Privacy Policy
How Wild Sauna UK handles data — short version: as little as possible, with your consent for anything beyond strictly necessary.
Last updated: May 2026.
This page explains what data Wild Sauna UK ("we", "the site") collects when you visit, what we do with it, and the rights you have under UK GDPR and the Data Protection Act 2018.
What we collect
Server logs. Standard request logs (IP address, user agent, requested URL, timestamp, referrer) are collected by our hosting provider (Cloudflare). These are used for security and abuse prevention and are retained for a short rolling window.
Analytics. With your consent, we use Google Analytics 4 to understand which content is read and how the site is used. GA4 sets cookies and collects pseudonymous identifiers, page paths, device type, approximate location (country/region) and engagement metrics. IP addresses are not stored. You can refuse analytics cookies via the consent banner.
Affiliate clicks. When you click an affiliate link, the destination retailer (Amazon, specialised sauna retailers, etc.) may set their own cookies under their own privacy policy. We do not see or store the contents of those cookies. We see — at most — that a link with a particular tracking ID was clicked.
Tag Manager. We use Google Tag Manager to load measurement scripts. GTM itself does not set tracking cookies.
What we don't collect
We do not run a newsletter, contact form, account system or comments. We do not ask for your email, name or any other personal detail. We do not sell data.
Legal basis
Strictly necessary cookies (security, basic site functionality) — lawful basis: legitimate interests.
Analytics and any measurement cookies — lawful basis: consent, given via the cookie banner. You can withdraw consent at any time by clearing site data in your browser.
Your rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. Because we don't hold personal data about individual readers beyond short server logs, in practice this mostly means you can ask us to confirm what (if anything) is held, and you can object to the processing of analytics data — which you exercise by refusing the consent banner.
The UK supervisory authority is the Information Commissioner's Office (ico.org.uk). You have the right to complain to the ICO at any time.
International transfers
Google Analytics, Google Tag Manager and Cloudflare are operated by US-headquartered companies. Where data is processed outside the UK, the relevant providers rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses.
Changes to this policy
Material changes will be reflected by an updated date at the top of this page.