Secret Sauna Company ("SSC," "we," "us") builds saunas. We're not in the data business, so we ask for the least we can get away with and we'd rather tell you exactly where it goes than write you a page of legal cover. Everything below describes what this site actually does today. Where something isn't set up yet, we say so instead of promising it.
What the quote configurator asks for
When you build a configuration and hit send, the form asks for five things. Here's why each one is there:
- Your name, so we know who we're writing back to.
- Your email, so we can send the quote. We use it to reply to your inquiry and for nothing else. We won't add you to a mailing list off the back of a quote request. If we ever start one, we'll ask you first.
- Where the sauna would go, a city or area. Delivery and siting change the price, so we can't quote it without knowing.
- How we'd get it in place, picked from a short list. Whether a truck can back up to the spot or the thing needs a crane is the difference between a straightforward drop and a build on site.
- Anything else about your site, optional and in your own words. Slope, gates, power, whatever you think we should know.
Your configuration goes along with it: the model, the options you picked, and the estimated total. That's the whole submission. We use it to scope and quote a custom build, and to talk with you about that build.
The contact form
The general contact form asks for your name and email, optionally your phone number, and a few dropdowns about the project: type, timeline, budget range, heat source, and capacity. There's a message box for anything else. Same purpose, and the same rule on your email address.
What stays in your browser
While you're using the configurator, your selections are saved on your own device so a closed tab doesn't cost you the work. That saved record holds the model and the options you ticked. It does not hold your name, your email, your location, or your notes. Contact details are never written to your device.
It clears itself after 7 days. It also clears the moment you send the configuration, and there's a "Start over" button beside the price summary that wipes it immediately. Those are the only three things that remove it.
Where a submitted form goes
Both forms are handled by Formspree, a form processor based in the United States. Your submission is stored on their servers and forwarded to our email inbox.
That means your information crosses the border and is held in the US, where it's subject to US law. A US court order or government demand can reach data held there. That's true of any US processor, not just this one. If you'd rather not send anything through the form, email us directly and we'll take it from there.
How long we keep it
Being straight with you here, because this is the part most policies fudge. A submitted quote or contact request currently lives in two places: Formspree's dashboard and our email inbox. Neither one has an automatic deletion window switched on right now, so assume a submission stays until we delete it by hand.
We're working on a 90-day automatic deletion cycle for the form processor. That's a commitment we're making, not something that's running yet, and we won't describe it as current practice until it is. This page gets updated the day it's turned on.
In the meantime, if you want your inquiry deleted, ask us and we'll do it. That offer stands whether or not the automatic cycle exists.
What the site measures
We record anonymous usage events to see which pages get read and where people get stuck in the configurator. Page views, which model was opened, whether someone reached the second step. Counts and categories.
Those events never carry your name, email, message, or location. That isn't just a policy we've written down somewhere. The tracking code drops any field named like contact details, and drops any value shaped like an email address or a phone number, before anything leaves your browser. What you type into a form goes to our inbox and not into an analytics table.
What the analytics does record, and we'd rather name it than hide behind the word "anonymous": your IP address, your browser and operating system, your screen size, the page that sent you here, and a random session ID that lasts until you close the tab. An IP address counts as personal information under BC law, so we're not going to call the whole thing anonymous and leave it at that.
There are no advertising trackers on this site and no third-party ad networks. We don't build profiles and we don't follow you to other websites.
Cookies
This site doesn't set any cookies. Not for analytics, not for advertising, not for anything else. That's why you've never seen a consent banner here, and it isn't an oversight. The two things we store live in your own browser's storage: the saved quote configuration described above, and the random session ID the analytics uses.
Other services in the picture
- Netlify hosts the site and serves the pages you're reading.
- Formspree handles form submissions, as described above.
- Supabase stores the usage events behind our own analytics.
We link out to our Instagram and Facebook pages, but there's no Meta pixel or social tracker on this site, so reading it doesn't tell Meta anything about you. Session bookings run on a separate booking site at book.secretsaunacompany.ca, which has its own privacy terms and isn't covered by this policy. We don't take payments through this website.
We don't sell, rent, or trade your personal information. Not to anyone, not for marketing, not ever.
Seeing it, fixing it, deleting it
You can ask what personal information we hold about you, ask for a copy of it, ask us to correct anything that's wrong, and ask us to delete it. You don't need a reason and there's no form to fill in.
Email secretsaunacompany@gmail.com and we'll respond within 30 days, which is the deadline BC's privacy law sets. If we need longer, or we have to say no to part of a request, we'll tell you that inside the same 30 days and explain why.
If we get it wrong
Come to us first and we'll try to sort it out. If you're not satisfied with how we've handled your personal information or your request, you can complain to the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC). They're independent of us and they can investigate. Their office is at oipc.bc.ca.
The law this sits under
We're a BC business, so British Columbia's Personal Information Protection Act (PIPA) is the law that governs how we handle your personal information. Because form submissions are processed in the United States, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) also applies to that cross-border piece. Both, not one or the other.
Contact
Questions about this policy, or about anything we hold on you? Get in touch or email secretsaunacompany@gmail.com.