You are here: Home » Privacy Policy
We're social

Privacy Policy

This Privacy Policy applies even if you have bought treatments or signed up for membership via a third party (such as Treatwell or Incorpore), as this Privacy Policy forms part of your contract with us for the provision of our services.

Mosaic Spa & Health Clubs is committed to protecting your safety and privacy, and takes its responsibilities regarding the security of customer information very seriously. This privacy policy explains what personal data we collect about you, how and why we use it, who we disclose it to, and how we protect your privacy.

1. Who is responsible for your data

Our Privacy Policy applies to the personal data that Mosaic Spa & Health Clubs collects and uses.

References in this Privacy Policy to “Mosaic Spa & Health Clubs”, “we”, “us” or “our” mean Mosaic Spa & Health Clubs (Contract Management) Limited (a company registered in England and Wales with registration no 5074077 and registered office at Park Farm Hethersett Norwich NR9 3DL). We control the ways your personal data are collected and the purposes for which your personal data are used by Mosaic Spa & Health Clubs and are the “data controller” for the purposes of the EU General Data Protection Regulations 2016 alongside the owners of the properties our sites are within.

Mosaic Spa & Health Clubs operate health clubs and spas under the following brands – Fitness Express, Le Club Health & Fitness, Imagine Health & Spa, The Shrewsbury Club, Holmer Park Health Club & Spa, The Gainsborough Spa & Health Club, Shrewsbury College, Hallmark Health Clubs and Spas, Ufford Park Spa & Health Club.

2. Personal data we collect about you

When using the term “personal data” in our Privacy Policy, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold. Your personal data may include for example your name, your contact details, information relating to your booking or membership or information on how you use our website or how you interact with us.

We collect some personal data from you, for example when you book a treatment with us, use our website, use our health clubs or contact us. We may also receive your personal data from our suppliers who provide services to you on our behalf (for example when you provide feedback on our services), our partners when you purchase gift vouchers or third parties who act on your behalf, for example spa booking operators who book a treatment for you. If you book a spa treatment or buy membership on behalf of someone else, you must have their consent to use their personal information.

For more information on the parties who may share your personal data with us, please see section 7 below.

Categories of data we collect

We may collect and process the following categories of information about you:

Your name and surname and your contact details
(email address, telephone number and postal address)


Information about your bookings or your membership, if you require special assistance or if you have specific dietary requirements. This information may include any changes to your bookings that relate to your booking (for example if you pre-order food or request a particular treatment).


Information about your health, if you have a medical condition that may affect your visit or membership (please see section “Sensitive personal data” below for more information)


Information about other customers in your booking.


Information about your transaction, including your payment card details or direct debit details


Information about your purchases of our partners’ related products and services


Information about the purchase of products available


The communications you exchange with us (for example, your emails, letters, calls, or your messages on our online chat service)


Your posts and messages on social media directed to Mosaic Spa & Health Clubs and it’s brands


Your feedback


Information that relates to your memberships

Sensitive personal data

In the course of providing services to you, we may collect information that could reveal your physical or mental health, religious beliefs or alleged commission or conviction of criminal offences. Such information is considered “sensitive personal data” under the EU General Data Protection Regulations 2016 and other data protection laws. We only collect this information where you have given your explicit consent, it is necessary, or you have deliberately made it public.

For example, we may collect this information in the following circumstances:

For your safety, when you have a specific medical condition that may affect the treatments we can offer you or the exercise you can do in our health clubs, you will need to inform us of.
If you request special assistance during a visit, this could reveal information about your health (for example if you ask for wheelchair assistance). If you inform us about specific dietary requirements you may have, this could potentially indicate that you have specific religious beliefs.

By providing any sensitive personal data you explicitly agree that we may collect and use it in order to provide our services and in accordance with this Privacy Policy.

If you do not allow us to process any sensitive personal data, this may mean we are unable to provide all or parts of the services you have requested from us. Please be aware that in such circumstances you will not be entitled to cancel or obtain a refund of any price you have paid.

3. How and why we use your personal data

We use your personal data for the following purposes:

To manage your spa bookings and provide our membership services to you

To communicate with you and manage our relationship with you

To personalise and improve your customer experience

To inform you about news and offers that you may like

To improve our services, fulfil our administrative purposes and protect our business interests 

To comply with our legal obligations, for example, our obligation to provide your information to HMRC or to pay you if you are an employee.

To process your job application, including inviting you for interview or sending you communications about the success of your application

To protect your vital interests, for example to supply information to a paramedic in the case of an emergency

4. Requesting access to your personal data

You have a right to request access to the personal data that we hold about you. This could include booking information relating to treatments you have taken with us or your club membership.

If you have questions in relation to your personal data, please contact us at: headoffice@mosaicgroup.co.uk.

5. Security of your personal data

We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data. When you provide your personal data through our website this information is transmitted across the internet securely using high-grade encryption.

As described in this Privacy Policy, we may in some instances disclose your personal data to third parties. Where we disclose your personal data to a third party, we require that third party to have appropriate technical and organisational measures in place to protect your personal data; however in some instances we may be compelled by law to disclose your personal data to a third party, such as HMRC, and have limited control over how it is protected by that party.

The information that you provide to us will be held in our systems, which are located on our premises or those of an appointed third party. We may also allow access to your information by other third parties who act for us for the purposes described in this Privacy Policy or for other purposes approved by you. Your personal data may be accessed by and processed outside the European Economic Area (the European Economic Area being the European Union and Iceland, Liechtenstein and Norway, also referred to as the “EEA”) – including by staff operating outside the EEA who work for us or for one of our suppliers or agents (this includes staff engaged in, among other things, the provision of support services). Where your personal data are transferred outside of the EEA, we require that appropriate safeguards are in place.

We will retain your personal data for as long as we need it in order to fulfil our purposes set out in this Privacy Policy or in order to comply with the law.

6. Cookies or other tracking technologies

Our website uses “cookies” to track visitors on our website to help us better understand how they use it. These cookies do not contain or pass any personal, confidential or financial information or any other information that could be used to identify individual visitors. Please note that you are free to refuse cookies. .

For more information on deleting or controlling cookies we recommend www.AboutCookies.org.

7. Third Parties

Your personal data may be shared with other departments within our group. It may also be disclosed to a third party who acquires us, a member of our Group or substantially all of our assets. We may also in limited circumstances, disclose your personal information to third parties if we are under a legal obligation to do so for example HMRC.

Some of our suppliers will have temporary access to your information and we use them to help our service. We only use suppliers who follow GDPR guidelines themselves and include the following:

8. Social Media

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

Visitors are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Visitors are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

9. Updates to our Privacy Policy

We may make changes to this Privacy Policy from time to time, we will update the Privacy Policy and we will publish on our website any new version of this Policy.

9. Contact information

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to headoffice@mosaicgroup.co.uk

Privacy © 2018 Imagine Health & Spa