1. Overview
Maja Sanctuary ("we," "us," or "our"), operated legally by White Flame LLC, provides high-end saunas, hot tubs, custom architectural wellness builds, and related services across Europe and internationally via majasanctuary.com. We are committed to protecting your personal data in full compliance with global privacy standards, including the EU General Data Protection Regulation (GDPR).
2. Data Controller & Legal Entity
The legal entity and data controller responsible for your personal information is:
- Legal Entity Name: White Flame LLC
- Registered Office Address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA
- Showroom & European Operations: Adriatic Coast, Croatia
- Contact Email: hello@majasanctuary.com
3. Data We Collect
We collect personal information necessary to process orders, provide custom project quotes, arrange showroom visits, and deliver our services:
- Contact Details: Full name, email address, phone number, and physical installation address.
- Business & Billing Information: Company name, tax identification numbers, billing address, and payment details.
- Technical & Usage Data: IP address, browser type, device information, and interaction analytics collected via cookies.
4. How We Use Your Data
We process personal data under the following lawful bases:
- Performance of a Contract: Fulfilling sauna and hot tub orders, managing manufacturing in Latvia, arranging transport, and performing turnkey on-site installation.
- Legitimate Interests: Responding to custom project inquiries, scheduling showroom visits, improving our architectural products, and maintaining site security.
- Legal Compliance: Fulfilling tax, invoicing, and corporate reporting requirements.
5. Payment Processing & Stripe
All financial transactions (including production deposits and order balances) are processed securely through our payment provider, Stripe. We do not store credit card numbers or sensitive payment credentials on our servers. Stripe processes payment information in accordance with PCI-DSS standards and their Privacy Policy.
6. International Data Transfers & Third Parties
Your personal data may be shared strictly as required to deliver our products:
- Manufacturing partners and production facilities in Latvia for order fulfillment.
- Logistics and freight carriers for European delivery (Croatia, Italy, Austria, Slovakia, etc.).
- Cloud infrastructure and IT service providers.
All processors are bound by GDPR-compliant data processing agreements.
7. Your GDPR & Privacy Rights
Depending on your location, you have the right to access, rectify, or erase your personal data; restrict or object to processing; request data portability; and lodge a complaint with a data protection authority. To exercise your rights, contact hello@majasanctuary.com.