Call Now 07766 518179
Monday - Sunday (8.00 - 22.00)
We would like to remind everyone using the pool that under no circumstances is alcohol allowed anywhere in the building.
We will be doing regular checks, anyone found with alcohol will be asked to leave immediately.
SWIMMING LESSONS 💧Small classes 💧Fun based learning 💧Ideal confidence boost 💧Great intro for lessons 💧Excellent boost for going on holidays 😎 💧Water based instructors 💧1-1 or sibling classes 💧From 3 years 💧Nervous older children classes

Privacy Policy

Last updated: 21 June 2026

This policy explains how Sandylands Pool collects and uses your personal information when you use our website https://sandylandspool.co.uk to make a booking, buy a gift card, or contact us, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Sandyland Properties Limited, trading as Sandylands Pool ("we", "us", "our"), is the data controller responsible for your personal information.

  • Business name: Sandyland Properties Limited, trading as Sandylands Pool
  • Company number: 07100601 (registered in England & Wales)
  • Address: Sandylands Pool, New Cowper, Wigton, Cumbria, CA7 3LD
  • Email: swim@sandylandspool.co.uk
  • Telephone: 07766 518179

The information we collect

Depending on how you use the site, we collect:

  • Booking details: your first and last name, email address and telephone number, along with the date, time and price of your booking.
  • Payment information: your card payment is processed securely by Square. Your full card number is entered directly into Square's secure payment field and is not seen or stored by us. We retain only a payment reference and the last 4 digits of the card (provided by Square) so we can identify the payment and process any refund. The billing address you enter at checkout is passed to Square to verify your card (3-D Secure) and is not stored in our systems.
  • Gift card purchases: your name, email address and telephone number, plus the gift card reference.
  • Amend / cancel your booking: a passcode we send you by email, which you use together with your email address to access your booking.
  • Contact form: your name, email address and the content of your message. The form is protected from spam by Google reCAPTCHA.
  • Technical data: a single essential session cookie (see "Cookies" below). We do not use analytics, advertising or tracking cookies.

How we use your information, and our lawful basis

Under the UK GDPR we must have a lawful basis for using your personal data. Our bases are:

  • To take and manage your booking and process payment — lawful basis: performance of a contract with you.
  • To send you booking confirmation, amendment and cancellation emails — lawful basis: performance of a contract.
  • To sell and issue gift cards — lawful basis: performance of a contract.
  • To process refunds and respond to booking queries — lawful basis: performance of a contract / legitimate interests.
  • To keep accounting and tax records — lawful basis: legal obligation.
  • To keep the website and bookings secure and prevent fraud and spam (including Google reCAPTCHA on the contact form) — lawful basis: legitimate interests in protecting our business and customers.
  • To respond to messages you send us — lawful basis: legitimate interests in answering enquiries.

We do not currently use your information for marketing. If that changes, we will ask for your consent first.

Cookies

We use one strictly necessary cookie (a PHP session cookie, PHPSESSID) that keeps your session working while you book or manage a booking. It contains no personal data and is not used to track you. Because it is essential to provide the service you ask for, it does not require consent under the Privacy and Electronic Communications Regulations (PECR). We do not use any analytics, advertising or social-media tracking cookies.

Who we share your information with

We do not sell your personal data. We share it only with the providers that help us run the service:

  • Square — processes card payments and refunds.
  • Google reCAPTCHA — protects the contact form from spam.
  • Our website hosting and email providers — host the site and send your confirmation emails.

These providers act on our instructions and are only permitted to use your data to provide their service to us. We may also disclose your information where we are legally required to do so, or to establish, exercise or defend legal claims.

International transfers

Some of our providers (including Square and Google) are based in the United States, so your data may be transferred outside the UK. Where it is, the transfer is protected by appropriate safeguards recognised under UK law — such as the UK extension to the EU–US Data Privacy Framework and/or the International Data Transfer Agreement (or Standard Contractual Clauses).

How long we keep your information

We keep your personal data only for as long as we need it:

  • Booking and payment records: 6 years (to meet HMRC tax and accounting requirements), after which they are deleted or anonymised.
  • Gift card records: 6 years.
  • Contact form messages: 6 months.

How we keep your information secure

The site is served over an encrypted (HTTPS/TLS) connection, card data is handled by Square under the PCI-DSS standard, and access to booking data is restricted and password-protected. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Your rights

Under the UK GDPR you have the right to:

  • be informed about how we use your data (this notice);
  • request a copy of the personal data we hold about you (access);
  • have inaccurate data corrected (rectification);
  • ask us to delete your data (erasure), where applicable;
  • restrict or object to our processing of your data;
  • request your data in a portable format (data portability); and
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please contact us at swim@sandylandspool.co.uk. We will respond within one month.

Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority:

  • Information Commissioner's Office (ICO)
  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113

Children

Our website and booking service are intended for adults (18 or over) making bookings. We do not knowingly collect personal data from children through the site. Children are welcome at the pool but must be booked in and accompanied by a responsible adult.

Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version on this page and change the "Last updated" date above.

Contact us

For any questions about this policy or your personal data:

  • By email: swim@sandylandspool.co.uk
  • By phone: 07766 518179
  • By post: Sandylands Pool, New Cowper, Wigton, Cumbria, CA7 3LD