Last updated: 28 September 2026
1. Who we are
This privacy policy explains how PlusLife Health collects and uses your personal data when you visit www.pluslifehealth.co.uk, buy from us, speak to our sales team, or contact us for support.
The data controller is Wellness Technology Australia Pty Ltd (ACN 661 558 229), trading as PlusLife Health, of Suite 806, 35-45 Spring Street, Bondi Junction NSW 2022, Australia.
We are established outside the United Kingdom. Because we offer goods to people in the UK, we are subject to the UK General Data Protection Regulation and we have appointed a representative in the UK under Article 27. Their details are in section 13.
2. The personal data we collect
2.1 Information you give us
- Contact and identity details. Name, email address, postal address, delivery address, telephone number.
- Order details. What you bought, your sauna configuration, order value, order and invoice history.
- Delivery and installation details. Site access information, gate and driveway measurements, photographs of your site or installation that you send us, the name of your electrician or installer where you tell us.
- Account details. Username and password where you create an account.
- Support and warranty information. The content of your emails, calls and chat messages, photographs and video you send us to diagnose a fault, serial numbers and service history.
- Correspondence. Anything else you choose to tell us.
2.2 Information we collect automatically
- Device and usage data. IP address, browser type and version, operating system, device type, the pages you visit, how long you spend on them and what you click.
- Session recordings and heatmaps. Where you have consented to analytics cookies, we record how visitors move through and interact with the site so we can improve it. These recordings are pseudonymised and we do not use them to identify you.
- Cookies and similar technologies. See section 9.
2.3 Payment information
Card payments are processed by our payment providers. We do not see or store your full card number. We receive confirmation that a payment succeeded, the last four digits, the card type and the expiry date.
2.4 Call recording
We sell by telephone as well as online. We may record and transcribe sales and support calls for training, quality assurance, and to keep an accurate record of what was agreed about your order. We will tell you at the start of a call if it is being recorded. If you do not want to be recorded, tell us and we will either stop the recording or continue the conversation by email.
2.5 Information from other sources
We may receive information about you from our payment providers, our delivery partners, installers you have asked us to work with, and advertising platforms where you have consented to that sharing on their service.
2.6 Data we do not want
We do not ask for and do not need special category data, including information about your health. Saunas are not medical devices and we cannot give health advice. Please do not send us health information. If you do, we will use it only to answer your question and then delete it.
3. Why we use your data, and our lawful basis
| What we use it for | Data used | Lawful basis |
|---|---|---|
| Taking and fulfilling your order, including delivery and installation arrangements | Contact, order, delivery and site details | Performance of a contract with you |
| Taking payment and issuing invoices | Contact, order and payment confirmation details | Performance of a contract, and legal obligation for tax records |
| Customs clearance and import formalities, as importer of record | Name, delivery address, order value | Legal obligation |
| Providing support, diagnosing faults and handling warranty claims | Contact, order, support correspondence, photographs and video, serial numbers | Performance of a contract, and our legitimate interest in supporting our products |
| Recording and transcribing calls for training and quality | Call audio and transcript | Our legitimate interest in training our team and keeping an accurate record of what was agreed |
| Managing your account | Account and order details | Performance of a contract |
| Sending marketing emails and messages | Name, email address, purchase and browsing history | Your consent, or our legitimate interest where you have bought from us and we are marketing similar products and you can opt out at any time |
| Inviting you to leave a review | Name, email address, order details | Our legitimate interest in collecting feedback |
| Online advertising and measuring how our adverts perform | Device and usage data, hashed email address where you have an account | Your consent, given through our cookie banner |
| Understanding how the website is used and improving it | Device and usage data, session recordings | Your consent, given through our cookie banner |
| Preventing fraud and securing our systems | Device data, order and payment data | Our legitimate interest in protecting our business and our customers |
| Keeping business, accounting and product safety records | Order, invoice and product records | Legal obligation, and our legitimate interest in defending claims |
| Product safety, traceability and any recall | Name, contact details, serial number, delivery address | Legal obligation as a producer under UK product safety law |
Where we rely on legitimate interests, we have considered whether that interest is outweighed by your rights, and you can object at any time under section 10.
4. Marketing
4.1 We will send you marketing emails only where you have asked us to, or where you have bought from us and we are telling you about similar products. Every marketing message has an unsubscribe link and you can opt out at any time, including by emailing us at the address in section 13.
4.2 Opting out of marketing does not stop us sending you messages about an order you have placed, such as delivery updates or warranty notices. Those are part of the service.
4.3 We do not sell your personal data, and we do not share it with third parties for their own marketing.
5. How long we keep your data
| Data | How long we keep it |
|---|---|
| Order, invoice and accounting records | 7 years from the end of the financial year, to meet tax record keeping requirements |
| Warranty and product safety records, including serial numbers and installation details | 10 years from delivery, covering the warranty period and the limitation period for claims |
| Support correspondence and fault diagnostics | 3 years from the case closing |
| Call recordings and transcripts | 6 months, unless the call relates to an order or a dispute, in which case we keep it with the order record |
| Account details | While your account is open, and 2 years after your last activity |
| Marketing contact details and preferences | Until you unsubscribe, and then a minimal record so we do not contact you again |
| Website analytics and session recordings | Up to 13 months |
| Enquiries that do not become orders | 2 years from your last contact with us |
Where we no longer need your data we delete it or anonymise it so it can no longer identify you.
6. Who we share your data with
We share your data only with organisations that need it to provide our service to you. Each of them acts on our instructions under a written contract, except where marked as a controller in their own right.
| Who | What for | Where they process data |
|---|---|---|
| Shopify | Our online store, checkout, customer accounts and order records | Canada, United States, EEA |
| Stripe | Card payment processing. Stripe is a controller in its own right for fraud prevention and regulatory purposes | United States, EEA |
| Klaviyo | Email marketing and order notifications | United States |
| Gorgias | Our customer support helpdesk | United States, EEA |
| Advertising and website analytics, and our business email and file storage | United States, EEA | |
| Meta | Advertising and measuring advert performance | United States, EEA |
| Microsoft | Website session recording and heatmaps | United States, EEA |
| Our telephony provider | Taking calls, and recording and transcribing them | United Kingdom, EEA, United States |
| Trustpilot | Inviting and publishing customer reviews. Trustpilot is a controller in its own right for the reviews you publish | Denmark, EEA |
| Our freight forwarder, carriers and customs broker | Delivering your order and clearing it through customs | United Kingdom, EU |
| Installers and electricians we arrange | Assembling and connecting your sauna. They are controllers in their own right for their own records | United Kingdom |
| Our manufacturers | Building your sauna to your configuration, and supporting warranty claims | Poland, Estonia |
| Our accountants, auditors and legal advisers | Running our business and defending claims | Australia, United Kingdom |
We will also disclose your data where we are required to by law, by a regulator or by a court, and where we sell or restructure our business, in which case the buyer takes on the obligations in this policy.
7. Sending data outside the United Kingdom
7.1 We are based in Australia and some of the organisations in section 6 are based outside the UK. That means your personal data is transferred outside the UK.
7.2 Where we transfer personal data out of the UK, we make sure one of the following applies:
- the country has been found by the UK government to provide an adequate level of protection, which covers transfers to the EEA and to organisations certified under the UK Extension to the EU-US Data Privacy Framework; or
- the transfer is covered by the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses, together with an assessment of the risks in the destination country.
7.3 Australia has not been found to provide an adequate level of protection. Transfers to us in Australia are made under the UK International Data Transfer Agreement and we have assessed the risks and put additional safeguards in place, including encryption in transit and at rest and restricting access to staff who need it.
7.4 You can ask us for a copy of the safeguards we use by emailing the address in section 13.
8. How we protect your data
8.1 We use encryption in transit and at rest, access controls and multi-factor authentication, and we limit access to staff and contractors who need it for their role.
8.2 No system is completely secure. If a breach affects your personal data and is likely to result in a high risk to your rights, we will tell you without undue delay, and we will report it to the Information Commissioner's Office where we are required to.
9. Cookies
9.1 Cookies are small files placed on your device. We use them for four things:
- Strictly necessary cookies. These make the site work, keep your basket, log you in and keep the checkout secure. We do not need your consent for these, and you cannot turn them off without breaking the site.
- Analytics cookies. These tell us how the site is used, including session recordings and heatmaps, so we can improve it.
- Advertising cookies. These let us show you relevant adverts on other sites, and measure whether our advertising works.
- Preference cookies. These remember choices you have made, such as your region.
9.2 We only set analytics, advertising and preference cookies with your consent. You give that consent through the banner that appears when you first visit. You can change your choices at any time through the cookie settings link in our website footer, and you can withdraw consent as easily as you gave it.
9.3 You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop parts of the site working.
10. Your rights
You have the following rights over your personal data. They are free to exercise and we will respond within one month.
- Access. Ask for a copy of the personal data we hold about you.
- Rectification. Ask us to correct data that is wrong or incomplete.
- Erasure. Ask us to delete your data. We may not be able to delete everything, for example where we need to keep order records for tax or product safety reasons, and we will explain if so.
- Restriction. Ask us to pause our use of your data while a question about it is resolved.
- Objection. Object to our use of your data where we rely on legitimate interests. Where you object to direct marketing, we will stop, always and without question.
- Portability. Ask for the data you gave us in a machine readable format, or ask us to send it to someone else.
- Withdraw consent. Where we rely on your consent, you can withdraw it at any time. That does not affect anything we did before you withdrew it.
- Automated decisions. We do not make decisions about you by automated means that produce legal or similarly significant effects.
To exercise any of these rights, email us at the address in section 13. We may ask you to confirm your identity first, so that we do not give your data to someone else.
11. Complaints
11.1 If you are unhappy with how we have handled your personal data, please tell us first using the details in section 13 and we will try to put it right.
11.2 You also have the right to complain to the UK regulator, and you do not have to come to us first:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
www.ico.org.uk
12. Children
Our website and products are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, tell us and we will delete it.
13. Contact us
PlusLife Health
Wellness Technology Australia Pty Ltd (ACN 661 558 229)
Suite 806, 35-45 Spring Street, Bondi Junction NSW 2022, Australia
Email: privacy@pluslifehealth.co.uk
Phone: +44 7378 470969
Monday to Friday, 9am to 5pm UK time
Our UK representative under Article 27
We have appointed the following representative in the United Kingdom. You may contact them on any matter relating to our processing of your personal data, and you may do so instead of contacting us.
Supply Chain Fusion
Unit 7, Union Park, Grovebury Road, Leighton Buzzard, LU7 4ER, Bedfordshire, United Kingdom
rachel.mapp@supplycs.global
14. Changes to this policy
We may update this policy. The current version is always on this page with the date it was last updated at the top. Where a change is significant we will tell you by email or by a notice on the website.
