Privacy Policy · Birthday Suit Sessions

Version 1.2. Effective 9 July 2026. It describes how we handle personal information for the Get Naked Australia “Birthday Suit Sessions” run by Blue Mountains Sauna.

What changed in version 1.2: you can now keep a small list of “saved guests” in your account (the people you regularly bring, such as a partner) so you can add them to a future booking in one tap. See Section 6 and Section 11.

What changed in version 1.1: a booking request now also records each guest’s date of birth (not just name and gender), so we can confirm every guest is 18 or over. The guest’s date of birth is removed once the session has passed. See Sections 2, 3, 6 and 11.

Applies to: the Birthday Suit Sessions sign-up form, the booking-request portal, the guest cards, and the emails we send about these events.

1. Who we are and how to contact us

The Birthday Suit Sessions are an adults-only, strictly non-sexual, all gendered nude communal sauna event. They are run by:

Blue Mountains Sauna Pty Ltd 7 Quinns Avenue, Leura NSW 2780, Australia ABN: 22 659 365 018

We run these sessions in partnership with Get Naked Australia (GNA). In this policy, “we”, “us” and “our” mean Blue Mountains Sauna Pty Ltd, which is the business that collects and holds your information and is responsible for it.

For anything to do with your privacy, your information, or this policy, contact:

Email: getnaked@bmsauna.com.au Phone: +61 438 287 252 Post: Privacy, Blue Mountains Sauna, 7 Quinns Avenue, Leura NSW 2780

Our privacy contact, who is also the person responsible for responding to any data breach, is the owner of Blue Mountains Sauna, reachable at getnaked@bmsauna.com.au. Privacy, access, and deletion requests sent to that address are handled confidentially by that person and are not used for marketing.

This policy is written to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and under the Spam Act 2003 (Cth) for the emails we send.

2. This event is 18 and over only

You must be 18 or over to sign up, to request a booking, or to be added as a guest. Everyone who attends, including a guest added by someone else, must be 18 or over.

When you sign up or request a booking, we ask for your date of birth and you confirm you are 18 or over, and we record the date and time you confirmed it. When someone adds you as a guest, they provide your date of birth and confirm they are only adding adults, and our age check runs on our server before the guest is saved. You confirm your own details yourself when you complete them through your verified link.

We do not knowingly collect or keep any information about anyone under 18. Our age check runs on our server before anything is saved. This means that if the age check fails:

we do not save the record, and
we never save any photo submitted in that request, even briefly. The age check runs before any photo is written to storage, so a failed-age submission leaves nothing stored anywhere, including any temporary copy.

If you believe we hold information about someone under 18, please contact us straight away at getnaked@bmsauna.com.au and we will delete it.

3. Can you be anonymous?

For the mailing list, we need a real first name, last name and contact details so we can send you information and later confirm who is on a request.

For attendance vetting, you cannot take part anonymously or under a pseudonym. The whole point of the vetting is safety and comfort in a nude communal space, and that only works if we know who is attending. If you would rather not provide vetting information, you are welcome to stay on the mailing list, but we will not be able to process a booking request.

4. What we collect, and when

We collect your information in two separate stages, and the split matters, so we set it out plainly.

When you sign up to hear about upcoming sessions, we collect:

your first name and last name,
your email address,
your phone number,
your date of birth, and
a timestamped confirmation that you are 18 or over.

We ask for your phone number so we can reach you quickly about a booking you have made, and for your date of birth so we can verify you are 18 or over. We also generate some housekeeping data at this point: your subscription status for each of our two email streams (see Section 7), a private unsubscribe token, the date and time you confirmed (your consent record), and the version of this policy that applied when you signed up.

Signing up to the mailing list does not require any sensitive vetting information, and does not require a photo.

Stage 2: Booking-request vetting (only if you ask to attend)

Only when you actually request a booking for a specific session do we collect the vetting information we need to run a safe, comfortable, nude communal space. This information is kept in a separate part of our system from your basic mailing-list record (see Section 8). At this stage we collect:

your gender,
whether you have done communal nude bathing before, and if so a short free-text note about where and the context,
your acknowledgement that these sessions are strictly non-sexual,
your attendance preference (by yourself, or with a partner or friend),
and, for safety and community vetting, either a link to a social-media profile OR a photo you upload, plus a short “about you” note.

If you add guests to your booking, we collect each guest’s first name, last name, gender and date of birth as a snapshot on your request (the date of birth so we can confirm each guest is 18 or over; see Section 6 for how guests are handled and notified).

We ask you not to include other people’s names or identifying details in the free-text fields. These fields have a length limit. If someone does include another person’s identifying details despite this request, we will remove them, and they are deleted on the same schedule as the rest of the vetting record.

Some of this is sensitive information

Under the Privacy Act, some of the Stage 2 information is sensitive information, which gets stronger protection and needs your specific consent (Section 6). In particular, information about your communal nude bathing history is information about your sexual practices, and your gender is treated as sensitive here.

We also treat your photo as highly sensitive. A photo you give us for vetting a nude event, taken together with the event itself, can reveal sensitive things about you. Because of that, we ask for your specific consent to collect and hold it, and we protect it as carefully as the rest of the vetting data. The fact that you are asking to attend a nude event is itself sensitive, and we handle all of this data on that footing.

Information we collect automatically

When you use the sign-up form, the portal, or click our emails, we and our providers may collect limited technical information such as your IP address, timestamps, and email delivery and engagement events (delivered, opened, clicked, bounced, marked as spam). We use this to run the service, keep it secure, prevent abuse, and honour unsubscribe and suppression rules.

5. Why we collect it (purpose) and our lawful basis

We collect your information for these purposes:

Information	Why we collect it
Name, email, phone, date of birth, 18+ confirmation	To add you to the mailing list, tell you when sessions open, contact you about a booking, and confirm you are eligible to attend
Gender	To help run a safe and comfortable nude communal space, using documented and non-discriminatory criteria. Gender is never used to exclude anyone
Attendance preference	To understand whether you are attending alone or with someone
Communal nude bathing history	To vet requests and support a safe, respectful, non-sexual environment
Non-sexual acknowledgement	To make sure everyone understands and accepts the nature of the event
Social-media link or photo, “about you”	For safety and community vetting of people attending a nude event
Guest details (name, gender, date of birth)	To manage your party, each guest’s place at a session, and to confirm each guest is 18 or over
Email delivery and engagement events	To run the mailing responsibly, suppress bounced or complaining addresses, and honour unsubscribes

Our lawful basis for handling ordinary personal information is that it is reasonably necessary for our functions and activities in running these events. For sensitive information, our basis is your consent, given specifically at the point of collection (Section 6). You do not have to provide vetting information, but without it we cannot process a booking request for a nude event.

Mailing-list consent. When you sign up, you consent to us holding your details and sending you information about the Birthday Suit Sessions. We use double opt-in, so you also confirm by clicking a link in an email before we send you anything further (Section 7).

Consent at the booking-request stage. When you request a booking, you give your consent, through a clearly labelled tick-box, for us to collect the details on that form so we can run the sessions. Some of those details are more personal than a mailing-list sign-up: your gender, whether you have done communal nude bathing before, and either a social-media link or a photo. This policy sets out what we collect, why, who can see it, where photos are stored, how long we keep it, whether any of it is processed outside Australia, and how to have it deleted (Sections 4, 8, 10 and 11). The consent tick-box links to this policy.

Giving this information is your choice. If you would rather not, we simply cannot process a booking request for a nude event, but you can stay on the mailing list.

The “strictly non-sexual” acknowledgement and your consent to collect these details are two separate, deliberate tick-boxes.

How guests are handled and notified. If someone adds you as a guest, that only creates a snapshot of your first name, last name, gender and date of birth against their request (the date of birth so we can confirm you are 18 or over). It does not sign you up to marketing, and it does not collect any sensitive vetting information about you. We collect these few details from the person making the request rather than from you first, because it is not practical to reach you before they can say who is in their party. When you are added as a guest, we send you a one-time notice by email telling you that your name, gender and date of birth were provided for a Birthday Suit Sessions request, why, and how to access or delete this information, with a link to this policy. This notice is not marketing. Any login, account, or sensitive vetting for you happens only when you confirm it yourself through your own verified link. If your email already matches an existing sign-up, we link to it rather than overwrite it. We never treat one person’s submission as consent on another person’s behalf.

Saved guests (your address book). To save you re-typing, the people you add to a booking are also kept in a small “saved guests” list in your own account (their first name, last name, gender, email and date of birth), so you can add a regular such as a partner to a future session in one tap. This list is private to you: no other member can see it. You can remove anyone from it at any time on your account page, and it is deleted when you close your account. If someone has saved you as one of their guests, you can ask us to remove your details from their list by emailing getnaked@bmsauna.com.au, and asking us to delete your information removes you from any saved-guests list as well.

Withdrawing consent. You can withdraw your consent at any time by contacting us (Section 12). If you withdraw your consent for vetting, we cannot continue to process a booking request that relies on it, and we delete or de-identify your sensitive vetting record and any photo in line with the retention rules in Section 11, subject to any short lawful hold.

We treat our Birthday Suit Sessions emails as commercial electronic messages under the Spam Act 2003 (Cth). All of our Birthday Suit Sessions email templates (the campaign email, the confirmation, the “needs a partner” email, and the pre-purchase reminder) are treated as commercial, because they promote or help you buy a paid session. So every one of them carries our identification and a working unsubscribe.

Two email streams you can control separately. We run two separate streams, and you can opt out of each on its own:

Updates: news about upcoming sessions and when they open.
Booking-operational: confirmations, “needs a partner” notices, and pre-purchase reminders tied to a request you have made.

Unsubscribing from updates stops the news emails. You can also opt out of booking-operational emails, though if you do you may miss confirmations or reminders about a booking you have asked for.

We only add you with your consent. For updates, we rely on express consent through double (confirmed) opt-in. After you sign up, you are not sent update emails until you click a confirmation link. We do not treat an inbound email to us, an event enquiry, a past attendance, or any address published somewhere as new permission to market to you.
Contacts carried over from our previous sign-up tool. Some contacts were carried across from our earlier Birthday Suit Sessions sign-up list, on the basis of the interest they registered there in hearing about these sessions. Every email we send to them carries clear sender identification and a one-click unsubscribe, and they can opt out at any time. Their earlier “subscribed” status is retained so we can honour their original preference.
Sender identification. Every commercial email we send clearly identifies us and how to contact us: Blue Mountains Sauna Pty Ltd, ABN 22 659 365 018, 7 Quinns Avenue, Leura NSW 2780, getnaked@bmsauna.com.au, +61 438 287 252. We keep this contact information accurate for at least 30 days after we send, as the Spam Act requires.
Unsubscribe. Every email carries a working unsubscribe link, and supports one-click unsubscribe directly from your email client. Unsubscribing is one action. We action every unsubscribe within 5 business days, as the Spam Act requires, and in practice our system suppresses your address straight away.
What we keep as your consent record. We record when you confirmed (the date and time), that you confirmed by clicking the link, how you signed up (our own form), and which version of this policy applied at the time. We keep this so we can show your consent was genuine if it is ever questioned.
Suppression. If you unsubscribe, or your address bounces or is marked as spam, we add it to a suppression list and stop mailing it. We keep the minimum needed to do this, being the email address (or a one-way hash of it) and the reason and date, and nothing else about you. We keep this record even if you later ask us to delete your other data, so that a re-added address is not accidentally emailed again (Section 11).

Do we ever email guests? A guest is never sent marketing until they complete their own double opt-in. The only emails a guest may receive are the one-time privacy notice described in Section 6 and, if they are on a request that needs their vetting completed, automatic reminders to finish it. These are operational, not marketing, and there is no path in our system that marketing-emails a guest-snapshot address the guest never confirmed.

8. How we store and secure your information

Separate vetting store. Your minimal mailing-list record and your sensitive vetting record are kept in separate database tables. This lets us keep, and delete, the sensitive vetting record independently of your basic contact record, and keeps the sensitive data isolated.
Private photo storage. Photos are stored in private object storage, under a location that our public routes refuse to serve, using non-guessable random file names. Photos are never available at a public or guessable web address.
Gated, logged photo access. A photo can only be viewed through a staff-only, logged-in tool. Every time a photo is viewed we write an access-log entry recording who viewed it, which record, and when, and this entry is written before the photo is shown. Photos are served so they are not cached along the way.
Access controls. Access to the admin tools needs a separate staff login that is completely distinct from the mailing-list or booking login. A member or mailing-list login can never unlock staff or admin functions. The most sensitive fields (communal-nude details, photo, gender) sit behind an extra, deliberate step to view.
Encryption and transport. Data is sent over encrypted connections (HTTPS). Our database and storage providers encrypt data at rest.
Abuse protection. Sign-up and upload forms are protected against bots and abuse, and these protections are required, not optional: if they are not working, the form refuses the submission rather than letting it through. We keep responses neutral so no one can use the form to work out who has registered for a nude event.

No system is perfectly secure, but we design, build, and review this one with the sensitivity of the data as a first-class requirement.

Where your information is stored (overseas handling). Our website, database and private photo storage run on Cloudflare, and our emails are sent through our email delivery provider. These providers may store or process your information outside Australia, including in the United States and other countries where they operate. Under APP 8 we take reasonable steps, including provider contractual terms that require handling consistent with the Australian Privacy Principles, to ensure your information is protected, and we remain accountable for how these providers handle it. Where we collect sensitive vetting information, the booking consent also tells you plainly that some processing happens overseas, so your consent covers it.

Inside our team. Access is limited to a small, trusted set of staff who run the sessions, by default the getnaked@ owner plus a minimal group. The most sensitive fields sit behind an extra step to view, and viewing a photo is logged. We do not make this data broadly available across staff.

Get Naked Australia (partnership). These events are run in partnership with Get Naked Australia. We do not share any personal information with Get Naked Australia.

Punchpass (payment). Passes for confirmed bookings are purchased through Punchpass, a third-party booking and payment platform. When you buy a pass, you deal with Punchpass directly and provide your information to them under their own privacy terms, which you can read at www.punchpass.com/privacy. We do not send your personal information to Punchpass; we use Punchpass records that you create by buying a pass to reconcile who has paid.

Service providers. We use trusted providers to run the service, including Cloudflare (website, database and photo storage) and our email delivery provider. These providers handle data on our behalf under their own terms, and some may store or process data overseas (Section 8).

Legal and safety. We may disclose information if required by law, or to protect the safety of people at our events.

We do not sell your personal information, and we do not use it for advertising unrelated to these sessions.

10. Third-party providers we rely on

Provider	What they do	Notes
Cloudflare	Runs the website, the database, and private photo storage	May store or process data overseas (Section 8)
Our email delivery provider	Sends our emails and records delivery, open, click, bounce and complaint events	May store or process data overseas (Section 8)
Punchpass	Booking and payment for passes	You deal with Punchpass directly to pay. See Punchpass’s privacy policy at www.punchpass.com/privacy
Get Naked Australia	Event partner	No personal information is shared with Get Naked Australia (Section 9)

11. How long we keep your information, and when we destroy it

We keep information only for as long as we need it, then destroy or de-identify it, in line with APP 11.2. Because the two types of record are stored separately, we can apply different retention rules to each. Each period below has a trigger (the event that starts the clock) so deletion actually happens on a set date rather than being open-ended.

Category	How long we keep it	Trigger, then what happens
Mailing-list record (name, email, phone, 18+ confirmation, consent record)	While you stay subscribed	Deleted on unsubscribe or deletion request, and deleted after 24 months with no opens or clicks
Date of birth	With your contact record	Kept with your contact record so we can confirm eligibility, reviewed at the 24-month mailing-list purge, and removed on a deletion request
Vetting record (gender, communal-nude history and details, non-sexual acknowledgement, attendance preference, “about you”, social-media link)	While your account is active	We vet once. The vetting record and decision persist while your account is active, so you do not re-vet for every session. Deleted when your account is closed, or on a deletion request or withdrawal of consent
Safety photo	The shortest of all	Deleted within 30 days of the session, and immediately on a declined or withdrawn request, sooner than the rest of the vetting record. Deletion physically removes the stored photo file, not just its reference
Guest snapshot on a request (name, gender, date of birth, and any email)	Tied to the same request	The guest’s date of birth and any email are removed once the session has passed; the remaining name and gender snapshot is deleted with the request record, and de-identified immediately if the guest asks to be removed
Saved guests in your account (name, gender, email, date of birth)	While you keep them	Kept so you can re-add a regular guest quickly. Deleted when you remove the guest, when you close your account, or when that person asks us to delete their information
Photo access log (who viewed a photo and when)	12 months	Deleted after 12 months. A contact deletion de-identifies this log’s reference to that contact
Booking and payment-reconciliation records	5 years	Retained for the minimum required by tax and accounting law (commonly 5 years under ATO rules), then deleted or de-identified
Email delivery and engagement events	12 months	Deleted or de-identified after 12 months
Suppression records (unsubscribed, bounced, complained addresses)	While we send these emails	Retained to meet our Spam Act duty not to email a person who has opted out or complained. Holds only the email address (or a one-way hash) plus the reason and date, and no other personal or sensitive information, even after a deletion request (Section 7)
Any record where the age check failed	Not retained at all	Never saved. Any submitted photo is never written anywhere, including temporary storage (Section 2)

We run an automated purge process daily so these periods are actually enforced, not just promised. Each category is destroyed or de-identified once its trigger date passes.

What a deletion removes. When we delete a contact at your request, we remove or scrub everything tied to you: your mailing-list record, your sensitive vetting record and all its fields, the stored photo file and its reference, your email events, your send history, your login sessions and login links (which are tied to your record, not a re-usable token), and your reference in the photo access log. The only thing we keep is the minimised suppression record described above, so we do not accidentally email you again.

12. Your rights: access, correction, and deletion

Under the Australian Privacy Principles you can:

Access the personal information we hold about you (APP 12), and
Ask us to correct it if it is wrong, out of date, incomplete or misleading (APP 13).

Australian privacy law does not include a general “right to be forgotten” the way some overseas laws do. Even so, as a matter of our own practice, and because we do not keep sensitive information longer than we need it, we will delete your information on request, and we delete it in the normal course under the retention rules in Section 11. You can withdraw your consent for vetting at any time, which triggers deletion of the sensitive record as described in Section 6.

You can also view and edit your own stored details, and add or remove guests, directly in the booking portal when you log in.

To make an access, correction, or deletion request, or to withdraw consent, contact us at getnaked@bmsauna.com.au (details in Section 1). We will respond within a reasonable time, and aim to do so within 30 days. There is normally no charge. If we cannot give you access or make a change, we will explain why in writing and tell you how to complain. We may need to confirm your identity first.

Please note the suppression-list exception in Sections 7 and 11: to keep honouring your unsubscribe, we retain the minimum needed to avoid emailing you again. Unsubscribing from emails is faster than this and is governed by the Spam Act (within 5 business days), not this 30-day timeframe.

13. How to make a privacy complaint

If you are concerned about how we have handled your personal information, please tell us first so we can try to put it right:

Email: getnaked@bmsauna.com.au Post: Privacy, Blue Mountains Sauna, 7 Quinns Avenue, Leura NSW 2780

We will acknowledge your complaint and aim to respond within 30 days. If we have not resolved it within 30 days, or you are not happy with our answer, you can take it to the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Post: OAIC, GPO Box 5288, Sydney NSW 2001

14. Data breaches

We have a plan for responding to a data breach, and a named person responsible for it: the owner of Blue Mountains Sauna, who is also our privacy contact in Section 1. If a breach happens that is likely to cause you serious harm, we will contain and assess it and, where the Notifiable Data Breaches scheme requires, notify you and the OAIC as soon as practicable. Given the sensitivity of this data, we treat any suspected breach as serious and act quickly.

15. Changes to this policy

We may update this policy as the service changes or the law requires. We note which version of this policy you agreed to against your record. When we make a significant change, we will take reasonable steps to let affected people know. The current version and its effective date appear at the top of this policy.

Birthday Suit Sessions: Privacy, Consent and Data Retention Policy