1. Who We Are

DropSauna Limited (NZBN: 9429053349460) is a mobile sauna business based in Christchurch, New Zealand. 

We provide:

• public sauna sessions;

• private sauna hire;

• corporate bookings;

• event hire;

• gift vouchers;

• related wellness experiences.

​

We sometimes operate from partner venues, including gyms. Drop Sauna — not the venue — controls all booking, session, and payment processes, which run through our own website and payment system. Venue partners do not receive or have access to your personal information through us.

​

2. What Information We Collect

We may collect personal information including:

• name;

• email address;

• phone number;

• booking details, session date and time, service type;

• private hire or event location details;

• payment and transaction information;

• voucher purchase details;

• contact form messages, emails, feedback, reviews, or other communications;

• marketing preferences;

• photos or videos where relevant;

• health screening information you provide before a session (see section 2A below);

• incident or safety-related information where necessary.

​

We may also automatically collect website and technical information, including:

• IP address, device information, browser type;

• website usage data, pages visited, referral source;

• cookies and tracking data (see section 8).

​

2A. Health Screening Information

Before attending a sauna session, we ask you to agree a short health screening term and condition. This may include information about medical conditions, pregnancy, medications, or other factors relevant to sauna safety.

​

This is treated as sensitive information under the Privacy Act 2020, and we handle it with extra care:

• it is collected only to assess whether it's safe for you to use the sauna, and to respond appropriately in a medical emergency during your session;

• access is limited to staff who need it to run your session safely;

• it is not used for marketing, profiling, or any purpose beyond session safety, unless you separately agree;

• it is retained only as long as necessary for safety and liability purposes (see section 14) and is not kept longer than needed;

• it is not disclosed to any third party, including any venue or gym we operate from, except where required by law or necessary to respond to a medical emergency (e.g. to emergency services).

​

If you have concerns about providing this information, contact us at info@dropsauna.nz to discuss alternatives.

​

3. How We Collect Information

We may collect your information when you:

• visit our website;

• make a booking through our website (Wix Bookings);

• purchase a gift voucher;

• complete a contact or health screening form;

• contact us by email, phone, social media, or message;

• subscribe to updates or marketing;

• attend a public, private, corporate, or event session;

• provide feedback or leave a review;

• interact with our advertising or social media pages.

Where practical, we collect personal information directly from you. We may also receive limited information from the platforms we use to operate our business (booking, payment, analytics, and advertising platforms) — see section 7.

​

4. How We Use Your Information

We collect and use personal information to:

• manage and confirm bookings and process payments;

• provide sauna services and assess health and safety suitability;

• communicate with you about your booking, enquiry, or service;

• send booking confirmations, reminder emails, SMS notifications (where applicable), updates, and important safety information;

• manage cancellations, refunds, credits, and rescheduling;

• manage private hire, corporate bookings, and events;

• improve our website, services, and customer experience;

• manage reviews, feedback, complaints, and disputes;

• comply with legal, tax, accounting, insurance, and safety obligations;

• send marketing communications where you've agreed to receive them;

• measure and improve advertising performance, and build advertising audiences via platforms such as Meta, where you've allowed this through cookie preferences.

​

We will not use your personal information for unrelated purposes unless permitted by law or authorised by you.

​

5. If You Do Not Provide Information

Some personal information is required so we can provide our services safely. If you do not provide certain information (including health screening information), we may not be able to:

• confirm your booking or process your payment;

• allow you to safely participate in a sauna session;

• contact you about changes or cancellations;

• respond to your enquiry;

• provide private hire or event services;

• meet legal, accounting, insurance, or safety obligations.

​

6. Payments

Payments are processed securely through Stripe (and, where offered, Google Pay or Apple Pay via Stripe). We do not store your full card details ourselves. Stripe processes payment information under its own privacy policy and security standards, acting as a payment processor on our behalf.

​

7. Third-Party Services We Use

We distinguish between two types of third parties:

Service providers (acting on our behalf, as our agents): These providers process information for us, under our instructions, and do not use it for their own purposes.

• Wix — website hosting, forms, and bookings;

• Stripe — payment processing.

​

Because these providers act as our agents and don't use your information for their own purposes, sending information to them is not treated as a "disclosure" under the Privacy Act — but we remain responsible for how they handle it, and we only use reputable providers with appropriate security standards.

​

Third parties that use some data for their own purposes:

• Google Analytics — website analytics;

• Meta (Facebook/Instagram) — advertising and audience tools.

• Stripe

​

These platforms may use limited data (e.g. via cookies or pixels) for their own analytics or ad-matching purposes. This is a "disclosure" under the Privacy Act, and we only enable it where you've consented via our cookie settings — see section 8.

We may also share information with professional advisers such as accountants, insurers, and legal advisers where necessary to run our business.

We do not share your personal information with gyms or venues we operate from.

​

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies, including Google Analytics and the Meta Pixel.

• Essential cookies (needed for the website and booking/checkout to function) are used automatically.

• Our website uses Google Analytics to help us understand how visitors use our website and improve our services. Google Analytics may collect information such as your IP address, browser type, pages visited, and device information through cookies. You can manage or disable cookies through your browser settings.

​

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect how some parts of our website function.

​

Our website may also use Google Maps or other embedded third-party content. These services may collect technical information such as your IP address and device information in accordance with the provider's own privacy policies.

​

9. Marketing Communications

We may send marketing communications, updates, promotions, or offers where you've provided your details and agreed to receive them.

You can unsubscribe at any time by:

• clicking the unsubscribe link in an email, where available;

• contacting us at info@dropsauna.nz.

We do not sell or rent your personal information.

​

10. Photos, Videos and Social Media

We may take or use photos and videos for website, social media, and promotional purposes. Where practical, we will avoid using identifiable images of customers who have opted out. You can let us know before or during a session if you do not want to appear in photos or videos.

Customers must not photograph or record other guests without their consent, and photography must not interfere with the safety, privacy, or experience of other guests.

​

11. Sharing Personal Information

We may share personal information with:

• payment providers (Stripe);

• website and booking platforms (Wix);

• analytics and advertising providers (Google, Meta) — only where you've consented via cookie settings;

• professional advisers and insurers;

• IT, administration, and business support providers;

• authorities, regulators, emergency services, or other parties where required by law or necessary to respond to a health/safety emergency.

​

We do not share personal information with any gym, venue, or other business at a location we operate from, unless you separately and explicitly ask us to (e.g. you want us to pass a message to venue staff).

We only share personal information where it is reasonably necessary for our services, business operations, legal obligations, or safety, or where you've consented. We do not sell or rent your personal information.

​

12. Overseas Disclosure (Information Privacy Principle 12)

Some of the providers we use — Wix, Stripe, Google, and Meta — may store or process personal information outside New Zealand.

Under the Privacy Act 2020, before personal information goes overseas we need reasonable grounds to believe it will be protected in a comparable way to New Zealand law. We rely on the following:

• Wix and Stripe act as our service providers/agents, processing information under our instructions and subject to their own security and compliance standards (both publish data processing and security commitments covering how customer data is handled internationally);

• Google and Meta — where you've consented to analytics/advertising cookies, this consent is the basis for that limited disclosure. We recommend reviewing Google's and Meta's privacy policies for details of their own safeguards.

​

If you have questions about a specific provider's safeguards, contact us at info@dropsauna.nz.

​

13. Storage and Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction, including:

• using reputable, secure platforms with encryption and industry-standard security measures where available;

• limiting access to personal information, particularly health screening information (see section 2A);

• using password-protected systems and secure payment providers;

• maintaining appropriate business processes and reviewing our privacy and security practices periodically.

​

No method of online transmission or storage is completely secure, but we take reasonable care to protect your information.

​

14. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including for:

• providing services and managing bookings;

• customer support;

• accounting and tax records;

• insurance purposes and resolving disputes;

• legal obligations;

• business administration.

​

Health screening information is retained only for as long as needed for safety and liability purposes (typically no longer than the period we may reasonably need it to respond to an incident or claim), after which it is securely deleted.

When information is no longer required, we take reasonable steps to delete it, anonymise it, or securely store it where continued retention is required by law.

​

15. Privacy Breaches

If a privacy breach occurs, we will take reasonable steps to contain, assess, and respond to it. If a breach is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

​

16. Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

• request access to the personal information we hold about you;

• request correction of your personal information;

• ask questions about how your information is handled;

• raise a privacy concern or complaint.

​

To make a privacy request, contact us at info@dropsauna.nz.

​

We may need to verify your identity before responding. We will respond to access and correction requests within 20 working days, as required by the Privacy Act 2020. If we need more time, or need to refuse a request, we will explain why in accordance with the Act.

​

17. Accuracy of Information

We take reasonable steps to ensure the personal information we use is accurate, up to date, complete, relevant, and not misleading. Please contact us if your details change or if you believe information we hold about you is incorrect.

​

18. Children and Young People

Our sauna services are generally intended for users aged 16 and over. We do not knowingly collect personal information from children under 16 for sauna participation unless it is necessary for a specific approved booking, enquiry, legal purpose, or safety purpose (for example, with a parent or guardian's involvement).

​

19. Links to Other Websites

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices, content, or security of third-party websites. We recommend reviewing third-party privacy policies before providing personal information.

​

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on our website with the updated date. Continued use of our website or services after changes are published means you accept the updated Privacy Policy.

​

21. Complaints

If you have a privacy concern or complaint, please contact us first so we can try to resolve it:

Email: info@dropsauna.nz.

We will aim to respond within a reasonable timeframe.

​

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (www.privacy.org.nz), and ultimately raise the matter with the Human Rights Review Tribunal.

​

22. Contact Details

For privacy questions, access requests, correction requests, complaints, or general privacy concerns, please contact:

DropSauna Limited Trading as Drop Sauna

Email: info@dropsauna.nz

Phone: +64 204 191 8854

Website: www.dropsauna.nz

​

End of Privacy Policy — DropSauna Limited