Privacy Policy

1. Who we are

SOKI Social Sauna, located at Europalaan 2B, 3526 KS Utrecht (KVK 42063987), is responsible for the processing of personal data as described in this privacy policy. Contact us at hello@sokisocialsauna.nl.

2. Data we collect

When you create an account and make a booking, we collect:

• Your name and email address
• Booking details (session, date, group size)
• Payment status (via Stripe, we do not store card details)
• Communication history (messages sent through our platform)

3. Why we process your data

• To process your booking: we need your name and email to confirm reservations and send reminders.
• To manage your account: your data is stored so you can view and manage bookings.
• To comply with legal obligations: booking records are kept for financial administration.

4. Data retention

We retain your personal data for as long as your account is active. You may request deletion at any time. The following retention periods apply:

• Booking and payment records: 7 years (Dutch tax law requirement)
• Contact form and account messages: up to 2 years after your last message
• Waitlist entries: up to 1 year after the session date
• Gift cards: up to 2 years after expiry (financial record)
• Marketing/waitlist email signups: until you unsubscribe

When you delete your account, your messages and waitlist entries are removed immediately and your account details are anonymised; only anonymised booking records are kept for the fiscal retention period.

5. Your rights (AVG / GDPR)

Under the GDPR you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your account and personal data
• Portability: receive your data in a machine-readable format
• Object: object to processing for direct marketing

To exercise your rights, email us at hello@sokisocialsauna.nl or use the data export / delete account options in your account.

6. Third parties

We use the following third-party services:

• Stripe: payment processing and subscription billing (card data is handled by Stripe and never stored on our servers).
• Brevo: transactional email delivery (booking confirmations, reminders, password resets).
• Google: optional Google Sign-In and (if you add it) Google Calendar links.
• Railway: application hosting and database (EU region).

7. Cookies

We use a small number of functional cookies and localStorage entries to keep you signed in, remember your language, and remember your cookie preferences. With your consent we also load analytics and marketing cookies (see next section). For a full list, see our cookie policy.

8. Analytics & marketing

Only if you actively grant consent (via the cookie banner), we may load:

• Google Analytics 4 (Google Ireland Ltd) - anonymous usage statistics. IP anonymisation is enabled and Google Signals is disabled.
• Meta Pixel (Meta Platforms Ireland Ltd) - measure whether visits or bookings originated from Facebook or Instagram ads.
• TikTok Pixel (TikTok Technology Ltd) - measure whether visits or bookings originated from TikTok ads.

These providers may transfer data outside the EU (mainly to the United States). Transfers are covered by the EU–US Data Privacy Framework or Standard Contractual Clauses. You can withdraw consent at any time via the "Cookie preferences" link at the bottom of every page.

If you do not grant consent, none of these services receive any request from your browser on this website.

9. Contact and complaints

Questions about this policy? Email hello@sokisocialsauna.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.