag Manager. We use Google Tag Manager to load measurement scripts. GTM itself does not set tracking cookies.

What data do we not collect?

We do not run a newsletter, contact form, account system or comments. We do not ask for your email, name or any other personal detail. We do not sell data.

What's our legal basis?

Strictly necessary cookies (security, basic site functionality) - lawful basis: legitimate interests.
Analytics and any measurement cookies - lawful basis: consent, given via the cookie banner. You can withdraw consent at any time by clearing site data in your browser.

What are your UK GDPR rights?

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. Because we don't hold personal data about individual readers beyond short server logs, in practice this mostly means you can ask us to confirm what (if anything) is held, and you can object to the processing of analytics data - which you exercise by refusing the consent banner.

The UK supervisory authority is the Information Commissioner's Office (ico.org.uk). You have the right to complain to the ICO at any time.

What about international data transfers?

Google Analytics, Google Tag Manager and Cloudflare are operated by US-headquartered companies. Where data is processed outside the UK, the relevant providers rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses.

How will we notify you about changes?

Material changes will be reflected by an updated date at the top of this page.