Privacy Policy
This Privacy Policy explains how I Love Sauna ("we", "us", "our") collects, uses, and protects personal data when you use https://ilovesauna.net (the "Service").
1. Data We Collect
Depending on how you use the Service, we may collect:
- Account and profile data (for example name, email, login credentials, profile details).
- User Content you submit (including My Sessions, reviews, and edits to sauna listings).
- Support communications and account-related requests.
- Technical and usage data (for example IP address, browser/device information, pages viewed, timestamps, referrer).
- Cookie and similar technology data.
- Approximate location data where required to provide location-aware results.
2. How We Collect Data
- Directly from you when you create an account, post content, or contact us.
- Automatically through logs, cookies, and analytics tools when you use the Service.
- From integrated third parties where you choose to connect external services.
3. Legal Bases (EEA/UK)
Where GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
- Performance of a contract (to provide and operate the Service).
- Legitimate interests (security, abuse prevention, service improvement, and analytics).
- Consent (for optional processing, including non-essential cookies where required).
- Compliance with legal obligations.
4. How We Use Personal Data
- To provide, maintain, and improve the Service.
- To authenticate users and protect account security.
- To process and display User Content, including My Sessions.
- To communicate with you about account, support, and service updates.
- To detect, investigate, and prevent fraud, abuse, and unlawful activity.
- To comply with legal and regulatory requirements.
5. Sharing of Personal Data
We may share personal data only where necessary with:
- Service providers (for example hosting, analytics, email, and security providers).
- Professional advisers and auditors where required.
- Authorities where required by applicable law or legal process.
- Successors in connection with a merger, acquisition, or asset transfer (subject to safeguards).
We do not sell personal data.
6. International Data Transfers
If personal data is transferred outside the EEA or UK, we use appropriate safeguards as required by law (for example adequacy decisions or standard contractual clauses).
7. Data Retention
We keep personal data only for as long as necessary for the purposes described in this Policy, including legal, accounting, and dispute-resolution requirements. Retention periods depend on data type and context of use.
- Account profile and authentication data are generally kept while your account is active.
- If you deactivate your account, we retain account and activity data for up to 90 days to support account restoration and service operations, unless a longer period is required by law.
- Records of privacy requests (for example deletion requests) are generally retained for up to 365 days from the request date for compliance and audit purposes.
- Security, fraud-prevention, and service logs are retained for a limited period appropriate to operational and security needs.
- Where we must retain data to comply with legal obligations, establish or defend legal claims, or enforce agreements, we keep only the minimum necessary data for the required period.
8. Cookies and Analytics
We use essential cookies to run the Service and may use analytics cookies to understand usage and improve the product. Where required by law, we request consent before using non-essential cookies. You can control cookies through browser settings and, where available, our consent controls.
9. Your Rights
Subject to applicable law, you may have the right to:
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of data.
- Restrict or object to certain processing.
- Request portability of data you provided.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
10. Security
We use reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children's Privacy
The Service is not intended for children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide notice through the Service or by other appropriate means before the changes take effect, where required by law.
13. Contact
For privacy-related questions or rights requests, contact: support@ilovesauna.net.