When someone enters a cold plunge, the body’s first response is involuntary. Within 30 seconds of immersion, cold shock triggers a gasp reflex that draws 2–3 litres of air into the lungs. If the user’s mouth or nose is at water level when that gasp fires, the result is aspiration. Drowning can begin before your staff have registered anything is wrong. The risk is not theoretical. Washington State’s Department of Health guidance on cold plunge safety cites drowning caused by involuntary gasping and hyperventilation as a known mechanism of death in cold water immersion.
A cold plunge safety protocol for commercial facilities needs to be designed around this timeline — not around general wellness caution, not around signage, but around the specific physiological events that occur in the first three minutes of immersion and the operational systems required to manage them. This protocol codifies what icebaths.com provides to its hospitality clients, because this documentation does not exist as an industry standard.
This is that protocol.
Cold shock physiology: the operating principle behind every protocol
Professor Mike Tipton at the University of Portsmouth has spent decades studying cold water immersion and developed the definitive four-phase model of cold water risk. In controlled plunge settings, only the first phase matters: cold shock response, occurring from 0 to approximately 3 minutes. Later phases (swimming failure, hypothermia, post-immersion collapse) apply to open water and extended exposure; they are largely irrelevant to supervised sessions of 1–5 minutes.
Cold shock is driven by rapid skin cooling. The sequence is specific and fast:
0–15 seconds: Peripheral cold receptors fire. Heart rate and blood pressure spike. The sympathetic nervous system activates hard.
15–30 seconds: The inspiratory gasp reflex peaks. The user inhales sharply and involuntarily. The volume of that gasp is large enough to flood the lungs with water if the airway is submerged. This is the single most dangerous moment in the entire session.
30–90 seconds: Hyperventilation follows. Breathing rate can increase four to tenfold. Users may feel unable to control their breathing, panic, or attempt to exit the plunge rapidly. Rapid, uncontrolled exit is a secondary injury risk: slips, falls, and loss of consciousness on standing.
90 seconds–3 minutes: Cold shock response begins to subside as peripheral receptors adapt. Breathing stabilises. The acute danger window closes.
Your entire safety infrastructure should be oriented around this 30-to-90-second window. Staff positioning, observation protocols, emergency response, signage, and physical design all serve the same purpose: ensuring that if something goes wrong during cold shock response, your team can intervene within seconds.
One additional mechanism warrants attention. Research by Shattock and Tipton identified that simultaneous cold shock and the mammalian dive reflex, triggered when cold water contacts the face, can cause fatal cardiac arrhythmia. The sympathetic system drives the heart faster while the parasympathetic system simultaneously brakes it. This is the physiological basis for one non-negotiable rule: no head or face submersion, ever.
Contraindication screening: the gate that must actually close
Screening isn’t a formality. It’s a medical gate. When it works, it prevents the highest-risk users from entering the plunge unsupervised or at all. When it’s treated as a tick-box exercise, it fails silently until the day it doesn’t.
Your screening process, whether a digital intake form, printed questionnaire, or staff-administered check, must capture the following before a user’s first session.
Absolute contraindications (do not immerse):
- Uncontrolled hypertension
- History of heart attack or stroke within the past 12 months
- Unstable angina or known cardiac arrhythmia
- Epilepsy or seizure disorders
- Pregnancy
- Current alcohol or recreational drug intoxication
Relative contraindications (require medical clearance or modified protocol):
- Controlled hypertension managed with medication
- Raynaud’s disease or cold urticaria
- Peripheral neuropathy or circulatory conditions
- Any cardiovascular condition managed by medication
- Recent surgery
Behavioural screening (staff must verify before every session):
- Has the user consumed alcohol in the preceding four hours?
- Is the user showing signs of intoxication or impairment?
- Is this the user’s first cold plunge?
First-timers require specific attention, and not only because they haven’t experienced cold shock before. Research by Barwood and colleagues found that acute anxiety significantly magnifies the cold shock response. A nervous first-timer will gasp harder, hyperventilate more, and take longer to regain breathing control than the same person would when calm and experienced. This inverts a common assumption: the fit-looking guest who seems healthy but is visibly anxious may be at higher risk than a regular user with a minor health flag. Staff should treat visible anxiety as a risk amplifier and increase supervision accordingly. Tipton’s habituation data reinforces this: cold shock response reduces by roughly 50% in as few as six two-minute immersions, which means first sessions carry measurably more risk than subsequent ones. Any facility running graduated introductions, with shorter initial sessions, warmer starting temperatures, and direct staff supervision for the first three visits, is building its safety around the physiology.
Waiver and informed consent: what must be in the document
Most operators download a generic liability waiver and consider the job done. A generic waiver may not hold up if it fails to describe the specific risks of cold water immersion. At minimum, a defensible cold plunge waiver should include:
Specific risk disclosures:
- Cold shock response, including involuntary gasping and hyperventilation
- Cardiovascular stress, including rapid changes in heart rate and blood pressure
- Risk of drowning if face or head is submerged
- Risk of loss of consciousness during or immediately after immersion
- Risk of slips and falls on wet surfaces during entry and exit
User acknowledgements:
- User confirms they have disclosed all relevant medical conditions
- User confirms they have not consumed alcohol or recreational drugs
- User confirms they understand they must keep their head above water at all times
- User confirms they understand they may exit the plunge at any time
- User confirms they understand that staff may direct them to exit and that they will comply
Contraindication declaration:
- A checklist matching the screening protocol, signed by the user
- A statement that the user takes responsibility for the accuracy of their medical disclosure
Facility-specific rules:
- Maximum session duration
- Mandatory entry and exit procedures
- Buddy system requirements if applicable
- Staff authority to end a session
A waiver that says “cold plunge carries inherent risks” without naming those risks is doing very little work. A waiver that explains cold shock, describes the gasp reflex, and requires the user to confirm they understand the drowning mechanism is doing the job it needs to do.
A proper legal review costs a fraction of what an incident would cost when your waiver doesn’t hold. Have your waiver reviewed by a solicitor or attorney familiar with your jurisdiction.
Staff training curriculum
Your staff are the safety system. Signage reminds. Waivers document. Staff intervene. Every other measure is backup for the moment a trained staff member recognises distress and acts within the cold shock window.
Before the session
Staff must understand cold shock well enough to explain it to guests and recognise it in real time. Training should cover the four-phase model with emphasis on Phase 1, the gasp reflex and when it peaks, how to distinguish normal rapid breathing from distress, why first-timers and anxious users are higher risk, and why face submersion is prohibited.
Before any user enters the plunge, staff should confirm the waiver is signed and screening is complete, ask whether this is the user’s first cold plunge, assess for visible signs of anxiety or intoxication, and brief the user on what to expect. The pre-session brief matters more than most operators realise. Telling someone “you’ll feel a shock” is insufficient. Telling them “you will gasp involuntarily in the first 15 seconds, and your breathing will speed up, but this is normal and will pass within about 90 seconds” gives them a framework that reduces anxiety and, by extension, reduces the severity of the cold shock response.
Active observation protocol
During every occupied session, a staff member should maintain a clear sightline to the user’s face and upper body, watch for the gasp reflex during the first 30 seconds, and monitor breathing from 30 seconds through to 90 seconds. Be alert for sudden silence (loss of consciousness), facial submersion, attempts to exit too rapidly, and signs of confusion or disorientation. A simple verbal check-in at 30 seconds and again at 60 seconds (“How’s your breathing?”) confirms consciousness and orientation without being intrusive.
Active observation is not “keep an eye on the guest.” It is structured, timed, and focused on the specific events that indicate danger. Staff should be positioned close enough to reach the plunge within two seconds. Not across the room. Not behind a desk.
Emergency response
Gasping or hyperventilation beyond 90 seconds: Direct the user to focus on slow exhales. If breathing does not stabilise, instruct the user to exit immediately and assist with exit, supporting them on standing since post-immersion blood pressure drop can cause fainting.
Facial submersion or loss of consciousness: Remove the user from the water immediately. Place in recovery position if breathing. Begin CPR if not breathing. Call emergency services.
Suspected cardiac event (chest pain, sudden collapse, irregular breathing): Remove from water. Call emergency services immediately. Begin CPR if no pulse. Use AED if available.
Every facility with a cold plunge should have a defibrillator accessible within 60 seconds of the plunge area. Staff should be trained in its use and recertified annually. Your staff member on the plunge deck is the first responder, and they may be the only responder that matters.
Run scenario drills quarterly. Each drill should simulate the cold shock timeline: a “user” enters the plunge, distress is simulated at 30 seconds, and the staff member must recognise and respond. Timing the response builds the muscle memory that generic first-aid training does not.
Signage requirements
Signage supports the safety system. It does not replace it. But clear, visible, specific signs reduce the likelihood of incidents and strengthen your legal position if one occurs.
At minimum, post the following at the plunge entry point:
- Maximum session duration (facility-specific, typically 3–5 minutes for general users)
- Head above water at all times — phrased as a rule, not a suggestion
- No alcohol or drugs before use
- Medical conditions: consult staff before entering
- Exit immediately if you feel dizzy, disoriented, or unable to control your breathing
- First-time users: speak to a staff member before your session
Signage should be concise, high-contrast, and positioned where users can read it while standing at the plunge. Long paragraphs of small text will not be read.
The unsupervised facility problem
Everything above assumes a staff member is present. Many cold plunge installations are not staffed. Twenty-four-hour gyms, co-working wellness spaces, self-service studios, and hotel fitness centres often operate without dedicated supervision during some or all hours.
An unsupervised cold plunge is a drowning hazard with no first responder. The gasp reflex does not wait for business hours.
If your facility operates a cold plunge during unstaffed periods, the following measures move from recommended to essential:
Physical access control: A lockable, powered cover requiring a code or key card, issued only after the user has completed screening, signed the waiver, and ideally completed at least one supervised session. This is the single most effective risk reduction for unsupervised facilities.
Buddy system requirement: No solo use during unstaffed hours. Enforcement is difficult, but the requirement shifts liability and creates a social norm.
Time-limited access: If the plunge uses a code lock, set it to lock again after a predetermined session window, such as 10 minutes from unlock. This prevents extended unsupervised sessions.
Camera monitoring: A visible camera covering the plunge area, with signage indicating monitoring. Where jurisdictionally permitted, this can be connected to a remote monitoring service. At minimum, it provides a record in the event of an incident.
Emergency communication: A clearly marked emergency button or phone within arm’s reach of the plunge. The user must be able to summon help without leaving the water.
Physical environment as safety infrastructure: In unsupervised settings, the built environment carries more of the safety burden. Non-slip surfaces around the plunge, step design and grab bars at entry and exit points, lighting sufficient to see the user’s face on camera, plunge depth that keeps the head well above the waterline when seated, and concealed mechanical equipment to eliminate trip hazards. These are not aesthetic choices.
An uncomfortable truth for operators of unsupervised facilities is that no combination of measures fully replaces a trained person watching the first 90 seconds of immersion. Every mitigation in this section is a substitute, and every substitute is less effective than direct supervision. The question is whether your revenue model justifies the risk, and whether your insurance provider agrees.
The standard that matters
A safety-first cold plunge operation comes down to one question: can your staff describe what happens in the first 30 seconds of cold water immersion, recognise when that response becomes dangerous, and reach the user before the window closes? If your team can do that, every other element in this protocol is reinforcement. If they cannot, no waiver or sign will close the gap.
Commercial cold plunge compliance extends beyond safety into water treatment and classification requirements, but safety must come first. The most pristine water quality means nothing if your facility experiences a drowning incident. Energy costs and maintenance protocols matter for your operational bottom line, but they’re secondary to having the right safety infrastructure in place from day one.
When choosing a commercial cold plunge system, consider how the physical design supports or hinders your safety protocol. Can staff reach all sides of the plunge within two seconds? Is the entry designed to prevent slips? Does the depth allow seated immersion without face submersion risk? These aren’t premium features — they’re fundamental safety requirements that should drive your selection process.
