Privacy policy
Last updated 2026-11-09
This explains what I do with the information you send me when you ask for a booking on this website, and what rights you have. I only collect what I need to book you in and to do your hair safely.
Who is responsible
Agata Radomińska (Rampa), Kungsholmen, Stockholm, Sweden, is the controller (personuppgiftsansvarig) for the personal data described here. Questions or requests about your data: a message on Instagram.
What I collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone, preferred times, the services you pick, your message | To answer your request, book an appointment and keep in touch about it | Steps taken at your request before an agreement, art. 6(1)(b) |
| Photos of your hair, inspiration photos, hair history (colouring, bleaching, henna etc.) | To plan a colour consultation and give you a price | Steps taken at your request before an agreement, art. 6(1)(b) |
| Allergies, scalp conditions and sensitivities | To choose products and methods that are safe for you | Your explicit consent, art. 9(2)(a), given with the separate checkbox in the form |
You don't have to give me anything you don't want to. Without contact details I can't answer you, and without the colour information the consultation takes longer.
Who else handles it
I never sell your data or use it for marketing. Two services handle it on my behalf:
- Vercel Inc. hosts this website. Their servers log technical data such as your IP address when you visit, to keep the site running and secure.
- Resend Inc. delivers the booking form to my email inbox, including any photos you attach.
Both are based in the USA and certified under the EU-US Data Privacy Framework, which the EU Commission has approved as giving an adequate level of protection (art. 45 GDPR). Both work under data processing agreements.
How long I keep it
- If we don't end up booking anything, I delete your request and photos within 3 months.
- If you become a client, I keep your details, hair history and photos while you keep coming to me, and delete them 2 years after your last appointment. Colour history is useful for your next visit.
- You can ask me to delete everything earlier, at any time.
Receipts for paid appointments are kept for 7 years because Swedish bookkeeping law (bokföringslagen) requires it. They don't contain your photos or health information.
Your rights
You can ask me to:
- show you what data I have about you and give you a copy
- correct anything that's wrong
- delete your data
- limit how I use it, or object to it being used
- send it to you in a format you can take elsewhere
You can withdraw your consent for the health information at any time. That doesn't affect what was done before you withdrew it. I answer requests within a month.
If you think I handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se. I'd appreciate the chance to sort it out with you first.
Cookies
This website doesn't use cookies, analytics or tracking, and doesn't load anything from Google or social media. The Instagram and Facebook links are plain links; those sites have their own privacy policies once you go there.