Our Privacy Policy
Your privacy, our privilege. Protecting your personal information is essential to us. We treat your data with the same intention as our spaces: with limits, care and respect.
This page is where we make that commitment explicit. Here, we explain what we ask you to share with us, why we ask for it, how we protect it, and which choices you have at every step.
We keep things as simple and transparent as possible: no hidden agendas, no selling of your information, no unnecessary data. Only what we genuinely need to curate intimate, balanced rooms and host events where everyone can feel safe.
If anything in this policy feels unclear or makes you uncomfortable, you are always welcome to reach out. Intimacy deserves clarity, safety and respect – and so does your right to privacy.
This policy was last updated December 9 2025.
1. Who we are
Maison Intime is a privately run, invitation-only concept hosting small, curated, sex-positive events in Copenhagen.
For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
Maison Intime
Copenhagen, Denmark
E-mail: info@maisonintime.com
This Privacy Policy explains how we collect, use and protect your personal data when you visit our website and when you apply to attend an Intime event through our online forms.
2. What data we collect
We only collect the personal data that is relevant for:
running our website
receiving and handling your application
curating and hosting our events
communicating with you before and after an event
Depending on how you interact with us, we may collect and process the following categories of personal data in order to curate our events:
Identification and contact details
First and last name
E-mail address
Phone number
Country of residence or phone country code
Country of birth (if you choose to share it)
Instagram handle (if you choose to share it)
Demographic information
Age
Gender
Languages you (and, if applicable, your partner) speak
Relationship information
Whether you apply as a single guest or together with a partner
Your partner’s name, age, gender, contact details and language(s), if you apply together
Event and preference information
Why you want to take part in Maison Intime
Your experience (if any) with sex-positive spaces
Your thoughts on consent and how you practice it
Short self-descriptions and interests outside intimacy
How you and/or your partner identify your sexual orientation (if you choose to share it only)
Any other information you choose to share in free-text fields
Images (optional)
Photos you choose to upload as part of your application (for example a portrait or profile-like photo)
Website data
Technical information about your visit (such as IP address, browser type, device information, approximate location), collected through Squarespace’s built-in analytics and essential cookies, as described in Squarespace’s own policies.
We expect our guests to be tested for STD’s, but we do not ask for or require any specific health data (such as STI/STD status, diagnoses or treatments), and we ask you not to share such information with us in free-text fields.
3. Special category data (article 9 GDPR)
Some of the information you may choose to share with us is considered “special category data” under article 9 GDPR, in particular:
Information about your sexual orientation
Information about your sexual experiences or preferences, if you describe them in your answers
We only process this kind of data when:
You voluntarily choose to provide it when applying for an event, and
You give your explicit consent to our processing of this information for clearly defined purposes (see section 4).
You can always choose not to answer questions that may reveal special category data. Where a question may reveal such data, we treat your answer as optional.
4. Why we process your data and on what legal bases
We use your personal data for the following purposes:
4.1 Application and curation
To receive, read and evaluate your application
To curate a balanced, safe and comfortable group of guests for each event
To understand the dynamics in the room (including orientation and gender balance, if you choose to share that)
Legal basis:
Article 6(1)(a) GDPR – your consent
For special category data: Article 9(2)(a) GDPR – your explicit consent
4.2 Communication and event logistics
To contact you about your application
To send practical information, confirmations and updates about events
To follow up after an event where relevant
Legal basis:
Article 6(1)(a) GDPR – your consent
Article 6(1)(f) GDPR – our legitimate interest in running and communicating about our events in a practical way
4.3 Safety and integrity of the space
To ensure that guests have read and accepted The Intime Rules and Terms of Attendance
To prevent behaviour that conflicts with consent, safety or the atmosphere of trust
To decide not to invite back guests who have violated boundaries or safety
Legal basis:
Article 6(1)(f) GDPR – our legitimate interest in safeguarding our space, our guests and our concept
For any special category data involved: Article 9(2)(a) GDPR – your explicit consent
4.4 Administration and documentation
To manage guest lists for specific events
To document consent and our compliance with legal obligations
To handle questions, feedback or complaints
Legal basis:
Article 6(1)(c) GDPR – compliance with legal obligations (where applicable)
Article 6(1)(f) GDPR – our legitimate interest in being able to document what we have done and why
We obtain consent in line with the conditions in Article 7 GDPR (freely given, specific, informed and unambiguous, and easy to withdraw).
You can withdraw your consent at any time (see section 9). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Where your data comes from
We collect your personal data:
Directly from you when you fill out a form on our website (Squarespace form)
Directly from you when you communicate with us by e-mail, social media or similar
From you about your partner, when you provide their details in a couple application. In such cases, you are responsible for ensuring that your partner has agreed that you share their information with us.
We do not buy data from third parties and we do not collect data about you from data brokers.
6. Recipients and data processors
We share your personal data only when necessary to run our website, receive and handle your application, and host our events safely.
We may share your data with:
Website and hosting provider (data processor)
Our website, including forms, is currently hosted on Squarespace. When you submit a form on our site, your data is processed and stored within Squarespace’s systems. Squarespace acts as a data processor on our behalf under a data processing agreement.
Form and database tools (data processors)
From time to time, we may use dedicated EU-based form tools or database platforms to organise applications and guest data (for example, tools similar to Tally or Baserow). These services act as data processors and process personal data only on our instructions and in accordance with GDPR.
E-mail and communication providers
We use external e-mail and communication providers to contact you. These providers process your contact details and our correspondence in accordance with their own privacy policies and, where applicable, as data processors on our behalf.
Payment providers (independent controllers)
If you pay for an event via a payment link or QR code (for example MobilePay, Stripe, PayPal or similar), these payment providers process your payment information as independent data controllers. We do not receive your full card details. We only see the information that appears in our payment overview (such as your name, the time of payment and the amount).
Social media platforms (independent controllers)
We have a presence on social media platforms, including Instagram, which is provided by Meta Platforms. If you choose to follow us, like or comment on our content, or send us direct messages there, Meta will process your personal data in accordance with its own terms and privacy policy.
We can see the information that is visible to us in that context (for example your username, profile, and the content of your messages), and we may use it to communicate with you, answer questions, and manage our relationship with you. We do not download or store more information from Instagram than we reasonably need.
We do not sell, rent or trade your personal data, and we do not share your application with other guests or any other people outside of Maison Intime.
7. International transfers
Our website and forms are currently hosted on Squarespace. Squarespace is a US-based provider, and some processing of your personal data may take place on servers located outside the EU/EEA, for example in the United States.
Some of our other service providers may also be located outside the EU/EEA or use infrastructure outside the EU/EEA.
When your data is transferred outside the EU/EEA, we ensure that one of the following applies:
There is an adequacy decision in place for the country in question, or
The transfer is protected by Standard Contractual Clauses, the EU–US Data Privacy Framework, or other appropriate safeguards in line with GDPR.
We only use reputable providers that offer an adequate level of protection for personal data.
You can contact us if you would like more information about international transfers related to your data, including which providers we use at a given time.
8. How long we keep your data (retention)
We keep your personal data only for as long as it is necessary for the purposes described in this policy.
In general, we apply the following principles:
Applications
Applications from accepted or declined guests are stored for a limited period of 6 months after the event to which they relate.
After that, we either delete them or anonymise them so they can no longer be linked to you personally.
Images
Photos you share with us as part of your application are used only to support our curation process and are deleted no later than 6 months after the event in question.
E-mail correspondence
Stored for as long as reasonably necessary to handle communication, documentation and any questions or complaints.
We may keep minimal information for a longer period if strictly necessary to protect our legitimate interests, for example:
to prevent re-inviting guests who have seriously violated consent or safety
to handle or defend against legal claims.
When we no longer need your data, we delete it or anonymise it securely.
9. Your rights under GDPR
You have the following rights in relation to your personal data:
Right of access - to know whether we process your data and to receive a copy.
Right to rectification - to have inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) - to ask us to delete your data in certain circumstances.
Right to restriction of processing - to ask us to limit our use of your data in certain situations.
Right to data portability - to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller, where applicable.
Right to object - to object to processing based on our legitimate interests.
Right to withdraw consent - where processing is based on your consent (including special category data), you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details in section 1.
You also have the right to lodge a complaint with your local data protection authority. In Denmark, this is:
Datatilsynet (The Danish Data Protection Agency)
www.datatilsynet.dk
10. How we protect your data (security)
We take the protection of your personal data seriously and implement appropriate technical and organisational measures, including for example:
Limiting access: only the organiser (and, if relevant, carefully selected helpers) have access to applications and guest data.
Using reputable IT providers that offer appropriate security measures.
Using strong passwords and, where possible, two-factor authentication for accounts that hold personal data.
Limiting data to what is necessary (data minimisation).
Regularly reviewing and deleting or anonymising data in line with our retention principles.
No system is completely risk-free, but we work to keep risks proportionate and reasonable in light of the type and volume of data we process.
11. Cookies and website analytics
Our website is hosted on Squarespace, which uses cookies and similar technologies to operate the site and to provide basic analytics (such as visitor numbers and page views).
Where required by law, we will:
inform you about the use of non-essential cookies, and
ask for your consent before placing them on your device, for example via a cookie banner on the site.
For more details about Squarespace’s use of cookies and analytics, please refer to Squarespace’s own Cookie and Privacy Policies.
12. Data breaches
If we become aware of a personal data breach (for example unauthorised access, loss or disclosure of personal data), we will:
take steps to stop and limit the breach
assess the risk to the individuals affected
where required, notify the relevant data protection authority (Datatilsynet in Denmark)
where required, inform the individuals affected in clear and plain language.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website and will be marked with the date of the last update.
14. Contact
If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:
E-mail: info@maisonintime.com
Subject line: “Privacy – Maison Intime”