Privacy

Privacy policy

We take care of your data. Here we explain plainly what we collect, why, and what rights you have.

What we collect

When you book a time in the calendar, send a booking request or contact us through the form, we process the details you provide yourself: name, email address, phone number, chosen treatment, requested time and your message. We also record when you accepted the booking terms.

Confirmations, reminders and cancellation

Confirmations and reminders are sent by email (Resend) and, if you gave a mobile number, by SMS (46elks, a Swedish provider). The messages contain a personal cancellation link. The legal basis is the contract for your booking (art. 6(1)(b) GDPR).

Why we process it

The data is used solely to handle your booking and reply to your enquiry. The legal basis is taking steps at your request prior to entering into a contract (art. 6(1)(b) GDPR). We never use your data for marketing and never sell it.

How long we keep it

Bookings are stored in our booking system (Supabase, servers within the EU in Stockholm) until the visit has taken place and at most twelve months after. Booking requests and messages are kept in our email for as long as needed to handle the matter and a reasonable time after, then deleted. Confirmation emails are sent through the email service Resend. Accounting records (receipts) are kept as required by the Swedish Bookkeeping Act.

Cookies

A cookie is a small text file stored in your browser. On your first visit you choose whether to accept non-necessary cookies. Your choice is stored locally in the browser and can be changed at any time via "Cookie settings" in the footer. Necessary technology (the site, the booking and your own choice) works without consent.

Vercel Web Analytics and Speed Insights (visitor statistics) use no cookies. Any analytics or marketing cookies added later will load only after your acceptance and be listed here.

Visitor statistics

To understand how the site is used and performs we use Vercel Web Analytics and Vercel Speed Insights. They set no cookies and store nothing on your device. Visits are counted with a hashed, day-unique identifier that cannot be linked to you as a person, and the statistics are aggregated (page views, country, device type, load times). The legal basis is our legitimate interest in improving the site (art. 6(1)(f) GDPR).

Your rights

You have the right to request access, correction or deletion of your data, and to complain to the Swedish Authority for Privacy Protection (IMY). Contact us and we'll help.

Data controller

Beauty by Rezi, Önskevädersgatan 3, Gothenburg. Reach us via the contact page.