Privacy Policy

Last updated: June 2025

1. Who we are (GDPR Art.13(1)(a))

Velour Hair Studio is the data controller responsible for your personal data.
Address: Haga Nygata 14, 413 01 Göteborg, Sweden
Email: hej@velourhair.se
Phone: +46 31 123 45 67

2. What personal data we collect (Art.13(1)(d))

Bookings: name, email address, phone number (optional), chosen service, preferred date and time, any notes you provide.
Contact form: name, email address, and the message you send us.
Technical data: anonymised usage logs (no personal identifiers) used to maintain the service.

We do not collect payment card details, special category data, or data relating to children.

3. Why we process your data and our legal basis (Art.13(1)(c))

Purpose	Legal basis
Handling your booking and communicating appointment details	Performance of a contract (Art. 6(1)(b))
Responding to contact form enquiries	Legitimate interest / consent (Art. 6(1)(a) & (f))
Sending booking reminders or follow-ups	Legitimate interest (Art. 6(1)(f))
Complying with legal obligations (e.g. record keeping)	Legal obligation (Art. 6(1)(c))

4. How long we keep your data (Art.13(2)(a))

Data type	Retention period
Booking records	24 months from the appointment date
Contact messages	12 months from receipt
Technical logs	30 days, then automatically deleted

5. Who we share your data with (Art.13(1)(e))

We use Cloudflare to host this website and store data. Cloudflare acts as our data processor under a Data Processing Addendum, and data is stored within Cloudflare's EU infrastructure where possible. Further details at cloudflare.com/privacypolicy.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Your rights (Art.15–21)

Under GDPR you have the right to:

Access the personal data we hold about you
Rectification of inaccurate data
Erasure ("right to be forgotten")
Restriction of processing
Data portability
Object to processing based on legitimate interest
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, use the Your data rights tool on our website, or email us at hej@velourhair.se. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish Data Protection Authority (IMY — Integritetsskyddsmyndigheten).

7. Cookies

This website does not use tracking or advertising cookies. We use a session token stored in sessionStorage (cleared when you close the tab) to maintain your login session in the owner panel. No third-party analytics scripts are loaded.

8. Changes to this policy

We may update this policy occasionally. The date at the top of this page will always reflect when it was last changed. We recommend checking back periodically.

9. Contact

Questions about this policy? Contact us at:
Velour Hair Studio · Haga Nygata 14, 413 01 Göteborg
hej@velourhair.se · +46 31 123 45 67