Privacy Policy

Last updated: March 2026

1. Data controller

Nordbastu AB, reg. no. 559317-9046, Skånegatan 6 F, 262 43 Ängelholm, Sweden, is the data controller for the processing of your personal data in connection with booking, payment and delivery of sauna sessions.

Saunify OÜ, reg. no. 17293868, Loitsu tn 5-114, 13622 Tallinn, Estonia, provides the booking platform and processes the data as a data processor on behalf of Nordbastu AB.

Contact: support@saunify.se

2. Data we collect

We collect the following personal data:

• Email address: when you join the waitlist or make a booking

• Name and phone number: when making a booking

• Payment information: handled by Stripe and not stored by us

• Booking information: date, time, location and session type

• Technical data: IP address, browser type and visit data via analytics tools (with your consent)

3. How we use your data

We use your personal data to:

• Process and confirm bookings

• Send your PIN code and booking confirmation

• Handle cancellations and rescheduling

• Send information about openings and offers (waitlist)

• Improve our service via usage analytics (with consent)

The legal basis for processing is primarily the performance of a contract (booking) and legitimate interest (service improvement). For marketing and analytics the basis is consent.

4. Retention

Booking data is retained for 24 months after the session. Waitlist email addresses are retained until you unsubscribe. You may request deletion of your data at any time.

5. Sharing with third parties

We share your data with:

• Stripe: for payment processing (see Stripe's privacy policy)

• Email provider: for booking confirmations and communications

• Data hosting provider: for storage of booking and customer data (hosted within EU/EEA)

• Access control system: for generating time-limited PIN codes for sauna locks

We never sell your data to third parties.

6. Cookies

We use necessary cookies for the site to function correctly (login, session). With your consent, we also use analytical cookies to understand how the service is used. You can change your cookie preferences at any time.

7. Your rights (GDPR)

You have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request deletion of your data ("right to be forgotten")

• Object to processing for marketing purposes

• Request restriction of processing

• Request data portability

Contact us at support@saunify.se to exercise your rights. You also have the right to lodge a complaint with your national data protection authority.

8. Contact

Questions about our processing of personal data: support@saunify.se

Nordbastu AB (data controller)

Skånegatan 6 F, 262 43 Ängelholm, Sweden

Saunify OÜ (data processor, platform provider)

Loitsu tn 5-114, 13622 Tallinn, Estonia

For questions, contact us at support@saunify.se