Privacy & Cookie Policy
Last updated: June 2026
In plain English: We collect only what we need, we never sell your data, and where we earn affiliate commission through links on this site it never influences our editorial opinion. AI-assisted content is always reviewed by a human editor before publication.
1. Introduction
1.1 We are committed to safeguarding the privacy of The Spa Traveller website visitors and service users.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users — in other words, where we determine the purposes and means of the processing of that personal data.
1.3 We use cookies on our website. Where cookies are not strictly necessary for the provision of our services, we will ask for your consent when you first visit.
1.4 In this policy, “we”, “us” and “our” refer to Van der Meulen Collection Limited, operator of The Spa Traveller and associated websites. See Section 11 for our full details.
2. Affiliate Disclosure
2.1 The Spa Traveller participates in affiliate advertising programmes. Where we include links to products or services, we may earn a commission if you make a purchase — at no additional cost to you.
2.2 Affiliate programmes we participate in include:
- Amazon Associates (Amazon.co.uk) — tracking tag: spatraveller-21
- Expedia Creator Programme
- Awin publisher network (publisher ID: 2769664) — including Avant Skincare, Raw Beauty Lab, Pure Beauty, Environ Skincare, and other approved advertisers
- Spabreaks.com — currently active via Rakuten; migrating to Awin (ID: 126843). Existing links remain active during transition.
2.3 Affiliate relationships never influence our editorial recommendations. We recommend properties, products and services on the basis of editorial merit alone. All affiliate links are labelled “affiliate” or “partner” where they appear on the site.
3. AI Content Disclosure
3.1 The Spa Traveller uses artificial intelligence tools to support content research, drafting and curation. AI-assisted content is always reviewed, fact-checked and approved by a human editor before publication.
3.2 Our editorial AI persona, Serena, is clearly identified as an AI assistant wherever her name appears. We do not present AI-generated content as being written by a human. This is consistent with UK ASA guidance on AI-generated and AI-assisted content.
4. How We Use Your Personal Data
4.1 We may process the following categories of personal data:
- Usage data — IP address, browser type, pages visited, referral source, session duration. Processed via Google Analytics and Cloudflare for the purpose of improving our website and services.
- Account data — name and email address, where you register or subscribe. Used to operate our newsletter and member services.
- Enquiry data — information submitted via our contact form, used solely to respond to your enquiry.
- Transaction data — where purchases are made through our commerce properties (Spa Basket, Golf Basket). Processed only to fulfil orders.
- Newsletter data — email address and preferences, where you subscribe to our mailing list.
4.2 We do not sell personal data to third parties.
4.3 Please do not supply another person’s personal data to us unless we prompt you to do so.
5. Sharing Your Data
5.1 We may share your data with service providers who assist in operating our website and business, including email service providers, analytics platforms and payment processors, strictly for those purposes.
5.2 Payment transactions on our commerce sites are handled by PayPal and Stripe. Their privacy policies are available at paypal.com and stripe.com respectively.
5.3 We may disclose data where required by law or to protect our legal rights.
6. Data Retention
6.1 Personal data is not kept longer than necessary for the purpose for which it was collected.
6.2 Newsletter subscriber data is retained while your subscription is active and for up to 24 months after you unsubscribe.
6.3 Enquiry data is retained for up to two years from last contact. Financial records are retained for seven years as required by HMRC.
7. Your Rights
7.1 Under UK GDPR you have the right to: access your personal data; have inaccurate data corrected; request erasure; restrict or object to processing; data portability; and to withdraw consent at any time.
7.2 To exercise any of these rights, please contact us via our Contact page.
7.3 You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Cookies
8.1 A cookie is a small text file placed on your device by a web server. We use cookies for the following purposes:
- Essential: site authentication, security and core site functionality
- Analytics: Google Analytics — to understand how visitors use our site
- Security: Cloudflare — sets security and performance cookies to protect the site and its visitors
- Advertising: Google AdSense — to serve relevant advertising on this site
- Affiliate tracking: cookies set when you click a partner link, allowing affiliate programmes to attribute qualifying purchases to The Spa Traveller
- Preferences: to remember your settings and consent choices
8.2 We use Google Analytics to analyse site usage. Google’s privacy policy is at policies.google.com/privacy.
8.3 Cloudflare provides security and performance services for this website and may set cookies on your device. Cloudflare’s privacy policy is at cloudflare.com/privacypolicy.
8.4 Google AdSense is used to display advertisements on this site. AdSense may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising at adssettings.google.com.
8.5 Affiliate tracking cookies are set when you click a partner link. These allow our affiliate programmes to attribute any resulting purchases to The Spa Traveller.
8.6 You can manage or block cookies via your browser settings. Note that blocking essential or security cookies may affect site functionality. Browser guidance:
9. International Transfers
9.1 Our website is hosted in the United Kingdom. Some service providers (including Google and Cloudflare) may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR.
10. Policy Updates
10.1 We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Significant changes will be communicated by email where we hold your contact details.
11. Our Details
11.1 This website is owned and operated by Van der Meulen Collection Limited.
11.2 Registered in England and Wales, company number 11094911.
11.3 Registered office: Suite 4, 20 Winchcombe Street, Cheltenham, Gloucestershire, GL52 2LY.
11.4 To contact us regarding this policy: thespatraveller.com/contact/