This page supplements our privacy notice for forms and other data collection that may include health information or other personal matters requiring particular confidentiality.
Why we ask for some personal information
We use your answers to understand your availability, consider your application and contact you about the activities that interest you. Requests are considered individually: we do not use this information to build profiles of your sexual preferences, and we do not sell your data.
In some circumstances, we ask whether you have any health conditions or physical limitations relevant to rope practice. This helps us consider appropriate precautions when organising an activity, within the limits of our expertise. It is not a medical examination or an assessment of medical fitness.
The health information field is optional in the rope bottom application form. In other forms, such as model applications, this information may be required when needed for safety considerations; required fields are indicated in the form. The checkbox covering privacy and consent to the processing of sensitive data provided is always required to submit the form, even if you leave the health field blank. Consent relates to the information you actually provide. Only include information relevant to these considerations: we do not ask for medical records, test reports or a complete medical history. If a condition needs further discussion, we will speak with you before the activity.
What “sensitive data” means
This is a common term for information that deserves particular confidentiality. Data protection law calls it “special categories of personal data”: these include, among other things, information about health, sex life or sexual orientation.
An interest in Shibari does not, by itself, define a person’s sexual orientation or preferences. However, some preferences or information shared in the context of these activities may concern private or intimate matters. If accessed by unauthorised people, this information could lead to assumptions about someone’s private life, including inaccurate ones. This is why we explain how we handle it, rather than because we use applications to classify people in this way.
How we use and store your answers
Data is managed by Kiri Nawa Kai APS, which runs Rope Tales and School of Rope, to handle applications, communications, organisation and safety matters. Contact details and other ordinary personal data are used to respond to your request; any processing of health information or information about intimate matters is based on the consent given in the form, under Article 9(2)(a) of the GDPR.
To receive and manage responses, we use email services, including those provided by Google, and automation tools such as Zapier. These services help us transmit and organise information: assessments concerning people and participation in activities remain with the organisers. Providers may also operate outside the European Union and are selected with regard to their reliability and the safeguards they offer for personal data protection. Any transfers are subject to the conditions and safeguards required by applicable law.
Responses are stored in the website system and sent to the organisers through email and technical form-management services. Hosting, email and automation providers may process data to deliver these services. Responses are not published on the website or passed to students. Newsletter subscriptions require a separate choice.
Applications are kept for up to five years from submission of the form, so that we can contact people who have expressed their availability at a later date. You can withdraw your application and request deletion before that deadline. Any data that must be retained to meet legal obligations or protect a legal right is subject to the applicable retention periods, as explained in the general privacy notice.
Your choices
You can ask about the data we hold, correct it, request its deletion or withdraw consent by emailing kirinawakai@gmail.com. Withdrawal does not affect the lawfulness of processing already carried out. If information essential to the safety of a specific activity is missing, we may need to discuss it with you before confirming participation.
The controller is Kiri Nawa Kai APS, Via Bruno Cesana 10, 20132 Milan, Italy, tax code 97750310159. For other rights, providers and any transfers outside the European Economic Area, please see our general privacy notice. You may also contact the Italian Data Protection Authority.
Last updated: 17 October 2026.