Privacy Policy

1. Who we are

Paraiso Tanning Ltd, Unit 3, 170 Alfreton Rd, Sutton-In-Ashfield, NG17 1JB. Contact us at [email protected] for any privacy-related queries.

2. Information we collect and why

Contact form submissions

When you submit the contact form we collect your name, phone number, email address, and message. We use this solely to respond to your enquiry. We do not store your message in any database; it is emailed directly to us. The legal basis is legitimate interest (responding to your request). We retain email correspondence for up to 12 months.

Analytics cookies - Google Analytics

With your consent we use Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors use this site. GA4 sets the following first-party cookies:

• _ga - distinguishes users. Expires after 2 years.
• _ga_[ID] - maintains session state. Expires after 2 years.

The data GA4 collects includes pages visited, time on site, browser type, and approximate location (country/city - not precise GPS). This data is sent to and stored by Google on servers which may be outside the UK.

We implement Google Consent Mode v2 in advanced mode. All GA4 consent flags default to denied. Until you click Accept on the consent banner, Google Analytics sets no cookies and stores nothing on your device. In this state it sends Google only a cookieless modelling ping - a hit that contains no cookies and no persistent identifier, which Google uses to estimate aggregate trends. GA4 cookies and full, identified measurement begin only when you click Accept. If you reject cookies, no GA4 cookies are ever placed.

Google Analytics Advertising Features - Google signals

We have enabled Google signals, a Google Analytics Advertising Feature. With Google signals switched on, the visitation data described above is associated with information Google holds for visitors who are signed in to a Google account and have consented, within their Google account, to that association for ad personalisation. That Google account information may include the visitor's location, search history, YouTube history, and activity on websites that partner with Google.

In practice this means the first-party Google Analytics cookies listed above (the _gacookies) are used together with Google's own advertising cookies and identifiers, which Google holds against a signed-in visitor's account. This gives us:

• Cross-device measurement - recognising the same signed-in visitor across the different devices they use.
• Demographics and interests - estimated age, gender, and interest categories for our visitors, reported to us only in aggregate. We cannot see this information for any individual.
• Audiences and remarketing - visitor data may be used to build advertising audiences that can be used in Google Ads.

For standard Google Analytics measurement Google acts as our data processor under a data processing agreement. For the Google signals features above, Google also uses the data for its own ad personalisation purposes and acts as a data controller in its own right.

Google signals is covered by the consent banner in the same way as the rest of Google Analytics - nothing described in this section happens unless you click Accept. You can also, at any time:

• Manage or turn off ad personalisation across Google's products at myadcenter.google.com.
• Review and delete the activity Google holds against your account at myactivity.google.com.
• Opt out of Google Analytics in your browser using Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

Marketing cookies - Meta Pixel

With your consent we use the Meta Pixel, provided by Meta Platforms, Inc., to measure the effectiveness of our Facebook and Instagram advertising. The Meta Pixel sets the following cookies:

• _fbp - identifies browsers for ad delivery and measurement. Expires after 90 days.
• _fbc - stores a click identifier when you arrive via a Facebook ad. Expires after 90 days.

The Meta Pixel is not loaded and no cookies are placed until you click Accept on the consent banner. If you reject cookies it is not loaded at all.

3. Your consent choices

When you first visit this site a banner appears offering you a clear Accept or Reject option for non-essential cookies. Both choices are equally prominent. Your choice is stored in your browser's local storage under the key paraiso_cookie_consent.

You can change your choice at any time by clicking the Manage cookies link in the site footer. This clears the stored preference and reloads the banner so you can make a new choice.

You can also opt out of Google Analytics directly at tools.google.com/dlpage/gaoptout and manage your Meta ad preferences at facebook.com/settings?tab=ads.

4. Data sharing

We do not sell or rent your personal information. Data collected via Google Analytics is shared with Google under their data processing terms. Data collected via the Meta Pixel is shared with Meta under their data processing terms. We do not share your contact form information with any third party except our email provider (Resend), which processes it solely to deliver the message to us.

5. Your rights

Under UK GDPR you have the right to access, correct, or request deletion of any personal data we hold about you. You also have the right to object to processing and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights please contact us at [email protected].

6. Security

Contact form submissions are transmitted over HTTPS. We implement reasonable technical measures to protect data in transit and at rest. No method of internet transmission is 100% secure.

7. Changes to this policy

We may update this policy from time to time. Material changes will be noted with a revised "Last updated" date at the top.