Privacy policy

The Sacred Sauna - Privacy Policy Last updated: 8 July 2026 1. Who we are Sacred Sauna AB (organisationsnummer 559502-1972), Blekingegatan 44, 116 62 Stockholm, Sweden, is the data controller for the personal data described in this policy. For any privacy questions, contact us at [email protected]. 2. What data we collect We collect: - Information you give us — name, email, phone number, and password when you create an account or book; billing and delivery address for shop orders; and the content of messages you send us. - Booking and purchase data — sessions, memberships, credits, gift cards, and products you buy, and your attendance history. - Payment data — payments are processed by our payment providers (such as Shopify Payments and our booking platform's provider). We do not store full card numbers; we receive limited confirmation data. - Health-related information — only if you voluntarily tell us about a health condition relevant to attending safely. We treat this as sensitive data and use it only to keep you safe during a session. - Technical and usage data — IP address, device and browser information, app usage, and cookie data when you use our website or app. 3. Why we use it and our legal basis We process your data to: - provide and manage your bookings, memberships, credits, gift cards, and shop orders — legal basis: performance of a contract; - take payment and prevent fraud — contract and legitimate interests; - keep you safe during sessions where you share relevant health information — your explicit consent, and protection of vital interests; - respond to your enquiries and provide customer support — contract and legitimate interests; - send you marketing (such as newsletters or offers), where you have opted in or where permitted for existing customers — consent or legitimate interests; you can opt out at any time; - comply with legal obligations, including accounting and tax law — legal obligation; - improve and secure our website, app, and Services — legitimate interests. 4. Cookies Our website and app use cookies and similar technologies. Essential cookies are needed for the site, booking, and checkout to work. Analytics cookies help us understand how our website and app are used, and marketing cookies (used only where you consent) help us measure and tailor our advertising. You can accept or decline non-essential cookies through our cookie banner and can manage or delete cookies at any time in your browser settings. 5. Who we share it with We share personal data only as needed with: service providers who operate our Services on our behalf — including Shopify (shop), our booking platform, payment processors, email and marketing tools, and IT and hosting providers; professional advisers and authorities where required by law. Some of these providers may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data. 6. How long we keep it We keep personal data only as long as necessary for the purposes above. Account and booking data is kept while your account is active and for a reasonable period afterward; accounting records are kept for seven years as required by Swedish law; and marketing data is kept until you unsubscribe. 7. Your rights Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, contact [email protected]. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se). 8. Changes to this policy We may update this policy from time to time. The current version is always available on our website, with the date of the last update shown above. 9. Our app Our app "Sacred Sauna" for iPhone and Android runs on Ferb, the booking platform we use. When you use it, this also applies: - Signing in. You sign in with your phone number and a one-time code sent by text message; the app has no password. Sign-in and your account are handled by Ferb ApS, which is an independent controller for your Ferb login (including your phone number, sign-in and security), which you can use at several studios. See ferb.co/privacy-policy. Ferb otherwise processes your bookings, purchases and memberships on our behalf, as our data processor. - Payments. Card, Apple Pay and Google Pay payments in the app are handled by Stripe. We never see your full card number. - Your location. When you check in in the app and have given it access to your location, we compare your phone's position with the studio's to confirm you are there. The position is only used for that comparison and is not stored. Legal basis: performance of a contract. - Door access. If you open our doors with the app, Kisi, which runs our door access, processes your name, contact details and door openings on our behalf. Legal basis: performance of a contract. - Notifications. If you allow notifications, we store a notification ID for your phone so we can send you reminders and messages about your bookings. You can turn them off in your phone's settings. Apple and Google deliver the notifications. - Profile photo. Only if you choose to add one. - App usage and error reports. We record which parts of the app are used, as well as crashes, errors and how quickly the app responds, together with an ID for your account and your device. We do not record what you type. Legal basis: legitimate interests (an app that works). - The app shows no ads and does not track you across other apps and websites. - Deleting your account. You can delete your account in the app under Profile → Personal info → Delete account, or at sacredsauna.ferb.co/delete-account. The account is deleted 30 days after your request, or later if you have a membership with a binding or notice period, or a booking further ahead; until then you can change your mind. Accounting records are kept as described in section 6. Your Ferb login remains; you can have it deleted by writing to [email protected]. 10. Contact Sacred Sauna AB · Blekingegatan 44, 116 62 Stockholm, Sweden · [email protected]

Sacred Sauna uses Ferb for bookings, payments and its app. How Ferb handles your data