SAUNABOX Privacy Policy
Last updated: August 14, 2026
SAUNABOX LLC, doing business as SAUNABOX ("SAUNABOX," "SaunaBox," "we," "us," or "our"), operates this store and website, including the related information, content, features, tools, products, and services (collectively, the "Services"). The Services are powered in part by Shopify. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use the Services, purchase or inquire about a product, participate in a promotion, communicate with us, or otherwise interact with us.
If this Privacy Policy conflicts with the privacy-related provisions of our Terms of Service, this Privacy Policy controls with respect to our collection, use, and disclosure of personal information. Please read this Privacy Policy carefully.
1. Personal Information We Collect or Process
When we use the term personal information, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you or your household. It does not include information that has been aggregated or de-identified so that it cannot reasonably identify you.
The personal information we collect depends on how you interact with us, the products and services you use, the preferences you select, and where you live. We may collect or process the following categories of personal information, including inferences derived from that information.
|
Category
|
Examples of information we may collect or process
|
|
Identifiers and contact information
|
Name, email address, telephone number, billing address, shipping address, account identifiers, and communications preferences.
|
|
Commercial and transaction information
|
Products viewed, added to cart, added to a wishlist, purchased, returned, exchanged, cancelled, or reviewed; cart contents; order history; subscription, pre-order, delivery, promotion, discount, and shipping-protection information.
|
|
Payment and financial information
|
Payment method, payment confirmation, transaction details, financing or installment-payment selection, and other payment-related information. Payment processors handle payment-card information as described in their own notices; we do not represent that we store full payment-card numbers.
|
|
Account and preference information
|
Account credentials, settings, product preferences, saved items, communication preferences, and subscription preferences.
|
|
Communications and user content
|
Information included in emails, calls, chats, text messages, contact forms, support tickets, reviews, referrals, surveys, warranty or returns requests, and other communications with us.
|
|
Device, network, and online activity information
|
IP address, cookie and device identifiers, browser and operating-system information, general location inferred from IP address, pages viewed, clicks, scrolling, searches, cart and checkout events, referring URLs, timestamps, and other information about how you use the Services.
|
|
Product-fit and wellness preferences
|
Information you choose to provide through product-finder tools or quizzes, such as budget range, intended installation space, household needs, heat preference, product interests, and wellness or lifestyle goals. These tools are not medical services and are not intended to provide medical advice or diagnosis.
|
|
Delivery, installation, and service information
|
Delivery address, access conditions, scheduling details, delivery preference, signature, shipping and tracking information, photographs or documentation submitted with a claim, and warranty or service information.
|
|
Professional or biographical information and inferences
|
For our limited internal high-value-customer program, professional or biographical information derived from legally accessible public sources, together with internal insights or classifications described in Section 5 below.
|
2. Sources of Personal Information
We may collect personal information from the following sources:
|
Source
|
Examples
|
|
Directly from you
|
When you place an order, create an account, add products to a cart, provide a phone number or email address, complete a quiz, contact us, write a review, submit a return, join a promotion, or otherwise provide information to us.
|
|
Automatically through the Services
|
Through cookies, pixels, local storage, web beacons, server-side events, log files, analytics tools, and similar technologies when you use the Services.
|
|
Our service providers
|
When providers collect or process information for us in connection with e-commerce, payments, delivery, communications, customer support, returns, reviews, analytics, advertising, security, and related operations.
|
|
Partners and third parties
|
From advertising, referral, affiliate, social-media, payment, financing, shipping, or other business partners, where permitted by law.
|
|
Legally accessible public sources
|
For the limited OuterSignal program described below, from information individuals choose to make public and public-record information available through legally accessible public sources. This program is currently used only in the United States and Australia.
|
3. How We Use Personal Information
Depending on how you interact with us, we may use personal information for the following purposes:
Provide, tailor, and improve the Services
We use personal information to operate the Services; process payments; fulfill orders; manage subscriptions, pre-orders, returns, exchanges, warranties, and cancellations; arrange shipping, delivery, installation, and shipping protection; provide product recommendations; remember preferences; create and manage accounts; provide customer support; display reviews; and improve our products, website, and customer experience.
Communicate with you
We use your information to send order, shipping, account, product-safety, service, returns, warranty, and customer-support communications. We may also respond to questions that you send by email, phone, text message, chat, or another channel.
Email and SMS marketing; abandoned-cart recovery
Where permitted by law and consistent with your communication preferences, we may send promotional messages by email and text message. At checkout, you may choose to provide a phone number to receive order updates, offers, and shopping-cart reminders by SMS.
We use CartForce LLC to provide human-agent SMS cart-recovery services on our behalf. When an eligible shopper abandons a cart, CartForce’s live agents may send messages to answer product questions and help the shopper complete a purchase. To provide this service, we and CartForce may process contact information, cart and checkout details, product interests, order history, discount or offer information, message content, and SMS communication preferences. CartForce processes this information to provide the service to SaunaBox.
You may opt out of promotional email using the unsubscribe link in an email. You may opt out of SMS communications by following the opt-out instructions in a message or by contacting us using the contact details in Section 15. Opting out of promotional communications does not prevent us from sending non-promotional communications about your orders, account, safety notices, or our ongoing business relationship.
Marketing, advertising, personalization, and measurement
We use personal information to market our products, measure campaign performance, personalize website content and product recommendations, understand shopping interests, attribute sales, conduct experiments, prevent duplicate or fraudulent activity, and show advertising that may be relevant to you on our Services and elsewhere online.
This may include using online identifiers, device information, browsing and shopping activity, cart events, and purchase or conversion information with advertising, analytics, attribution, personalization, affiliate, and referral partners. See Sections 6 and 7 for further information about cookies, targeted advertising, and your choices.
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .
Analytics, site improvement, and session replay
We use analytics, experimentation, and website-experience tools to understand how visitors use the Services, troubleshoot issues, measure site performance, test content and offers, and improve the customer experience. Depending on the applicable tool and configuration, this may include analysis of pages visited, clicks, scrolling, form interactions, searches, device/browser information, and session-replay or heatmap information. We configure and use these tools for our business purposes and expect them to apply appropriate technical safeguards, including masking where available.
Customer intelligence and internal high-value-customer identification
We may use OuterSignal, a customer-intelligence service, to analyze customer and order information and generate internal insights about customers who may meet our high-value-customer criteria. These insights may include inferred professional or biographical information, customer-interest indicators, and a classification or explanation of why a customer meets our internal criteria.
To help create these insights, OuterSignal may use legally accessible public information, including information individuals choose to share publicly and public-record information. We use these insights only within SaunaBox for internal business and relationship-management purposes. We do not publish these profiles or make them available to other customers. Our use of this program is currently limited to the United States and Australia.
Security, fraud prevention, and legal purposes
We use personal information to help secure the Services, authenticate users, detect and investigate suspected fraud, abuse, security incidents, or other unlawful activity, protect our rights and the rights of others, comply with legal obligations, respond to lawful requests, establish or defend legal claims, and enforce our terms and policies.
4. How We Disclose Personal Information
We may disclose personal information to third parties for the purposes described in this Privacy Policy, subject to applicable law. The categories of recipients may include the following.
|
Recipient category
|
Examples of purpose
|
|
E-commerce, hosting, and technology providers
|
Operating the Shopify storefront, accounts, forms, site functionality, cloud services, security, and related infrastructure.
|
|
Payment, financing, and eligibility providers
|
Processing payments, payment confirmations, financing or installment-payment options, HSA/FSA-related transactions, tax, accounting, and fraud prevention.
|
|
Shipping, fulfillment, delivery, installation, and returns providers
|
Fulfilling orders, managing inventory, delivering products, scheduling freight or White Glove services, providing shipping protection, tracking shipments, and processing returns, exchanges, or warranties.
|
|
Communications and support providers
|
Sending email or SMS communications, operating customer-support and chat tools, and providing CartForce LLC’s live-agent SMS cart-recovery service.
|
|
Marketing, advertising, analytics, and personalization providers
|
Measuring advertising, performing attribution, operating pixels and server-side events, conducting analytics and experiments, providing session replay or heatmaps, personalizing content, and operating referral, affiliate, review, or creator programs.
|
|
Customer-intelligence provider
|
OuterSignal, for the limited internal high-value-customer program described in Section 3.
|
|
Professional advisers and legal authorities
|
Auditors, insurers, attorneys, advisers, regulators, government authorities, and other parties where necessary to comply with law, protect rights, or respond to legal process.
|
|
Business transferees
|
A prospective or actual purchaser, lender, investor, successor, or assignee in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
|
Depending on the Services you use and the configuration in place at the time, service providers may include Shopify; payment, financing, and delivery providers; CartForce LLC; Klaviyo; Gorgias; Yotpo; Route; Rebuy; Intelligems; Lucky Orange; OuterSignal; Consentmo; advertising platforms such as Meta, Google/YouTube, TikTok, Snapchat, and Reddit; attribution providers; and affiliate, referral, fulfillment, returns, and inventory-management providers. This list is illustrative and may change as our operations change.
We may also disclose personal information when you ask or authorize us to do so, such as when you use a social-media feature, select a financing option, request delivery, participate in a referral or affiliate program, or otherwise direct us to share information with a third party.
5. Cookies, Pixels, and Similar Technologies
We and our service providers use cookies, pixels, web beacons, software-development kits, local storage, log files, and related technologies. These technologies help us operate and secure the Services; remember preferences; maintain carts and sessions; measure traffic and performance; understand product interest and interactions; personalize content; analyze advertising and conversion performance; and deliver or measure advertising.
Our cookie-preference tool allows you to manage certain nonessential technologies. The categories displayed in that tool may include necessary, functional or personalization, analytics, and advertising or targeting technologies. You can also adjust certain browser settings to manage cookies. Disabling some technologies may affect how the Services function.
Our services may use cookies and similar technologies from Shopify and from service providers associated with analytics, advertising, communications, personalization, reviews, referrals, fraud prevention, and site functionality. For details about the active technologies on your browser or device, use the cookie-preference tool available through the Services.
6. Targeted Advertising and Your Privacy Choices
We may use or disclose personal information for targeted advertising, advertising measurement, attribution, and related marketing purposes. For example, our advertising and measurement partners may receive online identifiers, device/browser information, pages or products viewed, cart events, purchase or conversion events, and related activity. Under some privacy laws, these activities may be considered a "sale," "sharing," or processing for "targeted advertising."
You may opt out of these uses by visiting our Your Privacy Choices page. This opt-out is designed to be available without requiring you to create an account.
We also honor qualifying opt-out preference signals, such as the Global Privacy Control, where required by applicable law. If your browser sends such a signal, we will treat it as a request to opt out of sale, sharing, or targeted advertising for that browser and device to the extent required by law. If we can associate that browser or device with your account, we may apply the request to the associated account as required by applicable law. Other than qualifying opt-out preference signals, we do not respond to browser "Do Not Track" signals.
7. Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve its services. Information you submit through the Services may be transmitted to and shared with Shopify and with service providers that may be located outside your country of residence.
We may use Shopify features that incorporate information from interactions with our store, other merchants, or Shopify. Shopify may be responsible for certain processing associated with those features, including certain requests relating to Shopify’s use of personal information. You can learn more by reviewing the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
8. Retention and Security
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, complete transactions, comply with legal and accounting obligations, resolve disputes, maintain security, and enforce our agreements. The criteria used to determine retention include the nature of the information, the purpose for which it was collected, the sensitivity of the information, our legal obligations, and the possibility of a dispute or investigation.
We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no security measure is perfect, and we cannot guarantee absolute security. Information transmitted over the internet may not be secure while in transit. Please do not send highly sensitive information to us through insecure channels.
9. Children’s Data
The Services are not directed to children. We do not knowingly collect personal information from children under the age of 16 or the age of majority in their jurisdiction, as applicable. If you are a parent or guardian and believe that a child has provided personal information to us, please contact us using the details in Section 15 so that we can review and, where appropriate, delete the information.
As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable law, personal information of individuals under 16 years of age.
10. Third-Party Websites and Services
The Services may contain links to third-party websites, payment options, social-media platforms, or other services that are not operated or controlled by us. Their privacy practices are governed by their own notices and terms. We are not responsible for the privacy, security, accuracy, or content of third-party services. If you provide information directly to a third party, that third party’s privacy policy will apply.
11. Your Privacy Rights and Choices
Depending on where you live and subject to applicable law, you may have the right to request access to or a copy of your personal information; correction of inaccurate information; deletion of personal information; portability of certain information; restriction of certain processing; objection to certain processing; withdrawal of consent where we rely on consent; and an appeal of a decision regarding your privacy request.
You may submit access, correction, deletion, or related U.S. privacy requests through our U.S. Privacy Requests page or by contacting us as described in Section 15. We may need to verify your identity before responding. Where permitted by law, an authorized agent may submit a request on your behalf; we may request proof of authorization and may require you to verify your identity directly.
We will not discriminate against you for exercising applicable privacy rights. We will respond to verifiable requests within the period required by applicable law. If we deny a request, you may have a right to appeal; to appeal, contact us with the subject line “Privacy Appeal.”
Additional information for U.S. residents
Residents of certain U.S. states may have rights to know, access, delete, correct, obtain a portable copy of, or opt out of certain processing of personal information, including sale, sharing, targeted advertising, or certain profiling, as applicable. California residents may also have a right to limit certain uses and disclosures of sensitive personal information where applicable. To exercise an available opt-out right, use our Your Privacy Choices page or send a qualifying opt-out preference signal as described in Section 6.
Additional information for UK and EEA residents
If you are in the United Kingdom or European Economic Area ("EEA"), you may have rights under applicable data-protection law, including rights to access, correct, delete, restrict, or object to certain processing; receive a portable copy of certain information; withdraw consent where processing is based on consent; and lodge a complaint with your local data-protection authority.
Our legal bases for processing personal information in the UK and EEA may include processing necessary to perform a contract with you, comply with legal obligations, pursue our legitimate interests where those interests are not overridden by your rights and interests, and obtain consent where required. To exercise your rights, contact us using the details in Section 15.
12. International Transfers
We may transfer, store, and process personal information in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country of residence.
When we transfer personal information from the UK or EEA to a country that has not been recognized as providing an adequate level of protection, we will use an appropriate transfer mechanism as required by applicable law, which may include the European Commission’s Standard Contractual Clauses or the applicable UK equivalent.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements, or other operational reasons. We will post the updated version on the Services, revise the “Last updated” date, and provide additional notice where required by applicable law.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise a privacy right, contact us at:
SAUNABOX LLC
606 Venice Blvd, Venuce Beach CA
United States
For purposes of applicable data-protection laws, SAUNABOX LLC is the controller of your personal information, except where a different entity is identified in a separate notice.
