Privacy Policy

Last updated: 10 September 2026

This Privacy Policy explains how seána (“we”, “us”, “our”) collects, uses, and protects your personal data when you use seana.ie and the seána app. We are committed to handling your data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. It should be read alongside our Cookie Policy.

Who we are

Octavian Rosca operates seána and is the data controller for the personal data processed to run this platform. For privacy requests, contact ocrosca@gmail.com.

What data we collect

• Information you give us — such as your name, email address, and any details you submit when you contact us, book a call, or list your sauna business.
• Booking and account data — where you use the app to make a booking, we process the details needed to fulfil it, including booking times and payment status. Card payments are handled securely by our payment provider (Stripe); we do not store your full card details.
• Usage and device data — technical information needed to deliver and secure the service, such as IP addresses and request logs. The landing page does not install analytics or advertising trackers. See our Cookie Policy for detail.

How we use your data

• To provide and operate the seána platform, including discovery, bookings, and business listings.
• To respond to your enquiries and arrange calls you request.
• To process bookings and payments through our payment provider.
• To understand how the service is used and to improve it.
• To send you service-related communications, and — only where you have consented — marketing updates.

Legal bases for processing

We rely on the following legal bases under the GDPR: performance of a contract (to provide bookings and services you request), consent (for non-essential cookies and marketing), legitimate interests (to operate, secure, and improve our service), and legal obligation (where we must retain records by law).

Sharing your data

We do not sell your personal data. We share it only with trusted service providers who help us run the platform — for example payment processing (Stripe), customer, owner and administrator authentication (Clerk), and website, database and photo hosting — and only as needed for those purposes. We may also disclose data where required by law.

The sauna you book receives the details needed to fulfil your booking. A shared session link contains the public sauna and session details, not your name, email, booking reference or payment credentials. If you share it through WhatsApp, WhatsApp processes your use of its service under its own privacy policy.

How long we keep it

We keep personal data only for as long as necessary for the purposes set out above, or as required to meet legal and accounting obligations. When data is no longer needed, we delete or anonymise it.

Account and profile information is needed while you use the service. Verified deletion requests are reviewed across application records, authentication, notifications and service providers. Records required for accounting, disputes or other legal obligations may be retained with unnecessary personal fields removed; the current booking-redaction process uses a six-year financial-record window. Unresolved bookings or payments may require review before deletion. We will explain any records retained and the applicable reason when responding to your request.

Your rights

Under the GDPR you have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email us at ocrosca@gmail.com.

You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) if you believe your data has been handled improperly.

We normally respond to rights requests within one month of receipt. If a permitted extension is needed, we will explain it within that period. An automated download or confirmation is not confirmation that every external-provider record has been exported or erased.

Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to safeguard your information at all times.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date.

Contact

Questions about this policy or your data? Email us at ocrosca@gmail.com.