Privacy

This notice says what we store about you, why, for how long, and how you see, change or delete it.

1. Who is responsible

The controller of your data is:

Kusaka OÜ, registry code 12423094, VAT number EE101620295, Meresihi tee 11, Kelvingi küla, Viimsi vald, 74018 Harju maakond, Estonia, [email protected].

2. What we store, and why

We do not sell your data, we do not use it for advertising, and no decision about you is made by a machine alone. We ask no health questions and store no health data.

• Your account. Name, email address, phone or WhatsApp number and country. We need them to make and manage your booking and to reach you about it. Basis: the contract with you.
• Your bookings and payments. Ritual, place, time, number of places, price, payment status and the payment reference from SumUp. Basis: the contract with you, and the accounting law that obliges us to keep payment records. Your card number stays with SumUp. We never see it.
• Your consents. Which statements you accepted, in which version, and when.
• An interest you register. What you tell us about a sauna project, ritual design, a retreat, training or priority at a ritual sauna that opens later. Basis: steps taken at your request before a contract.
• A place or a person you recommend. The name and contact details you give us. Please recommend a person only after you have told them that we will be in touch. Basis: our legitimate interest in following up your recommendation.
• News by email. Only when you tick the box. You can stop it in your account at any time. Basis: your consent.

3. Who receives it

The sauna masters and the Sauna Temple team see what they need for your ritual and for answering you. These companies process data for us, under contract:

• Supabase: the database and the sign-in, stored in the European Union (Frankfurt).
• Netlify: the hosting of this website.
• SumUp: card payments and refunds.
• Brevo: sending our emails.
• Google: sign-in, when you choose “Continue with Google”.
• Telegram: a notice to the team when a booking, an interest or a recommendation arrives. It carries your name, the ritual and the time.
• WhatsApp: when you write to us there.

Some of these companies also process data outside the European Union. Where they do, the transfer rests on the safeguards that EU law requires, such as an adequacy decision or standard contractual clauses.

4. How long we keep it

• Your account, consents and interests: until you delete your account.
• A person or place you recommend: until we have followed it up, and no longer than twelve months unless a conversation with them has begun.
• Payment records: seven years, as Estonian accounting law requires. After you delete your account they no longer carry your name.

5. Your browser

When you sign in, your browser stores the sign-in session so that you stay signed in, and your booking code so that it shows without a connection. We use no advertising cookies and no analytics.

6. Your rights

You may ask us for a copy of your data, have it corrected, have it deleted, limit or object to its use, and receive it in a portable form. You can take back a consent at any time. This does not affect what was done before.

You see and change your details in your account, where you can also delete the account. For everything else, write to [email protected]. We answer within one month.

If you think we handle your data wrongly, you may complain to the Estonian Data Protection Inspectorate, aki.ee, or to the data protection authority of the country where you live.