Legal Document

Privacy Policy

Last updated: October 18, 2026 · Compliant with Loi 25 (Quebec) and PIPEDA (Canada)

Nudasis (the "Club", "we" or "us") is committed to protecting the privacy of its members and users to the highest ethical and legal standard. This Privacy Policy transparently describes what personal data we collect, for what purpose, who has access to it and what your rights are as the data subject.

This policy is governed by Loi 25 — Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (L.Q. 2021, c. 25) of Quebec — and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Data Controller

Nudasis
Quebec, Canada
Privacy contact: circle@nudasis.ca

In accordance with Loi 25 and PIPEDA, the persons in charge of personal information are Cosmen Guerrero and Vincent Thouin, co-founders of Nudasis. You may contact them at circle@nudasis.ca for any enquiry, correction or exercise of your rights.

2. Personal Data We Collect

We collect only the data strictly necessary to manage memberships, event bookings and Club communications:

  • Full name — for the personal identification of each ticket and management of venue access lists.
  • Email address — to send purchase confirmations, event reminders, administrative communications, and, with your explicit consent, newsletters about upcoming experiences.
  • Account access data — if user accounts are implemented, encrypted authentication credentials (email + hashed password).
  • Transaction data — transaction reference, amount and date, processed through Stripe. Nudasis does not store any payment card data.
  • Platform usage data — non-personally identifiable technical information (browser type, country of access, pages visited) collected via Google Analytics, only if you accept analytics cookies (see section 9).

Information collected when you apply

Nudasis is a private space. To protect the safety and atmosphere of our nights, our organizers review every application before accepting it.

  • First and last name (as on your ID) — to verify your identity at the door. The name on your ticket must match your ID.
  • Email — to reply to you, send your tickets and invite you to our nights.
  • Photo of your face — to confirm you are the person applying (preventing fake profiles) and to recognize members at the door, for everyone's safety. Sexual or fetish photos are not accepted: they don't match the energy of the Nudasis community.
  • Age range (not your exact age) — to tell participants about the age mix of our nights and, in the future, to organize themed nights by age range.

We never ask about your sexual orientation. However, because this information includes a photo of your face linked to your participation in private naturist nights, we treat it as sensitive. We only collect it with your express consent, given in the application form. Only the Nudasis organizers have access to it.

3. Purpose of Processing

Your personal data is used exclusively for the following purposes:

  • Managing event reservations and confirming venue access.
  • Sending transactional communications: purchase confirmation, event reminder, access instructions.
  • Complying with legal and tax obligations applicable in Quebec and Canada.
  • Improving user experience on the web platform through aggregated, non-individually identifiable usage analysis.
  • Sending communications about upcoming Club events, only with your prior, explicit and informed consent, revocable at any time.

4. Trusted Technology Service Providers

  • Stripe Inc. — Secure payment processing. PCI DSS Level 1 certified. Your financial data is processed and stored entirely by Stripe; the Club does not access or store payment data.
  • Contentful GmbH — Content management platform (CMS). Website content is managed through Contentful. No member personal data is stored in this system.
  • Transactional email provider — Used exclusively to send operational emails (confirmations, reminders). Your email address is never shared with advertising networks or external lists.
  • Online forms, cloud storage, email and ticketing services — Used to receive applications (including your photo), review them, send our emails and manage your tickets.
  • Vercel Inc. — Web platform hosting. Vercel may log technical access data (IP, browser) for security and availability purposes under its own privacy policy.
  • Google LLC (Google Analytics) — Website traffic measurement (pages visited, approximate country, browser and device type). Only active if you accept analytics cookies.

All providers act as data processors under the Club's instructions and are contractually bound to process your data solely for the agreed purpose and to maintain appropriate security measures.

5. No Sale or Sharing of Data

Nudasis does not sell, rent, assign or share your personal data with third parties for commercial, advertising or any other purpose outside those described in this policy. Your data is treated with strict confidentiality. The sole exception would be compliance with a legal obligation imposed by a competent authority in Quebec or Canada (e.g. a court order), in which case the Club will notify you to the extent permitted by law.

6. Data Retention

  • Transaction and event registration data: 7 years, in compliance with Quebec's fiscal and accounting obligations.
  • Contact data for marketing communications: until you revoke your consent.
  • User account data: until deletion is requested or after 3 years of inactivity.
  • Applications not accepted: the information and photo are deleted.
  • Members: if you unsubscribe from our emails, you leave Nudasis; your profile and photo are deleted automatically.

7. Data Security

The Club implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure, including TLS/HTTPS encryption, role-based access controls and regular provider assessments. In the event of a security breach affecting your personal data, the Club will notify the Commission d'accès à l'information (CAI) of Quebec and affected individuals within the timelines established by Loi 25.

8. Your Rights

Under Loi 25 and PIPEDA, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data the Club holds about you.
  • Right of rectification — request correction of inaccurate or incomplete data.
  • Right of erasure — request deletion of your data when no longer necessary for the stated purposes, unless a legal retention obligation applies.
  • Right to withdraw consent — withdraw consent for marketing communications at any time without affecting prior processing.
  • Right to portability — request delivery of your data in a structured, commonly used format.
  • Right to object — object to processing in certain circumstances provided by law.

To exercise any of these rights, contact our Privacy Officer at circle@nudasis.ca. We will respond within 30 days as required by Loi 25. If you believe our data practices are not compliant, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca

9. Cookies

The platform uses strictly necessary technical cookies for site operation (e.g. Stripe payment session cookies). We do not use third-party advertising or retargeting cookies.

With your consent, we also use Google Analytics (Google LLC) to measure site traffic and improve the site. Google Analytics sets the _ga and _ga_* cookies and collects data such as pages visited, approximate country, and browser and device type. These cookies are off by default: they are only set if you click "Accept" on the cookie banner. If you click "Decline", Google Analytics is not loaded.

Your choice is remembered for 12 months, after which we ask again. You can change it at any time with the "Cookie settings" link in the site footer; declining deletes the Google Analytics cookies.

10. International Data Transfers

Some providers (Stripe, Contentful, Vercel, Google, as well as our online form, cloud storage, email and ticketing services) may store or process data on servers outside Quebec or Canada. All such transfers are conducted under appropriate contractual safeguards and in compliance with Loi 25 and PIPEDA requirements for cross-border transfers of personal data.

11. Changes to this Policy

Nudasis reserves the right to update this Privacy Policy at any time. Changes will be published on this page with the corresponding update date. We recommend checking this policy periodically.

12. Contact

Privacy Officers — Nudasis
Cosmen Guerrero and Vincent Thouin
circle@nudasis.ca
Quebec, Canada