Home / Privacy Policy
LegalPrivacy & your data
This policy explains what personal data Le Chalet Clinic collects, why we collect it, how we use and protect it, and the rights you have over it under the UK GDPR and the Data Protection Act 2018.
Last updated: June 2026
Le Chalet Cryo Ltd, trading as Le Chalet Clinic (“we”, “us”, “our”), is the data controller responsible for your personal data. We operate the website chalet.clinic and a wellness clinic at 34 North Colonnade, Canary Wharf, London E14 5HX. If you have any questions about this policy or how we handle your data, you can contact us using the details in the “Contact us” section below.
Depending on how you interact with us, we may collect:
Identity & contact data — your name, email address, phone number and postal address, for example when you book a session, buy a gift card or sign up to our newsletter.
Booking & transaction data — details of the sessions, memberships and products you book or purchase, and records of payments (payment card details are handled by our payment and booking provider, not stored by us directly).
Health & consent data — where relevant to your safe use of cryotherapy or hyperbaric oxygen therapy, information you provide in consent forms and health questionnaires. This is special category data and is handled with additional care.
Technical & usage data — your IP address, browser type, device information and how you use our website, collected via cookies and similar technologies (see our Cookie Policy).
We use your personal data on the following legal bases:
To perform our contract with you — to take and manage bookings, process payments, administer memberships and provide our services safely.
For our legitimate interests — to run, improve and secure our business and website, and to respond to your enquiries.
With your consent — to send you marketing emails and our newsletter, and to set non-essential cookies. You can withdraw consent at any time.
To comply with a legal obligation — for example, keeping financial records for the period required by law.
We do not sell your personal data. We share it only with trusted service providers who help us run our business — including our booking and payment platform (Mindbody), our email/newsletter provider, website hosting and analytics providers — and only to the extent they need it to provide their service to us. We may also disclose data where required by law or to protect our legal rights. Some providers may process data outside the UK; where they do, we take steps to ensure an adequate level of protection in line with UK data protection law.
We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting or reporting requirements. Booking and health-consent records are retained for the period required for safety and legal reasons; marketing data is kept until you unsubscribe or ask us to delete it.
Under UK data protection law you have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. To exercise any of these rights, please contact us using the details below.
Our website uses cookies and similar technologies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.