Privacy Policy · Kotisauna Inc.

1. Who we are

Kotisauna Inc. ("Kotisauna", "we", "us") runs a community sauna at Evergreen Brick Works in Toronto, Ontario. This policy explains how we collect, use and protect personal information when you visit kotisauna.ca, book a session, join our mailing list or come to the sauna.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer is Jason Wong, founder. Contact: sweat@kotisauna.ca.

2. What we collect

When you book

• Your name, email address, phone number and postal code.
• Your booking history and the passes or packs you buy.
• Payment details, handled by Stripe, our payment processor. We do not see or store your full card number.

When you accept the waiver

• Your name, the date and time you accepted, and the version you accepted. Every guest, every booking.
• Your photography preference (opted in or not).

When a guest is 12 to 17

• A paper Parent or Guardian Acknowledgement, signed on site. It records the young person's name and date of birth, the parent or guardian's name and contact details, any health information the parent or guardian shares about the young person, and their photography choice for the young person.

When you join our mailing list

• Your email address, and your name if you give it. The date you signed up and how.

When you visit kotisauna.ca

• Basic usage information: pages viewed, the device and browser you use, roughly where you are (city level), and how you arrived. This comes from cookies and similar tools (Section 5).

When you contact us

• Whatever you send us by email, for example a private group request.

At the sauna

• If there is an incident or injury, a written record of what happened, who was involved and the conditions at the time.
• Photos or video of you, only if you opted in (Section 4).

We do not ask for your health history. The waiver asks you to judge whether sauna is right for you. The only health information we hold is what a parent or guardian writes on the paper form for a young guest.

3. Why we use it

• To take and manage your bookings, payments, credits and cancellations.
• To keep a record that every guest accepted the waiver, and to keep young guests safe.
• To contact you about your booking, including weather changes and cancellations.
• To send our newsletter, only if you signed up. Every email has an unsubscribe link.
• To understand how people use our website so we can improve it.
• To respond to incidents, claims and legal requirements.

We do not sell your personal information. We do not use it for advertising profiles.

4. Photos and video

We only feature you as an identifiable subject in our photos or video if you opted in at booking. Guests under 18 are only photographed with written consent from their parent or guardian. You can withdraw consent at any time by emailing sweat@kotisauna.ca. We will stop using those images in new materials, but cannot recall what is already published or printed.

5. Cookies and analytics

kotisauna.ca uses:

• Google Analytics 4 to count visits and see which pages are useful.
• Squarespace analytics, built into our website platform, for the same purpose.
• MailerLite to run our newsletter sign-up form.
• Elfsight to show our Google reviews.

These tools set cookies or load content from their own servers. You can block or delete cookies in your browser settings. The site still works without them.

6. Who we share it with

We share personal information only with service providers who help us run Kotisauna, and only what they need:

• our booking platform (Saunu) and payment processor (Stripe)
• our email newsletter provider (MailerLite)
• our website host (Squarespace)
• our analytics provider (Google)

Some of these providers store information outside Canada, including in the United States. When it is stored elsewhere, it is subject to the laws of that country.

We may also share information when the law requires it, to respond to an emergency, or with our insurer and legal advisers if there is an incident or claim.

7. How long we keep it

• Booking and payment records: as long as needed for accounting and tax rules.
• Waiver acceptance records, incident records and Parent or Guardian Acknowledgements: long enough to respond to a possible claim. For young guests, this can be several years after they turn 18.
• Mailing list: until you unsubscribe.
• Website analytics: according to each provider's settings.

When we no longer need information, we delete or anonymize it.

8. How we protect it

We use reputable platforms with their own security, limit access to the people who need it, and keep paper forms locked away. No system is perfectly secure, but we take reasonable steps to protect your information.

9. Your choices and rights

You can ask us to:

• show you the personal information we hold about you
• correct anything that is wrong
• stop sending you marketing emails (or use the unsubscribe link)
• withdraw your photo consent

Email sweat@kotisauna.ca. We will respond within 30 days. Some records, like waiver acceptances, we may need to keep for legal reasons even if you ask us to delete them; we will tell you if that applies.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new date.

11. Contact

Kotisauna Inc. · Privacy Officer: Jason Wong
sweat@kotisauna.ca

Related: Terms and Conditions. Last updated: October 12, 2026.