Legal
Privacy Policy
Last updated: June 2025
1. Data Controller
The data controller for this website is The Railway Yard Sauna, Ballacolla Road, Abbeyleix, Co. Laois, Ireland.
Contact: info@railwayyardsauna.ie
2. Data We Collect
We collect and store personal data directly when you make a booking or send a contact enquiry. We also use third-party processors for payment and email delivery.
| Source | Data collected | Purpose |
|---|---|---|
| Booking system (our database) | Name, email, session type, date, seats booked, booking status | Booking management and confirmation |
| Stripe | Payment card details, payment reference IDs | Payment processing |
| Contact form | Name, email, message | Responding to enquiries |
Booking records (including your name, email, and session details) are stored in our own database hosted on Vercel Postgres. Contact form messages are delivered to us via Resend and are not stored independently by that service.
3. Legal Basis for Processing
Personal data is processed on the following legal bases under GDPR Article 6:
- Contract performance — processing your booking and payment.
- Legitimate interests — responding to contact form enquiries.
4. Cookies
This website sets no first-party cookies. We do not use analytics, tracking pixels, or session storage for personal data. Our booking system is built into this website and does not introduce any additional cookies.
5. Data Retention
Booking records held in our database are retained for as long as necessary to manage your booking and comply with any applicable legal obligations (such as financial record-keeping requirements). Data held by Stripe is retained in accordance with their privacy policy. If you would like your booking data removed, contact us at info@railwayyardsauna.ie.
6. Third-Party Processors
Each processor operates under their own privacy policy:
- Stripe (payment processing): stripe.com/ie/privacy
- Resend (transactional email delivery): resend.com/privacy
- Vercel (hosting and database infrastructure): vercel.com/legal/privacy-policy
7. Your Rights
Under GDPR you have the right to: access, rectify, erase, restrict, or port your personal data; object to processing; and withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at info@railwayyardsauna.ie. You also have the right to lodge a complaint with the Data Protection Commission of Ireland.
8. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.