Privacy policy

When you book an appointment, we process your first and last name, email address, phone number, the selected treatment, the selected stylist and the booked time, any message to the salon and the name of the person who will receive the treatment if you provide it, booking number/reference and which version of the booking terms you accepted and when.

The purpose is to create, manage and follow up your booking, including rebooking and cancellation. The legal basis is performance of a contract (the booking you make with us).

The data is stored for as long as it is needed to manage the booking and any disputes, and to comply with legal requirements.

If you book by phone, our staff registers the same data as for online bookings, as well as the fact that you have received information about the booking terms and accepted them verbally.

If you sign up for the waiting list, we process your name, email address, phone number, desired treatment, desired time interval and the status of any offers of available appointments.

The purpose is to be able to offer you an appointment that has become available. The legal basis is legitimate interest (to be able to fill available appointments for customers who have requested them).

The registration and offers are stored until they are completed or expire, and thereafter according to the same criteria as booking data.

When you book, a customer profile linked to your contact details is created. Your booking history, events related to your bookings (for example sent confirmations and reminders) and your consents — for example whether you have chosen to receive news and offers — are linked to the profile.

The purpose is to manage the customer relationship, follow up bookings and respect your consent choices. The legal basis is performance of a contract, and consent for marketing.

The data is stored according to the same criteria as booking data.

Payment is made at the salon after the treatment, unless otherwise stated at the time of booking. If online payment is offered, the payment is handled by the salon's payment service provider (Stripe). We then process payment status and transaction references — never your full card details, which are only handled by the payment service provider. In the event of a refund, refund status is processed in the same way.

When you book, we send a confirmation by email to the address you have provided. We also send a reminder before your visit, a notice by email if a booking is cancelled, and offers from the waiting list with a link to respond. These messages are part of the booking and are sent regardless of marketing consent. The emails are handled by our email provider (Resend).

We only send news and offers if you have actively opted in, for example via the checkbox at booking. Marketing consent is always voluntary and is never required to make a booking.

You can withdraw your consent at any time. Every marketing send-out contains a personal unsubscribe link that takes effect immediately, and you can also contact us. The withdrawal applies to all future marketing send-outs. Messages about your booking — confirmation, reminder, cancellation notice and waiting-list replies — are not affected, because they are part of the booking and not marketing.

The legal basis is consent.

When you submit an enquiry via the contact form, we process your name, email address, phone number if you provide it, and the subject and message.

The purpose is to be able to respond to your enquiry. The legal basis is legitimate interest.

Enquiries are stored for a maximum of 12 months.

We use technical providers (data processors) to operate the website and the booking system:

Supabase — database and storage of booking data (storage in the EU, region eu-west-1).

Vercel — hosting of the website.

Resend — email sending for booking messages.

Stripe — payment processing, if online payment is offered. Stripe is an independent data controller for certain processing (for example fraud prevention and accounting requirements).

Some providers may mean that data becomes accessible outside the EU/EEA. This then takes place on the basis of standard contractual clauses or the EU-US Data Privacy Framework. Read more in each provider's privacy policy.

You have the right to access your data, to have it rectified or erased, to restrict the processing, to object to processing based on legitimate interest, and to receive your data (data portability) where applicable. Contact us via the contact form on the website to exercise your rights.

You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that we process your data incorrectly: imy.se, imy@imy.se, or Box 8114, 104 20 Stockholm.

Questions about personal data: the contact form on the website or the salon's Instagram. Visiting address: Landsvägen 15 A, 172 63 Sundbyberg.