The privacy note
What we keep, and why.
Version 1 · 12 August 2026 · under legal review
Who we are
BASTU is a Nordic sauna house being built in Lakewood Ranch, Florida. For anything about your data, write to privacy@bastu.house — a person reads it.
What we collect, and why
When you request a founding invitation we ask for your name, email, phone, how often you train, what you want from the house, how often you’d come, roughly what you already spend on staying well each month, and when you’d want to start. We use it for exactly one thing: deciding and managing the first hundred founding memberships, and contacting you about yours. We don’t profile you for ads, and we never sell or rent your information to anyone.
The Sauna Custom page — and only that page — counts anonymous visits, so we know how many people arrive and how many stay long enough to read: no cookies, no IP address, just a random tag that lives in that browser tab and disappears when you close it.
Your consent
The form only sends with your explicit okay — the checkbox above the button. We record the date and the version of this note you agreed to. If you change your mind, one email withdraws it and we delete your request.
Where it lives
Your answers are stored in our database (Supabase, hosted in the United States) and delivered to our own inbox. The website runs on Vercel; transactional email runs on Resend. Each processes data on our instructions. If you start a booking one day, that data is covered by the same rules.
Email and text messages
We write rarely — a founders update at most monthly, and messages about anything you book. Every email has a working unsubscribe. We only text you about sessions you’ve booked or things you’ve explicitly asked to hear about; reply STOP to any text and it stops.
How long we keep it
Until the founding hundred is settled and you’ve either joined (your data becomes your membership record) or declined — or until you ask us to delete it, whichever comes first.
Your rights
Ask us any time to see what we hold about you, correct it, or delete it: privacy@bastu.house. We answer within 30 days, usually much faster. If you’re writing from the EU or UK, we honour GDPR rights on the same terms.
Children
The house and this site are for adults. We don’t knowingly collect information from anyone under 18.
If this note changes, the version and date at the top change with it, and consent is re-asked where the change matters.
Back to the house