Privacy notice

Who is responsible

The data controller is the Swedish sole trader identified in the Legal Notice. Contact: hello@ralfserafyna.com.

Information collected

An enquiry may include your name, email address, optional telephone number, city and postcode, the service and possible venue you select, the Bodywork offer selected, your message, linen preference, and your privacy and marketing choices. The date, time and status of the enquiry are also recorded.

Feedback may include your name, email address, the service, an approximate date or location, a rating, your written experience, a separate private note, and your publication and name-display choices. Publication permission is recorded with the time it was given.

The enquiry form is not intended for medical details, a full home address, access codes or other sensitive information. If such information is genuinely needed later for safety or practical arrangements, it will be requested separately and limited to what is necessary.

Hosting and email providers may process ordinary technical request and delivery data for security, reliability and abuse prevention.

Why it is used

• To read and respond to enquiries and take requested steps before a booking — GDPR Article 6(1)(b).
• To arrange and provide a confirmed service — GDPR Article 6(1)(b).
• To issue receipts and meet accounting or tax obligations — GDPR Article 6(1)(c).
• To protect the website and correspondence against misuse — legitimate interests under GDPR Article 6(1)(f).
• To read feedback and improve the services — legitimate interests under GDPR Article 6(1)(f).
• To publish feedback, or an agreed excerpt, only when separate publication consent has been given — GDPR Article 6(1)(a).
• To send occasional updates only when you have chosen the separate optional marketing consent — GDPR Article 6(1)(a).

Marketing consent is optional, is not required to make an enquiry, and can be withdrawn at any time.

Where it is handled

Enquiries are stored in the website’s protected database. The site uses OpenAI Sites and Cloudflare infrastructure. Resend delivers enquiry notifications and receipt-of-enquiry messages. Google/Gmail may be used for the subsequent correspondence. Payment and accounting providers process information only when those services are used.

Providers may use infrastructure outside the EEA. Where required, transfers are handled using recognised safeguards such as adequacy decisions or standard contractual clauses. Personal information is not sold.

How long it is kept

• Enquiries that do not become bookings are normally deleted or anonymised within 12 months after the last contact.
• Basic client, booking and correspondence records may be kept for up to five years after the last activity when needed for genuine continuity, administration or legal claims, and are removed earlier when no longer necessary.
• Receipts and accounting records are retained for the period required by Swedish law.
• A marketing preference is kept until consent is withdrawn or it is no longer needed. A minimal opt-out record may be retained to respect a withdrawal.
• Unpublished feedback is reviewed periodically and normally deleted or anonymised within 24 months. Published feedback and its permission record may be kept while the quotation remains in use, unless permission is withdrawn or there is another legal reason to retain a minimal record.

Your choices and rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal information, object to certain uses, and withdraw consent. Withdrawal does not affect processing that was lawful before it was withdrawn.

Send a request to hello@ralfserafyna.com. You may also complain to the Swedish Authority for Privacy Protection (IMY) or the relevant data-protection authority where you live or work.

Last updated: September 2026.