Legal
Privacy Policy
1. Who We Are
Pulse Wellness Marbella S.L. ("Pulse", "we", "us", "our") operates Pulse Sauna Ice Club at AV. Pilar Calvo, Puerta 16-17, Edificio Plaza de Toros, 29660 Marbella, Spain. We are the data controller responsible for your personal information.
For privacy-related questions, contact us at info@pulsesaunaiceclub.com.
2. What Data We Collect
We collect personal data in the following ways:
- Account & booking data: name, email address, phone number, date of birth, and booking history when you create an account or make a reservation
- Payment data: billing address and transaction records (card details are processed securely by our payment provider and never stored by us)
- Health information: any health conditions you voluntarily disclose for safety purposes before participating in sessions
- Communications: messages you send us via email, contact forms, or social media
- Newsletter: email address if you subscribe to our mailing list
- Discovery Pack offer signups: when you enter your email in our Discovery Pack offer modal and tick the optional marketing checkbox, we store your email along with a record of your marketing consent. If you do not tick the checkbox, we do not store your email.
- Technical data: IP address, browser type, device information, and pages visited when you use our website
3. How We Use Your Data
We use your personal data to:
- Process bookings, payments, and manage your account
- Send booking confirmations, reminders, and service-related communications
- Ensure your safety during sessions and respond to health-related needs
- Send marketing communications and offers — only with your consent
- Improve our website, services, and customer experience through analytics
- Comply with legal obligations, including financial record-keeping
For the Discovery Pack offer modal specifically: if you tick the marketing checkbox, we store your email and may use it to send you Pulse updates (which you can withdraw at any time — see Section 7). If you do not tick the checkbox, we do not store your email or associate it with any analytics; we only redirect you to our booking page.
4. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
- Contract performance: to fulfil bookings and manage your membership
- Legitimate interests: to improve our services, prevent fraud, and ensure safety
- Consent: for marketing emails and optional health disclosures — you may withdraw consent at any time
- Legal obligation: for tax, financial, and regulatory compliance
For email captured via our Discovery Pack offer modal, we rely solely on explicit consent given by ticking the optional marketing checkbox (GDPR Art. 6(1)(a)).
5. Sharing Your Data
We do not sell your personal data. We may share it with trusted third parties only where necessary:
- Booking & CRM platform (Glofox): to manage reservations and member accounts
- Payment processors: to handle transactions securely
- Email service providers: to send transactional and marketing emails
- Analytics providers (PostHog): we share usage data such as page views and event data to understand how visitors use our site. Where you have given explicit consent (e.g. via the Discovery Pack marketing checkbox), analytics providers may receive identifiable data (your email) linked to your activity. Otherwise, analytics data is anonymised where possible.
- Legal authorities: where required by law or to protect our legal rights
All third-party providers are required to handle your data in compliance with GDPR and applicable data protection laws.
6. Data Retention
We retain your personal data only for as long as necessary:
- Account and booking data: for the duration of your membership plus 3 years
- Financial transaction records: 7 years as required by Spanish tax law
- Health disclosures: deleted within 12 months of your last visit
- Marketing consent records: until you unsubscribe or withdraw consent
- Discovery Pack lead-capture emails and consent records: retained until you withdraw consent or request deletion (see Section 7).
7. Your Rights
Under GDPR you have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your data where there is no legitimate reason for us to retain it
- Restriction: ask us to limit how we process your data in certain circumstances
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests or for direct marketing
- Withdraw consent: at any time, where processing is based on consent
To exercise any of these rights, email us at info@pulsesaunaiceclub.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
8. Cookies
Our website uses cookies to improve your experience and analyse traffic. We use:
- Essential cookies: required for the website to function — no consent needed
- Analytics cookies: to understand how visitors use our site (e.g. Google Analytics) — enabled only with your consent
- Marketing cookies: to deliver relevant content and measure campaign performance — enabled only with your consent
You can manage or withdraw cookie consent at any time through your browser settings.
8a. QR code scan analytics
When you scan one of our printed QR codes, we log the time of the scan, an irreversibly hashed form of your IP address, your approximate country and city (derived from your IP, not GPS), and your browser user-agent string. We do not store raw IP addresses. We use this data solely to measure how our printed materials perform. Records are automatically deleted after 90 days.
The legal basis for this processing is our legitimate interest in measuring the performance of our printed marketing materials (Art. 6(1)(f) GDPR).
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption, and access to member data is restricted to authorised staff only.
No method of transmission over the internet is 100% secure. While we take your data security seriously, we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. We encourage you to review this policy periodically. Continued use of our services constitutes acceptance of any updates.
11. Contact
For any privacy-related questions, requests, or complaints, please contact us at info@pulsesaunaiceclub.com or write to us at AV. Pilar Calvo, Puerta 16-17, Edificio Plaza de Toros, 29660 Marbella, Spain.