Privacy and cookie policy

Version: October 2026

‍

Who we are

This policy explains what personal data Plunged collects, why, how long we keep it and what your rights are. It applies to our website, our booking system and our studio in Ghent.

Plunged BV is responsible (the "controller") for your personal data.

Company: Plunged BV

Company number: BE1038.257.217

Registered office: Uilkensstraat 133, 9000 Ghent, Belgium

Studio: Dampoortstraat 30, 9000 Ghent, Belgium

Contact for privacy questions: hello@plunged.be

Website: www.plunged.be

We process personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian privacy law.

‍

What data we collect and why

Plunged BV processes personal data from visitors of plunged.be and from customers who book with us. Depending on how you use our services, this includes:

  • Account data: first name, last name, email address, date of birth and password (stored encrypted), when you create an account via bsport.
  • Booking and purchase data: the sessions you book, the passes and memberships you buy, and your booking history.
  • Payment data: your chosen payment method (card, SEPA direct debit, Bancontact, Apple Pay or Google Pay) and transaction details. Full card details are handled by the payment provider, not by us.
  • Newsletter and waitlist data: your email address, first and last name, and whether you open or click our emails.
  • Communication data: the content of emails you send us.
  • Technical data and browsing behaviour: pseudonymous identifiers, browser and device type, approximate location (country or city), pages viewed and clicks on the website. Only collected after you accept cookies, except what is strictly needed to run the site.
  • Camera images: images recorded by the security cameras in our studio.

We ask your date of birth to confirm you meet the minimum age for sauna and cold plunge sessions.

We limit ourselves to the data needed for the purposes below (data minimisation). We never sell your data, and we do not send your name, email address or other directly identifying data to Google or Meta.

‍

Purposes and legal basis

Plunged BV processes your personal data on the following legal bases under the GDPR:

  • Contract: to create and manage your account, process your bookings and payments, send booking confirmations and reminders, and remind you before a saved payment method expires.
  • Legal obligation: to comply with tax and accounting law, for example keeping invoices.
  • Legitimate interest: to keep our website (hosted via Webflow) secure and working, to answer your questions, to protect the safety of visitors, staff and property with camera surveillance, and to handle disputes.
  • Consent: to send newsletters and waitlist updates via Brevo, to collect website statistics via Google Analytics, and to measure and target our ads via the Meta pixel. You can withdraw your consent at any time: unsubscribe via the link in every email, or change your choice in the cookie settings.

You do not have to give us your data, but without the data needed for an account you cannot book a session.

‍

Who we share your data with

Only the managing directors of Plunged BV have access to your personal data. We also work with these service providers. They process data only on our instructions, unless stated otherwise.

  • Bsport SAS (Paris, France): our booking system, member accounts, app and booking emails. Bsport acts as our processor. See also bsport's privacy policy.
  • Payment provider: processes online payments and runs its own security and fraud checks.
  • Brevo (France): sends our newsletter and waitlist emails.
  • Webflow, Inc.: hosts our website.
  • Google Ireland Ltd: website statistics via Google Analytics 4 and Google Tag Manager.
  • Meta Platforms Ireland Ltd: measures our ads on Facebook and Instagram and builds audiences from website visitors. For the data collected via the Meta pixel, Plunged and Meta are joint controllers.
  • Our accountant: bookkeeping and tax filings.

If we add advertising platforms such as Google Ads or TikTok Ads, we will update this policy and the cookie banner first.

Transfers outside the EU

Some providers (Google, Meta, Webflow, and possibly bsport's subprocessors) may transfer data to the United States. Those transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. You can ask us for more information.

‍

Cookies

What are cookies?

Cookies are small text files that a website stores on your device. Similar technologies, such as pixels and local storage, work the same way. They help a website function, remember your choices, or measure how the site is used.

Which cookies we use

Plunged.be uses three types of cookies:

  • Strictly necessary cookies (Webflow, bsport, cookie banner): these make the website and the booking system work, keep you logged in when you book, and remember your cookie choice. No consent is required for these.
  • Analytics cookies (Google Analytics 4): these help us understand how visitors use our site, for example which pages are viewed, where visitors come from, and how often the booking button is clicked. They are only placed after you give consent via our cookie banner.
  • Marketing cookies (Meta pixel): these help us measure what our ads on Facebook and Instagram deliver, and show our ads to people who visited our website. They are only placed after you give consent via our cookie banner.

Cookie overview

  • _ga (Google Analytics, analytics): distinguishes visitors. Expires after 2 years.
  • _ga_8HDVKS7981 (Google Analytics, analytics): keeps track of your session. Expires after 2 years.
  • _fbp (Meta, marketing): recognises your browser for ad measurement. Expires after 90 days.
  • _fbc (Meta, marketing): stores the ad click when you arrive via an ad. Only placed in that case. Expires after 90 days.
  • [Consent cookie name] (Plunged, strictly necessary): remembers your cookie choice.
  • [bsport cookie / storage names] (bsport, strictly necessary): keeps the booking widget and your login working.

Google keeps the statistics data for 14 months. Meta keeps website audiences for up to 180 days. We do not send your name, email address or other directly identifying data to Google or Meta.

Managing your cookie preferences

You choose which optional cookies you accept when you first visit our website. You can change your choice at any time via [Cookie settings] at the bottom of every page.

You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the website, such as booking, may stop working.

Third parties and transfers

Google and Meta may transfer data to the United States. These transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses. More information is in our Privacy Policy.

If we add other advertising platforms, such as Google Ads or TikTok Ads, we will update this cookie policy and the cookie banner first.

Questions

Questions about cookies? Email hello@plunged.be.

‍

Security

We protect your data with access limited to the managing directors, secure passwords, encrypted connections (HTTPS) and providers that meet GDPR standards. Camera images are stored securely and viewed only when there is a reason to.

‍

Your rights

You have the right to:

  • access the data we hold about you and get a copy
  • correct data that is wrong or incomplete
  • have your data deleted, unless we must keep it by law (for example invoices)
  • restrict or object to processing, including direct marketing
  • receive your data in a usable format (data portability)
  • withdraw your consent at any time, without affecting earlier processing

You can update most account details yourself in your bsport account. For everything else, email hello@plunged.be. We reply within one month. We may ask you to confirm your identity first.

‍

Complaints

Not happy with how we handle your data? Contact us first. You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.

‍

Changes to this policy

We may update this policy when our services or the law change. The date at the top always shows the latest version. We will tell you about important changes by email or on the website.