Data Privacy Policy

Last updated: 15th January 2026

Introduction

technastar Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we collect, use, store, and protect your personal data when you use our website, services, and analytics platforms. We are the data controller for the purposes of UK data protection law and the EU General Data Protection Regulation (GDPR).

Data We Collect

We collect various types of personal data to provide and improve our spa analytics services. The data we collect includes information you provide directly to us, information collected automatically through your use of our services, and information we receive from third parties with your consent. This data collection enables us to deliver personalised analytics solutions and maintain the security of our platforms.

Information You Provide

  • Contact details (name, email address, phone number, company name)
  • Account information (username, password, preferences)
  • Business information (spa type, services offered, staff details)
  • Communication content (emails, support tickets, feedback)
  • Payment information (billing address, payment method details)

Information Collected Automatically

  • Website usage data (pages visited, time spent, click patterns)
  • Technical information (IP address, browser type, device information)
  • Performance data (system response times, error logs)
  • Analytics platform usage (dashboard views, report generation)

How We Use Your Information

We use your personal data for various legitimate business purposes to provide our spa analytics services effectively. How we use your data depends on the services you use and your preferences. Our use of your data includes providing our analytics platforms, improving our services, communicating with you about your account, and ensuring the security of our systems.

Service Provision

  • Delivering spa analytics dashboards and reporting services
  • Processing payments and managing your account
  • Providing customer support and technical assistance
  • Customising analytics solutions to meet your business needs

Service Improvement

  • Analysing usage patterns to enhance our platform functionality
  • Developing new features and analytics capabilities
  • Conducting research to improve spa industry insights
  • Testing and optimising system performance

Communication

  • Sending service updates and important account notifications
  • Providing technical support and responding to enquiries
  • Sharing industry insights and best practices (with consent)
  • Marketing our services (where you have opted in)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please refer to our cookie policy.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

  • With your explicit consent or at your direction
  • With trusted service providers who assist in delivering our services
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, property, or safety, or that of our users
  • In connection with a business transaction (merger, acquisition, etc.)

Data Security

We implement comprehensive security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security practices include encryption, secure data transmission, access controls, regular security assessments, and staff training on data protection principles.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Account information is typically retained for the duration of your service agreement plus seven years for legal and regulatory compliance. Marketing communications data is retained until you unsubscribe or for a maximum of three years. Website analytics data is retained for 26 months in accordance with Google Analytics retention policies.

Your Rights

Under UK data protection law and GDPR, you have several rights regarding your personal data:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Request limitation of data processing
  • Right to data portability: Request transfer of your data
  • Right to object: Object to processing of your personal data
  • Rights related to automated decision-making: Protection from automated profiling

International Data Transfers

We primarily process data within the UK and European Economic Area (EEA). Where we transfer data outside these regions, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under UK and EU data protection law.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately so we can take appropriate action.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this privacy policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please reach out to us:

Regulatory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority if you are located in the EU.