OnlyTANS Group Ltd

Last updated: 11 March 2026

OnlyTANS Group Ltd (“OnlyTANS”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you:

• Visit www.onlytans.co.uk

• Use our tanning salon services

• Purchase products from us

• Enrol in training courses

• Contact us or interact with our marketing

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller:

OnlyTANS Group Ltd

Website: https://www.onlytans.co.uk

Email: info@onlytans.co.uk

For any privacy-related enquiries please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following information:

Identity Data

• Name

• Date of birth (where required for sunbed usage)

Contact Data

• Email address

• Phone number

• Address (for product deliveries)

Account Data

• Login information

• Purchase history

• Booking records

Health & Safety Information

Where required for tanning services we may collect limited health information relevant to safe sunbed usage (for example skin type questionnaires).

Technical Data

• IP address

• Browser type

• Device information

• Cookies and usage data

Marketing Data

• Preferences in receiving marketing

• Engagement with promotions or social media campaigns

3. How We Collect Your Data

We collect data when you:

• Book tanning sessions

• Purchase products

• Create an account

• Sign waivers or safety forms

• Enrol in courses or training

• Subscribe to newsletters

• Contact us via email or social media

• Use our website

We may also collect information automatically through cookies and analytics tools.

4. How We Use Your Data

We use your personal data for the following purposes:

Providing Our Services

• Managing tanning salon bookings

• Processing purchases

• Delivering products

Safety & Compliance

• Ensuring safe use of tanning equipment

• Recording consent forms and waivers

Customer Support

• Responding to enquiries

• Managing customer accounts

Improving Our Services

• Analysing website usage

• Improving customer experience

Marketing & Promotions

• Sending newsletters or promotions

• Informing you about new products or services

You can opt out of marketing communications at any time.

5. Legal Bases for Processing

Under UK GDPR we rely on the following lawful bases:

Contractual necessity

To provide services you have requested.

Legitimate interests

To operate and improve our business and services.

Legal obligation

To comply with legal and regulatory requirements.

Consent

For marketing communications or certain cookies.

6. Sharing Your Data

We may share your data with trusted service providers including:

• Payment processors

• Website hosting providers

• Booking or CRM systems

• Marketing platforms (e.g. email providers)

• Analytics services (e.g. Google Analytics)

We only share information necessary for the service to be performed.

We do not sell your personal data.

7. International Data Transfers

Some of our service providers may operate outside the United Kingdom.

Where data is transferred internationally we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses

• Adequacy decisions

• Secure data processing agreements

8. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods include:

Customer records: 6 years (for accounting purposes)

Marketing data: until you unsubscribe

Website analytics: up to 26 months

Health & safety records may be retained where required for legal compliance.

9. Your Rights

Under UK GDPR you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion of your data

• Restrict processing

• Object to marketing

• Request data portability

You may exercise these rights by contacting us.

10. Data Security

We take appropriate technical and organisational measures to protect personal data including:

• Secure servers

• Encryption where appropriate

• Restricted access to information

• Regular security monitoring

11. Cookies

Our website uses cookies and similar technologies.

Full details can be found in our Cookies Policy.

12. Third-Party Links

Our website may contain links to external websites.

We are not responsible for the privacy practices of third-party websites.

13. Children’s Data

Our services are not intended for individuals under 18 years old without appropriate supervision and consent where required.

14. Complaints

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the UK regulator:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

15. Changes to This Policy

We may update this Privacy Policy from time to time.

Updates will be posted on this page with the revised last updated date.