Skip to content
Sacred Society

Privacy & Data Protection

Privacy Policy

We handle your personal information with care and transparency. Here's what you need to know.

Effective: January 1, 2025Last Updated: October 13, 2026

In Summary

What This Policy Covers

This privacy policy applies to the Sacred Society website, including our public pages, embedded or linked booking and newsletter experiences, promotional popups, and the staff portal available through this website.

Some pages or workflows rely on third-party services such as Momence, BambooHR, Mailchimp, Google, Meta, PostHog, Sentry, Cloudflare Turnstile, Upstash, and other operational vendors. When you interact with those services, they may process information under their own privacy notices in addition to this policy.

What We Collect

Information you provide directly

  • Contact details and other information you submit through newsletter forms, promotional signups, inquiry forms, application flows, contact forms, and other request flows made available on the site.
  • When you RSVP to a studio celebration, your name, email address, how many people are coming, and whether you also chose to receive our newsletter. We keep your RSVP with our email provider, Mailchimp, tagged for that celebration; unless you choose the newsletter, we do not send you marketing emails.
  • When you enter a giveaway, your first and last name and your email address. Entering adds you to our emails: we keep your entry with our email provider, Mailchimp, tagged for that giveaway, use it to run the giveaway, draw the winners, and tell the winners by email, and send you our emails, which you can unsubscribe from anytime without losing your entry.
  • When you send us a photo for a seasonal community ofrenda, the photo, your name and email address, and the message you add. We email them to our reception team, through our email provider, Postmark, so we can print the photo for the ofrenda and write back to you if we need to; we keep our own copy of the photo privately and never post it online.
  • Booking, membership, class, or appointment information you provide through Sacred Society pages or linked booking providers such as Momence. Payment card details are generally processed by those providers rather than stored directly by Sacred Society.
  • If you are or were a client on Momence, the booking system some of our classes still use, we copy what Momence holds about you into our own platform every night until the studio finishes with Momence: your name, email address, phone number, your birthday if the studio keeps one there, postal address, the date you joined, your visits (upcoming ones included, with your spot in the room and whether a booking repeats) and the services you used, your tags, the class credits you hold there, which keep working on our Momence classes and move to your account when we finish with Momence, unless the studio keeps that kind of credit on Momence, and any membership you hold there, with its plan, when it renews, any freeze, any renewal Momence couldn't charge, and how much of its booking limit you have used. Once Momence makes its sales records available to us, we also copy the payments behind your Momence bookings from the last six months: what each paid for, the amount, any discount code, and the kind of payment, never your card details. When the studio moves a class from Momence to our own platform, we may also import Momence's sales reports for it: how each of your bookings there was paid and the amount, which our staff see beside the booking and which we use to pay the class's teacher, kept for 180 days after each sale. When we finish, we also copy the notes the studio kept about you there and stop keeping the payments copied from its sales records; those imported from its sales reports are removed when their 180 days end. When the studio's staff open one of our Momence classes, and before a seat is sold in a class the studio moved from Momence to our own platform, we also ask Momence who is booked on it, keeping that answer on our servers for about a minute and storing nothing new about you. We only read from Momence and change nothing there, copying sends you nothing, and we send no text message to a number copied from Momence except a code you ask for to confirm it is yours and, only after you turn them on in your account, texts about your bookings.
  • If you create a customer account, your first and last name, your email address, the language you want our emails in, a password only if you choose to set one (stored only in hashed form), and, if you add them later in your account settings, your mobile number and your birthday; neither is needed to create an account. Your birthday is optional: studio staff can see it on your client record, it fills in the date of birth an IV therapy or injection booking asks for, and it tells a waiver whether a parent or guardian needs to sign. If your account has no mobile number or birthday and we copied one from Momence for your account's confirmed email, we add it to your account, marked in your settings as coming from our old booking system; you can change or remove it there, and once you remove it we don't add it again.
  • If you give our front desk your phone number or date of birth, we keep them on your client record to reach you about your visits and to know when a parent or guardian signs a form for you.
  • If you book more than one seat, online or at the studio, the first name, last name, and email of each guest you bring. Please share these only with your guests' permission. We use a guest's details to put them on the class list and to send them their own booking confirmation, calendar invite, class reminder, any intake forms, and notices if the class changes or is canceled. Guests are not added to marketing emails or staff outreach unless they book, buy, or sign up with us themselves. The booking and its payment stay with you.
  • If you save a card to your account, in your account, when you pay one of our payment links and check the box to save it, or by telling our front desk you agree to keep it on file, Stripe stores the card and we see only its brand, last four digits, and expiry. We charge a saved card only for a purchase you make or authorize, such as a sale at the studio while you are there or an auto-book you turn on for a waitlist, and you can remove it from your account at any time.
  • If you start a membership at our front desk, we keep a record that you agreed to it: the plan, its price and how often it renews, the words you were shown, when you agreed, and which staff member confirmed it. If you agree on your own phone through a link from our front desk, the record also keeps the words of the box you ticked and which staff member sent you the link.
  • When you pay by card at our front desk, we keep the card's brand and last four digits with that sale so it can print on your receipt and help us find the payment if you ask about it. We never see or keep the full card number.
  • For each package you buy we keep its parts (what each part covers and its share of the price) and how the package was obtained; these are included in your personal data package.
  • If you pay with Apple Pay or Google Pay, online or at our front desk, your wallet provider gives Stripe a secure token for your card, so neither we nor our website ever see the card number. At some online checkouts you can also choose to save your payment details with Link, Stripe's own service, so they fill in the next time you pay. Link is provided by Stripe under Stripe's terms and privacy policy, and Stripe may send you its own sign-in codes by text message or email. Paying with a wallet or Link is always optional, and you can enter a card instead.
  • Professional, scheduling, and free-text information you choose to submit in practitioner, collaboration, rental, accessibility, sustainability, or employment-related flows.
  • If you rent a space from Sacred Society, we keep your request (your name and email address, your phone and organization if you give them, the event, its dates and guest count, whether you have insurance, and any notes, website, or social profile you share), the quote, and the documents you send us for the rental, such as a certificate of insurance, with the date its coverage ends and whether we approved it. When you sign the rental agreement, with your request or when you approve a quote, we keep the agreement version and your signature record: the name you type, the email address we confirmed with a code or sent our review link to, the date and time, and the IP address and browser details of the device you sign from. We keep a PDF copy of each signed agreement and share invoice and payment details with Stripe, which processes the rental invoices you pay on our payment page or, when that page is unavailable, on Stripe's own page.
  • If you book an IV therapy or injection appointment with us, the information a licensed provider needs to screen you before treatment: your name, email, phone number, date of birth, and the state you will be in for the video screening, which we share with Qualiphy, the telehealth provider that conducts the screening. Qualiphy returns the screening outcome, the provider's notes, your answers to the screening questions, and a copy of the consultation record, and our nursing staff record the treatment given, vitals, and related clinical notes for your visit. This clinical information is stored encrypted, is available only to clinical staff with a need to see it, and every time it is viewed or changed is logged.
  • If you have an appointment with us, the emails and any text messages we send you about it name its service, for example IV Therapy or Red Light Therapy. When you pay for the appointment, the payment details we send to our payment processor, Stripe, name the service too, and Stripe can show it on the invoice or receipt for that payment. This means our email provider (Postmark), our text message provider (Twilio), and Stripe receive the name of the service, but never your treatment, medications, doses, or screening results. Your card statement does not name the service.
  • If a class or appointment you book asks for an intake form or a waiver, the answers you give (for example health notes, an emergency contact, and the statements you acknowledge), your initials where a form asks for them, the name you type to sign, a drawn signature if the form asks you to draw one, the date and time you sign, where you signed it (the emailed link, right after booking online, or a studio device, with the staff member who handed it to you), and the IP address and browser details of the device you sign from. If you book for guests, each guest fills out their own form through their own link, except that for a guest under 18 on the day of the visit you may fill out and sign their forms right after booking as their parent or guardian, giving their date of birth and their answers. When a form asks a parent or guardian to sign for someone under 18, we also collect the attendee's date of birth (unless it is already on their account) and the parent or guardian's name, their relationship to the attendee, and their signature. Intake answers are stored encrypted, only studio staff who need them can read them, and every time they are opened is logged. For a form with a waiver we also keep a PDF copy of what you signed. Answers to intake forms for IV therapy and injection appointments are part of your clinical record and follow the clinical access rules above.
  • Optional details such as language preference, accessibility needs, dietary information, or communications preferences when you choose to provide them.
  • If you make a privacy request, your name, email, where you live, what you ask us to do, and any details you add, stored encrypted, along with the steps we take to answer it and the letters we send you.

Information collected automatically

  • Browser, device, approximate location, referring URL, pageview, interaction, and performance information collected through analytics and diagnostic tooling.
  • Cookies, local storage, and session storage used for language preference, popup behavior, analytics persistence, event deduplication, and related site functionality.
  • IP address or IP-derived identifiers, request metadata, and abuse-prevention signals used for security, rate limiting, spam prevention, and troubleshooting.
  • Country-level geolocation signals derived from request headers or similar infrastructure metadata, which may be used to apply region-appropriate privacy and consent behavior.
  • Transaction, session, membership, or confirmation-page identifiers present in URLs when measuring booking or purchase conversions.
  • When we email you about a booking, purchase, rental, membership, or a message from our team, our email provider, Postmark, may tell us whether the email was opened (through a small image in the email) and which of its links were clicked (those links pass through Postmark first). We keep when it happened, the kind of device and mail app, and the page a link led to, but not your IP address, your location, or anything added to the link. Links that sign you in, verify your email, take a payment, open an invoice, a rental review, or a booking to change or cancel it, lead to an intake form, or unsubscribe you are never passed through Postmark, and account, security, and one-time code emails are not tracked at all. Some mail apps load images and security tools follow links on their own, so these records are not always accurate.

Staff account and security data

  • If you create or use a staff account, we may process your name, email address, hashed password, approval status, and account-session information.
  • When you sign in or create an account with your email address, or confirm your email when you book online, we email a six-digit code to that address. The code works for ten minutes and only in the browser that asked for it. The email that carried it is kept with the other messages we send you.
  • If you choose Continue with Google, Google tells us the email address on your Google account and that Google has confirmed it, and we use it only to sign you in to the Sacred Society account that already uses that email. We never create an account this way.
  • For staff and customer accounts, we record when the account last signed in and when it was last used, which helps protect accounts and lets studio administrators manage access.
  • For staff and customer accounts, each sign-in also keeps a short record of that session: a general description of the browser and device, such as "Safari on iPhone" (never the full browser details or your IP address), when it signed in, and when it was last used. It lets us end one session without ending the others, and lets you see the devices signed in to your account and sign them out, in your account settings (customers) or Staff settings (staff).
  • On a device you sign in on, we remember your name and a masked version of your email for 30 days so the sign-in page can offer to continue as you. Remove it from the sign-in page at any time, or choose This is a shared device when you sign out. We never remember anyone on the studio's front-desk devices.
  • For staff security, we may process password reset and verification data, encrypted multi-factor authentication secrets, recovery codes, and related security events. A staff member who adds a passkey keeps its public key and the name they give it with us; their face or fingerprint never leaves their device. Customers can turn on two-step sign-in too, once their email address is confirmed. A password reset or an emailed sign-in code that first confirms an account's email address clears any two-step sign-in set up before it, and a sign-in code that does so also ends any password set before it.
  • We may also send account-related emails such as account setup messages, verification prompts and the six-digit codes that confirm your email address, password resets, and security confirmations, and security warnings, such as a notice to your current email address when someone asks to change the email you sign in with.

If you teach at Sacred Society

  • If you teach at Sacred Society, we keep the insurance certificates and other documents you give us, with the dates they are valid and whether the studio approved them, to check that the people who lead classes are covered.
  • When you accept the studio agreement we keep your typed name, any signature you draw, the time, and the IP address and browser you used, with a signed copy.
  • If you teach at the studio, we keep the time off you enter, the substitute requests you make and the offers you give, and who covered which class, to run the schedule and pay the person who taught.
  • If you teach at the studio, you can see your own pay and tip records for classes on the platform, and we tell you by email and in the staff portal when a payroll run pays you; that message never includes amounts.

In some experiences, we may also store information locally in your browser for convenience, such as saved language preference, popup dismissal state, or draft content for certain forms.

How We Use Your Information

  • Provide bookings, classes, memberships, newsletters, inquiries, and other requested services.
  • Run the giveaways you enter: draw the winners and tell them by email.
  • Offer prices and packages meant for first-time guests: when you book signed in, we check the visits on the confirmed email of your account, including those we copied from Momence, to see whether you have been before.
  • Email you a short thank-you after a class, and two days after your first red light or vibroacoustic visit, the ways to book that service again with their prices. We tell a first visit from your visits here and those we copied from Momence, and send none once you have booked that service again. Each of these emails has an unsubscribe link, and unsubscribing stops them and the emails our staff send you.
  • Show you, in your account, the classes and appointments you booked through Momence, our other booking system, each with a link to manage it there. We match them to the confirmed email of your account, and to keep the ones still ahead current we also ask Momence for them when you open your account, keeping that answer on our servers for a few minutes and storing nothing new.
  • Send limited customer-care or transactional follow-up messages by email or SMS when you request a reply and provide the relevant contact details.
  • Operate the public website, embedded experiences, and staff portal.
  • Maintain language preferences, popup behavior, and other user-experience settings.
  • Measure site usage, site performance, campaign effectiveness, and conversion activity.
  • Understand whether our booking, purchase, and service emails reach you and are useful, for example whether a class reminder was opened.
  • Monitor errors, protect accounts, prevent spam or abuse, and troubleshoot operational issues.
  • Comply with legal obligations, enforce policies, and maintain business records.

SMS Messaging

We use SMS only for limited customer-care and transactional communications. We do not use your mobile number for broad promotional texting unless we clearly obtain separate consent for that purpose.

  • If you choose to give us a mobile number and request follow-up by phone or text, or if a form clearly indicates that SMS may be used, we may send limited transactional or customer-care text messages related to that request.
  • These messages may include inquiry follow-ups, intake confirmations, COI or setup-form reminders, accessibility-request responses, or closely related operational updates.
  • Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP. When you do, we note it with the number you texted from and the studio number you texted, show in your account settings that texts are paused, and send no more texts to that number until you reply START. If your account's email address is first confirmed by a password reset, we also stop texting the number saved on the account until you agree to texts again.
  • Consent to receive SMS from Sacred Society is not a condition of purchase.
  • We do not share mobile opt-in data with third parties or affiliates for their own marketing or promotional purposes. Twilio and similar vendors may process mobile numbers only as service providers delivering messages on our behalf.

For help with SMS communications, email reception@sacredsociety.com or call (720) 706-6509.

Device Notifications

Your phone or computer can show you short notifications from us through your web browser, if you turn them on for that device. They stay off unless you do.

  • Customers can turn them on for time-sensitive booking notices: a spot opening in a class you are waiting for, a reminder before your class, and word that a booking has moved or been canceled. Our staff can turn them on for urgent studio alerts.
  • For each device you turn them on for, we keep the push address your browser gives us and the keys that come with it, a description of the browser (for a customer device, the full description your browser sends; for a staff device, only a short label such as "Safari on iPhone"), when you turned them on, and when we last sent it a notification.
  • Each notification is delivered through the push service of your browser's maker, such as Apple, Google, Mozilla, or Microsoft, and is encrypted so that service can't read it. A customer notification shows the notice's short title and line, such as which class starts when. A staff notification shows only the kind of alert, never a customer's name, message, or payment details.
  • To turn them off, use Messages in your account settings (customers) or Settings, Your account, Alert settings (staff), or your browser's or device's notification settings. Turning them off on those pages removes the device from your account, and so does deleting your account. We also remove every device from a customer account whose email address is first confirmed by a password reset, because those devices may belong to whoever created the account. If a push service tells us a device can no longer receive them, for example after notifications are blocked in the browser's settings, we stop sending to it and note when it stopped.

Cookies & Similar Technologies

Essential and security technologies

These include session/auth-related cookies for staff access, language persistence, maintenance-bypass handling for authorized access during maintenance, and security or debugging controls.

Preferences and on-site experience

We use first-party storage to remember language choices, popup dismissal behavior, and in some cases locally saved draft content or session suppression for specific experiences. After you sign in, a first-party cookie remembers your name and a masked version of your email on that device for 30 days so the sign-in page can offer to continue as you, until you remove it or sign out of a shared device.

Analytics and diagnostics

We use tools such as PostHog and Sentry to understand page usage, performance, and errors. Depending on configuration, these tools may use cookies or browser storage.

Marketing and conversion measurement

We use technologies such as Google Analytics, Google Ads, Meta Pixel, EmbedReach, and conversion-deduplication storage on confirmation pages.

You can control many cookies and similar technologies through your browser or device settings. Disabling certain technologies may affect site functionality, including language persistence, staff login, or embedded experiences.

You can also review or update your optional analytics and marketing choices at any time using the cookie preferences control available on this site. Some tools may honor browser Do Not Track settings where supported, but not all third-party services necessarily respond to that signal.

Depending on your location, optional analytics and marketing technologies may either be enabled by default with an option to opt out, or remain off until you choose to enable them.

If your browser sends a Global Privacy Control signal, we treat it as your request to opt out of the sale or sharing of your personal information: our advertising tags (Google Ads, Meta Pixel, and EmbedReach) do not load, we do not send advertising events about your visit to Meta from our servers, and Google Analytics measures your visit without Google signals or ad personalization. The signal applies on this website; checkout pages hosted by our booking partner Momence follow Momence's own settings.

We do not load analytics or advertising tags on the staff portal, on sign-in and account recovery pages, on pages opened from a private link, such as a booking's page for changing or canceling it, a rental quote, an intake form or waiver, an unsubscribe link, or a privacy request, or on the page you see after deleting your account. In your signed-in account, we use PostHog for product analytics and do not load Google Analytics, Google Ads, Meta Pixel, or EmbedReach. When you sign in or create an account, PostHog also counts that it happened and whether you used a code or a password, on the first page you see afterwards; the sign-in pages themselves send nothing. On other pages, we remove email addresses, names, phone numbers, and one-time codes from the page address before analytics or advertising tools can read it, and we remove them again from what we send to PostHog and Sentry. PostHog can also record how pages are used, including what a page showed and where you clicked, with anything you type into a form hidden. In your signed-in account we also keep your name, email address, phone number, birthday, gift card codes, payment amounts, card details, the messages we sent you, and anything about IV therapy or injection visits out of what it captures and records.

Who We Share With

We do not sell your personal information for money. We do, however, work with service providers and measurement vendors that may receive identifiers, browser/device data, page activity, form information, or booking-related data as needed to operate the site and measure performance or conversions.

Depending on the page you use, your information may be processed by providers such as:

  • Momence - Booking, scheduling, memberships, and related class or appointment flows, and the client records we copy from it each night until the studio stops using it.
  • Stripe - Payment processing for bookings, purchases, memberships, and invoices, and storage of the cards you choose to save.
  • Mailchimp - Newsletter signup, celebration RSVPs, giveaway entries, and email audience management.
  • Postmark - Transactional email delivery, and email open and click tracking.
  • Twilio - Customer-care and transactional SMS delivery.
  • Browser push services - Delivery of the device notifications you turn on, through your browser maker's push service (for example Apple, Google, Mozilla, or Microsoft), encrypted so the service can't read them.
  • Qualiphy - Telehealth good-faith screening before IV therapy and injection appointments, including delivery of the screening invitation by email and text.
  • Google Cloud and our CDN providers - Hosting, infrastructure, media delivery, and related operational storage.
  • PostHog - Product analytics, pageview and interaction tracking, and performance measurement.
  • Sentry - Application error monitoring, diagnostics, and operational troubleshooting.
  • Google Analytics and Google Ads - Analytics and advertising/conversion measurement.
  • Meta - Advertising and conversion measurement through Meta Pixel: purchases, inquiries, newsletter signups and giveaway entries, and celebration RSVPs.
  • EmbedReach - Marketing or campaign measurement.
  • Cloudflare Turnstile - Spam and abuse prevention for selected public forms.
  • Upstash Redis (if enabled) - Rate-limit counters derived from request path and client identifier, used to help protect forms and APIs from abuse.
  • BambooHR - Embedded jobs or recruiting-related experiences.
  • Asana - Internal workflow handling for selected inquiries, such as practitioner submissions.
  • Apple Maps and Google Maps - Directions links on our pages open one of these maps. We embed no maps, so neither receives anything from our pages until you tap a directions link.

Our PostHog analytics requests are sent directly to PostHog rather than through a first-party Sacred Society proxy.

If you interact with a third-party booking flow, embedded jobs board, map, or similar external experience, that provider may collect information directly under its own privacy notice.

The practitioner leading a class or session you book, who may be an independent contractor, sees your name, whether you have checked in, whether it is your first visit with us, and whether your forms are complete, and for a guest, the first name and last initial of who booked them. They do not see your email address, phone number, or form answers, except answers a form tells you it shares with them.

If a form marks an answer for the practitioner who leads your class, that practitioner can read it from the day before the class until it ends.

The practitioner who leads a class you booked may write to you about that class by email and in your account notifications. We send the message for them and keep a copy, they never see your email address, and your reply comes to our team.

Data Security

We protect your information using industry-standard security measures:

  • Encrypted data transmission (HTTPS/SSL)
  • Secure database with access controls
  • Regular security updates and monitoring
  • Limited staff access to personal data
  • Secure payment processing through trusted providers

While we take security seriously, no system is 100% secure. We continuously work to protect your data and may provide notice of significant incidents when appropriate and required.

How Long We Keep Data

We keep personal information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain security, troubleshoot issues, comply with law, and preserve business records.

Examples include:

  • Newsletter and marketing signup information is typically kept until you unsubscribe or ask us to remove it, subject to provider-side processing.
  • Celebration RSVPs are kept with our email provider until you ask us to remove them.
  • Giveaway entries are kept with our email provider until you ask us to remove them; unsubscribing from our emails stops the emails but keeps your entry.
  • SMS opt-out and suppression records may be kept as needed to honor future unsubscribe requests and document messaging compliance.
  • Inquiry, application, and support records are kept for as long as reasonably necessary to respond, follow up, and maintain business records.
  • Staff account and security records may be retained while an account is active and for a reasonable period afterward to support security, compliance, and audit needs.
  • An activity log records actions taken on your account and on our platform, such as sign-ins, bookings, purchases, cancellations, and account changes, along with which records were affected, operational details such as a status, a time, or an amount, the reason an action could not be completed, and a one-way hashed form of the network address and device used. It does not store customers' names, contact details, messages, or health information. We keep it for seven years to support security, fraud prevention, dispute resolution, and audit needs, and its entries remain for that period even if you delete your account.
  • We also record the IP address each of those actions came from, including failed attempts to sign in. We use it only for security and to investigate misuse, only our administrators can see it, and we delete it after 12 months.
  • The record kept for each signed-in session (the browser and device description, when it signed in, and when it was last used) is deleted 30 days after the session is signed out or last used, whichever comes first.
  • Clinical screening results, treatment records, and their access logs for IV therapy and injection appointments are kept for as long as applicable healthcare record-keeping law requires, and are not deleted on request while that period runs.
  • Intake form answers, signatures, and signed copies are kept as a record of what you told us and agreed to, for as long as reasonably necessary to provide services and maintain business records; intake answers for IV therapy and injection appointments follow the clinical record period above.
  • Email open and click records are kept with that email's delivery history, as part of our messaging records.
  • Analytics, error-monitoring, and security data may be retained according to operational needs and the retention settings of the providers we use.
  • Third-party providers such as Momence, Mailchimp, BambooHR, PostHog, Sentry, Google, Meta, or Asana may maintain their own retention schedules under their privacy notices.
  • We keep backup copies of our database and of the files stored with it, such as signed forms and documents you send us, so we can recover from mistakes or outages: nightly copies for about five weeks, and weekly and monthly copies in a separate, access-restricted location for up to 13 weeks and 13 months. Information we delete leaves our backups as each copy reaches the end of that schedule, so within 13 months. We use backups only to restore our systems, and if we ever restore one, we re-apply the deletions completed since that copy was made.

If you have a question about a specific category of data, contact reception@sacredsociety.com

Your Choices & Rights

  • Depending on your location, you may have the right to request access to, correction of, deletion of, or a copy of certain personal information we hold about you, and to ask us to stop using it for marketing and advertising.
  • To make a request, use our privacy request form or email us. Before we act, we confirm that the email address is yours with a six-digit code: on the form you type the code, and for a request made by email, phone, or in person we send a code you read back to us. We may also confirm who you are another way.
  • We respond within 45 days of receiving your request, within one month if you live in the European Union or the United Kingdom, and within 30 days for a copy of health records from an IV therapy or injection visit. If a request is complex, we may extend that once where the law allows it, by up to 45 more days (two more months in the EU and UK, 30 more days for health records), and we tell you why before the first period ends.
  • When we delete your information, we keep the records the law requires us to keep, such as payment and tax records, signed agreements and waivers, and health records, and remove them when their retention period ends. We also keep a record of your request and our answer, and we may retain limited information where required for legal, security, fraud-prevention, or recordkeeping reasons. If we cannot complete a request, we tell you why, and you can ask us to reconsider.
  • You can also delete your account yourself from your account settings once your email address is confirmed. You first cancel any membership that would renew, your upcoming bookings, and any space rental in progress, and we tell you about any class credits or gift card balance you would leave behind. Deleting your account removes your sign-in, name, phone number, birthday, password, two-step sign-in, and saved cards; your details on past class lists; the words and your address on the messages we sent you; your conversation with the studio and your consent to text messages; your devices, app notifications, and message preferences; everything we copied from Momence, our other booking system, including class credits there that had not moved to your account yet, which we stop copying; the messages you sent through our website; and the notes the studio kept about you. We keep, as described above, your bookings, payments, packages, gift cards, and memberships as financial records, your signed rental agreements, intake forms, and waivers, your health records, a record that you unsubscribed, and the activity log. A gift card keeps working by its code.
  • You can unsubscribe from marketing emails at any time using the unsubscribe link in the message or by contacting us.
  • You can opt out of the sale or sharing of your personal information for advertising at any time by turning on Global Privacy Control in your browser, by turning off marketing in the cookie preferences control, or through our privacy request form.
  • If you receive SMS from us, you can opt out of future SMS to that number at any time by replying STOP.
  • You can keep emails from reporting that you opened them by turning off automatic image loading in your mail app.
  • You can control many cookies and similar technologies through your browser or device settings, and you can clear locally stored site data from your browser.
Make a privacy request

You can also email your request or any privacy concern to reception@sacredsociety.com.

Children's Privacy

Our services are designed for adults. We do not knowingly collect personal information from children under 13. If a parent or guardian becomes aware that their child has provided us with information without consent, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes by email (if you're subscribed) or by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

Questions or Concerns?

If you have questions about this privacy policy or how we handle your information, we're here to help:

Email Us
reception@sacredsociety.comWe typically respond within 24-48 hours

Sacred Society3410 W 38th AveDenver, CO 80211

Back to top

“Clarity is a form of care.”