Privacy Policy

1. Data Controller

Bare Beauty Skellefteå ("we", "us", "our"), Skiftesgatan 23E, 931 55 Skellefteå, Sweden, is the data controller responsible for the personal information collected through this website and in the course of providing our services.

For any privacy-related questions, contact us at info@barebeautyskelleftea.com.

2. Information We Collect

We collect only the information necessary to book appointments and issue invoices, namely:

• Full name
• Email address
• Phone number
• Billing address
• Basic health-intake information required to safely perform PhiBrows and permanent makeup treatments (collected and retained separately as consent records)

3. How We Use Your Information

Your personal data is used strictly to:

• Schedule, confirm, and manage your appointments
• Issue invoices and process payments
• Comply with Swedish bookkeeping and health-and-safety obligations
• Contact you about aftercare and treatment follow-up

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Payments — Stripe

All payments and invoicing are securely processed by Stripe Payments Europe, Ltd. When you pay through a Stripe-hosted invoice or checkout page, your card details are transmitted directly to Stripe and are never stored on our servers. Stripe acts as an independent data controller for payment data — see stripe.com/privacy.

5. Legal Basis for Processing

We process your personal data on the following GDPR (Regulation 2016/679) legal bases:

• Contract — to deliver the services you book
• Legal obligation — Swedish accounting law (Bokföringslagen) requires invoice records to be kept for seven years
• Consent — for health-intake and any before/after photography (which is never published without your explicit permission)

6. Data Retention

Booking and contact records are kept for as long as you remain an active client. Invoice and accounting records are retained for seven (7) years as required by Swedish law. Consent and health-intake forms are kept for the duration of legal liability under EU cosmetic-treatment regulations.

7. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure ("right to be forgotten"), subject to statutory retention obligations
• Restrict or object to processing
• Data portability
• Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY)

To exercise any of these rights, email info@barebeautyskelleftea.com.

8. Security

We use industry-standard technical and organisational measures — encrypted connections, access controls, and vetted subprocessors — to safeguard your information.

9. Changes to This Policy

We may update this policy from time to time. The most current version will always be posted on this page with the revision date above.