The Rest Room

Privacy Policy

Last updated: 2 October 2026

This policy explains what personal information The Rest Room collects, why, who it is shared with and the choices you have. It applies to therestroom.co.uk, to our booking pages and to the sessions we deliver.

Who we are

The Rest Room is the trading name of Becca Gayle-Phipps, a self-employed professional (autónoma) registered in Spain, NIE Z0190432C, Carrer de see Escoles, Santanyí 07690, Mallorca, Spain. Becca is the data controller responsible for your personal information.

For anything to do with your data, email hello@therestroom.co.uk.

What we collect and why

Enquiries

When you use our enquiry form or email us, we collect your name, email, phone number (optional), your property or location, the experience you're interested in, dates, number of guests and anything else you choose to tell us. We use this to reply and to prepare a proposal or quote. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in answering business enquiries.

Hotel and venue partners

When you download our partnership brief or book a call, we collect your name, email and the name of your hotel, property or company. We use this to send the brief, hold the call and follow up about a possible partnership. Calls are booked through Google Calendar and held on Google Meet. Legal basis: our legitimate interest in developing business relationships. You can ask us to stop contacting you at any time.

Private session bookings

When you book a session, we collect your name, email, phone number, the date, time and address of the session, guest numbers, details of the pool or space (for The Float), and your payment and booking history. We use this to confirm, deliver, reschedule or refund your booking and to keep the accounting records the law requires. Legal basis: performing our contract with you, and our legal obligations.

Payments are taken by Stripe. We never see or store your full card details.

Health and suitability information

Sound, breathwork and floating are not suitable for everyone. Before a session, we ask whether anything might affect your safety, for example pregnancy, a pacemaker or certain mental health conditions. This is health information, a special category of personal data. We only collect it with your explicit consent, given when you book. We use it only to decide whether a session is safe for you and how to adapt it. We share it only with the practitioner delivering your session. You can withdraw your consent at any time, but we may then be unable to deliver the session safely.

Photos and video

We only photograph or film guests who have agreed to it. If you agree and later change your mind, tell us and we will stop using the images in any new material.

Using our website

Our website is hosted by Squarespace. Squarespace records basic information about visits, such as pages viewed, the type of device and browser, approximate location and the referring site, using cookies and similar technologies. We use this to understand how the site is used and to keep it secure and working. We do not use advertising or social media tracking pixels. See "Cookies" below.

Who we share it with

We do not sell your personal information. We only share it with:

  • Squarespace (website, forms and analytics) and Acuity Scheduling (session bookings and intake forms)

  • Stripe (payments)

  • Google Workspace (email, calendar, call bookings and Google Meet)

  • Practitioners and assistants who deliver your session, limited to what they need to do it safely

  • The hotel, villa or venue hosting your session, limited to what is needed to arrange access and timings

  • Our accountant or gestor, for tax and accounting

  • Authorities, courts or professional advisers, where the law requires it or to protect our legal rights

Each of these providers handles your data under its own data protection terms. Where we use a processor, it may only use your data on our instructions.

International transfers

Some of our providers, including Squarespace, Google and Stripe, may process data outside the European Economic Area, mainly in the United States. Where this happens, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses. Some of our collaborators are based in the United Kingdom, which the European Commission recognises as providing adequate protection.

How long we keep it

  • Enquiries that don't lead to a booking: up to 2 years after our last contact

  • Booking, invoicing and payment records: 6 years, as required by Spanish commercial and tax law

  • Health and suitability answers: deleted 12 months after your last session, unless you book again

  • Partnership contacts: for as long as we have an active or potential working relationship, and up to 2 years after our last contact

Your rights

Under the GDPR and Spanish data protection law (LOPDGDD), you have the right to:

  • access the personal information we hold about you

  • correct it if it is wrong or incomplete

  • ask us to delete it

  • restrict or object to how we use it

  • receive it in a portable format

  • withdraw your consent at any time, where we rely on consent

To use any of these rights, email hello@therestroom.co.uk. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority where you live.

Cookies

Cookies are small files stored on your device. Our website uses cookies set by Squarespace. Some are strictly necessary for the site to work and keep it secure. Others are analytics cookies that help us understand how visitors use the site. Where consent is required, we only set analytics cookies if you agree, and you can change your choice at any time through the cookie banner or your browser settings. Blocking cookies may affect how parts of the site work.

Marketing

We do not send marketing emails unless you have asked to receive them. Every marketing email includes a way to unsubscribe.

Children

Our services are intended for adults. Guests under 18 may only take part with the agreement and supervision of a parent or guardian, who provides any information on their behalf.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.