Legal
Last updated: April 2026 · UK GDPR compliant
Saunista is operated by Wonderly Ventures Ltd, a company registered in England and Wales. We are the data controller for personal data collected through this platform. Our registered address and ICO registration number will be published here prior to public launch. Contact: privacy@saunista.co.uk
We collect and process the following categories of personal data: • Identity data: full name, date of birth (for insurance purposes), profile photograph • Contact data: email address, phone number • Payment data: payment card details (processed by Stripe — we do not store card numbers) • Location data: postcode and approximate location for search purposes • Booking data: session history, waiver signatures, condition scores, reviews • Technical data: IP address, browser type, device identifiers, cookies • Health data: health declarations signed before each session (special category data)
We process your personal data for the following purposes: • To provide the Saunista marketplace service (contract performance) • To verify your identity and comply with anti-fraud requirements (legitimate interest / legal obligation) • To process payments and manage payouts via Stripe (contract performance) • To send booking confirmations, PINs, and service communications (contract performance) • To send marketing communications where you have opted in (consent) • To improve our service through analytics (legitimate interest) • To comply with legal obligations including tax reporting
We share your personal data with the following categories of third parties: • Hosts: your first name and booking details (not payment details) are shared with the host of your booked session • Stripe: payment processing (Stripe Privacy Policy applies) • Supabase: data storage (EU data centres where possible) • Resend: transactional email delivery • Twilio: SMS delivery of access PINs • Cloudinary: photo and image storage • Analytics providers: aggregated, anonymised data only We do not sell your data to third parties.
You have the following rights regarding your personal data: • Right of access: request a copy of data we hold about you • Right to rectification: correct inaccurate data • Right to erasure: request deletion ("right to be forgotten") • Right to restriction: limit how we process your data • Right to data portability: receive your data in a structured format • Right to object: object to processing based on legitimate interest • Rights related to automated decision-making To exercise any right, contact privacy@saunista.co.uk. We will respond within 30 days.
We retain personal data for the minimum period necessary: • Account data: until deletion request or 2 years of inactivity • Booking records: 7 years (financial records, legal requirement) • Health declarations: 2 years from booking date • Review data: indefinitely (public record) • Marketing preferences: until withdrawn
We only set cookies that are strictly necessary — the ones that keep you signed in and manage your session. No advertising cookies, no cross-site tracking.
For any privacy-related enquiry: privacy@saunista.co.uk If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.