Privacy Notice

YOYO Yard and YOYO Sauna

Last updated 14 September 2026

YOYO Yard respects your privacy and is committed to protecting your personal information. This notice explains how we collect, use, store and share personal information when you use our website, contact us, make a booking, attend our premises or use our services.

1 Who we are

YOYO Yard, YOYO Sauna, we, us and our refer to Papillon Build Ltd, trading as YOYO Yard and YOYO Sauna.

Company number: 14477231

Registered office: 37 St. Nicholas Road, Brighton, England, BN1 3LP

Business address: 36 Cheltenham Place, North Laine, Brighton, BN1 4AB

Email: hello@yoyoyard.co.uk

For data protection purposes, Papillon Build Ltd is the controller of the personal information described in this notice.

2 Information we collect

Depending on how you interact with us, we may collect the following information.

Contact and identity information

This may include your name, email address, telephone number, postal address and your date of birth or age where relevant.

Booking and membership information

•  Sauna, event, course or accommodation bookings

•  Attendance history

•  Membership, pass and gift card details

•  Booking preferences and guest details

•  Correspondence about bookings, cancellations and refunds

•  Customer service records

•  Records showing that you accepted our terms, rules or waiver

Payment information

This may include payment status, purchase history, transaction references, refunds and limited payment card information. Payments may be processed through Stripe, Square or payment services connected to our booking platforms. We do not normally receive or store your complete card number or card security code. Stripe, Square and other payment providers may process information under their own privacy notices.

Health and accessibility information

Because sauna, cold water immersion, hot tubs and other wellness activities may not be suitable for everyone, we may ask you to confirm that you have read relevant health guidance and accepted a waiver.

You may choose to tell us about a medical condition, disability, pregnancy, medication, injury, accessibility requirement or other health matter so that we can respond appropriately. Health information is special category personal data and receives additional protection.

Please do not provide more medical information than is reasonably necessary. We do not provide medical advice. If you are unsure whether an activity is suitable for you, you should consult an appropriate healthcare professional.

Information about children

Where a child attends a family, Babes in Arms or other permitted session, we may collect their name, age or date of birth, booking information, relevant health or accessibility information and details of their responsible adult. The responsible adult must have authority to provide this information. Children should not independently make bookings or create accounts where parental or guardian involvement is required.

Accommodation information

•  Names and number of guests

•  Dates of stay

•  Contact and billing details

•  Arrival and departure information

•  Special requests

•  Identification information where legally required

•  Correspondence, complaints or incident records

•  Information needed to protect our premises, neighbours and guests

Enquiries and communications

We collect information you provide when you contact us through our website, email, telephone, Instagram, Facebook or another communication channel.

Technical and website information

When you use our website, we or our service providers may collect your IP address, browser and device type, approximate location, pages viewed, dates and times of visits, referral source, cookie identifiers and information about how you use the website. We use Google Analytics, subject to your cookie choices, to understand how people use our website and improve it.

Photographs and recordings

We may occasionally take photographs or recordings at events or around our premises. Where an individual is the clear subject of promotional content, we will normally ask for permission before using it. We may use general crowd or event photographs where this is reasonably expected and does not unfairly affect the people shown. Please tell a member of staff if you do not wish to be photographed.

Incident information

If an accident, complaint, safeguarding concern, suspected theft or other incident occurs, we may record relevant details. This may include witness information, correspondence, photographs and any action taken. We do not currently use CCTV at our premises.

3 How we obtain information

We usually collect information directly from you. We may also receive information from:

•  Someone making a booking on your behalf

•  A parent, guardian or responsible adult

•  Our booking, membership and accommodation platforms

•  Stripe, Square and other payment providers

•  Event organisers or course leaders

•  Social media platforms where you contact us

•  Referral or promotional partners

•  Insurers and professional advisers

•  Public authorities

•  Publicly available sources where appropriate

If you give us personal information about another person, you must have their authority to do so and should direct them to this privacy notice.

4 How and why we use information

The table below explains our main purposes and lawful bases.

Purpose

Normal lawful basis

Responding to an enquiry or booking request

Contract or steps before entering a contract

Managing bookings, memberships, gift cards, accommodation, courses and payments

Contract

Sending booking confirmations, reminders and essential service messages

Contract

Managing cancellations, refunds, complaints and customer service

Contract and legitimate interests

Keeping financial and tax records

Legal obligation

Operating our premises and activities safely

Legal obligation, legitimate interests or recognised legitimate interests

Establishing, exercising or defending legal claims

Legitimate interests and applicable legal claims conditions

Preventing fraud, theft, misuse and unlawful activity

Legitimate interests or recognised legitimate interests

Improving our website, facilities and services

Legitimate interests

Maintaining website and information security

Legitimate interests

Sending electronic marketing

Consent or the lawful customer soft opt in where applicable

Using Google Analytics or other optional cookies

Consent

Using promotional photographs or testimonials where permission is requested

Consent

Accommodating health, disability or accessibility needs

Explicit consent, legal obligation or another applicable special category condition

Responding to a medical emergency

Vital interests

Managing information about children attending permitted sessions

Contract, legitimate interests, legal obligation or vital interests depending on the circumstances

Where we rely on legitimate interests, these may include operating and improving our business, communicating with customers, protecting customers, staff and property, maintaining security, handling complaints and defending legal claims. We consider whether our interests are proportionate and whether our use of information could unfairly affect your rights.

5 Health information

We will only use health information where we have both a lawful basis and an additional legal condition for processing special category information. Depending on the circumstances, this may include:

•  Your explicit consent

•  Protecting someone’s vital interests during an emergency

•  Complying with an applicable legal obligation

•  Establishing, exercising or defending a legal claim

Where we rely on explicit consent, you can withdraw it at any time. Withdrawal does not affect information used before consent was withdrawn. We may retain limited information after consent is withdrawn where this is required by law or necessary in connection with an incident or legal claim.

6 Marketing

We may send you news, offers and information about YOYO Yard where you have actively subscribed, specifically agreed to receive it, or where the law allows us to contact an existing customer about similar services and we provided an opportunity to opt out.

You can unsubscribe at any time by selecting the unsubscribe link in an email or emailing hello@yoyoyard.co.uk. We may retain your email address on a suppression list so that we do not accidentally contact you again.

Booking confirmations, safety information, payment messages and important information about an existing booking or membership are service messages rather than marketing. We do not sell customer information or customer mailing lists.

7 Who we share information with

Where necessary, we may share information with trusted service providers, including:

•  Wix, which hosts and supports our main website and contact forms

•  Google Analytics, which helps us understand website usage where you have accepted analytics cookies

•  Periode, which provides sauna booking and membership services

•  Lodgify, which provides accommodation booking services

•  Stripe, which processes certain online payments

•  Square, which processes certain online or in person payments

•  Banks and other payment providers

•  Email and communications providers

•  IT, website and data storage providers

•  Event organisers, instructors or course leaders where necessary

•  Accountants, lawyers, insurers and professional advisers

•  Contractors supporting our premises or services

•  Emergency services, regulators, courts or law enforcement bodies where required or permitted by law

•  A purchaser, investor or professional adviser if our business or assets are reorganised, sold or transferred

These organisations may act as processors following our instructions or as independent controllers with their own privacy notices. If you follow a link to an external booking, payment or social media platform, that provider may collect information directly from you under its own privacy notice. We only share information that is reasonably necessary for the relevant purpose.

8 International transfers

Some providers, including Wix, Google, Stripe and Square, may store or access information outside the United Kingdom. Where the law requires it, we use or require an appropriate international transfer safeguard. This may include transfer to a country covered by UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another safeguard permitted under UK data protection law. You may contact us for further information about the safeguards applying to your information.

9 How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, insurance and reporting requirements. Our normal retention periods are:

Record

Normal retention period

General enquiries

Up to two years after our last communication.

Booking, membership and transaction records

Normally six years after the end of the relevant financial year or customer relationship.

Accommodation records

Normally six years after the booking.

Financial and tax records

Normally six years after the end of the relevant financial year, or longer where required by law.

Marketing information

Until you unsubscribe or withdraw consent, after which we may retain limited suppression information.

Health declarations and waivers

Only for as long as reasonably necessary for safety, insurance and legal claims purposes.

Accident, complaint and incident records

For the relevant legal claims period and longer where a claim or investigation remains open.

Google Analytics and cookie data

According to the retention period set within the relevant service and described in our cookie settings.

Records involving children may need to be retained for longer because different legal limitation periods can apply. When information is no longer required, we will delete it, anonymise it or securely destroy it.

10 Cookies and Google Analytics

Our website and connected booking services use cookies and similar technologies. Some cookies are strictly necessary for the website, security, bookings and payments to work. These do not normally require consent.

Other cookies are optional. These may include analytics cookies used by Google Analytics, functionality cookies, advertising or marketing cookies, and cookies placed by embedded content or social media services.

Where consent is required, optional cookies will only be used after you have made a choice through our cookie banner. You should be able to accept optional cookies, reject optional cookies and change or withdraw your choice later.

You can also block or delete cookies through your browser, although this may affect website functionality. Further information about individual cookies, their providers, purposes and expiry periods is available through our website’s cookie settings.

Google Analytics provides us with aggregated information about website visits and usage. We do not use Google Analytics to make decisions about individual customers.

11 Security

We use appropriate organisational and technical measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. Access is limited to staff, contractors and providers who reasonably need the information for their work. Where appropriate, they are subject to confidentiality and data protection obligations.

No online service can be guaranteed to be completely secure. If you believe information you have provided has been compromised, please contact us promptly.

12 Your rights

Depending on the circumstances, you may have the right to:

•  Receive a copy of the personal information we hold about you

•  Ask us to correct inaccurate or incomplete information

•  Ask us to delete information

•  Ask us to restrict how information is used

•  Object to particular uses, including direct marketing

•  Receive certain information in a portable electronic format

•  Withdraw consent where we rely on consent

•  Challenge certain decisions made solely by automated means

These rights are not absolute and legal exemptions may apply. We do not currently make decisions that have legal or similarly significant effects on customers solely through automated processing.

To exercise a right, email hello@yoyoyard.co.uk. We may ask for information to confirm your identity. We will not normally charge a fee.

13 Complaints

Please contact us if you have concerns about how we have used your information:

Email: hello@yoyoyard.co.uk
Business address: YOYO Yard, 36 Cheltenham Place, North Laine, Brighton, BN1 4AB
Registered office: Papillon Build Ltd, 37 St. Nicholas Road, Brighton, BN1 3LP

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

We would appreciate the opportunity to address your concern first, although you may contact the ICO at any time.

14 External websites

Our website contains links to external websites and services. We are not responsible for how independent third parties use information, and you should review their privacy notices before providing information.

15 Changes to this notice

We may update this notice when our services, providers or legal obligations change. The latest version will be published on our website with the revised date. If a change significantly affects how we use existing customer information, we will take reasonable steps to bring it to your attention.