Privacy policy

1. Controller

Spicy Collective AB, reg. no. 559368-0183, Nedre Torekällgatan 5, 151 72 Södertälje, Sweden (“we”) is the controller for personal data on spicycollective.se. Contact: info@spicycollective.se, +46 70 750 42 08.

2. When you contact us or book

When you call, email, message us on WhatsApp or send a DM on Instagram, we process the details you give us (e.g. name, phone number and your request) to reply and book an appointment.

The booking form (/en/book/) sends your details – service, your idea, size, placement, colour, preferred days, name, email, phone and any reference photos (max. 5) – as one email to info@spicycollective.se. Nothing is stored on the website: photos are re-encoded (location data/EXIF removed), attached to the email and then deleted from the server. An invisible spam protection (hidden field, timing check) is used without cookies.

The online consent form (/en/consent/) is filled in directly in your browser. Nothing is sent to us – you save or print the PDF and bring the signed form to the studio.

Legal basis: contract/pre-contract steps and legitimate interest (Art. 6(1)(b) and (f) GDPR). We keep the data while the matter is ongoing and afterwards only as long as the law requires, e.g. bookkeeping.

3. Cookies, statistics and marketing (only with consent)

Necessary storage is always used to remember your cookie choice (localStorage “spicy-consent-v2”, 6 months). Only after you choose “Accept all” or enable the category we load:

Statistics – Google Analytics 4 – Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Visitor statistics (page views, device, approximate location); IP addresses are shortened. Cookies: _ga, _ga_* (2 years).
Statistics – Microsoft Clarity – Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Shows how visitors use the site (clicks, scrolling, session recordings). Cookies: _clck (1 year), _clsk (1 day), CLID (1 year), MUID (1 year).
Marketing – Meta Pixel – Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. Measures visits coming from Facebook and Instagram and makes relevant advertising there possible. Meta may link the data to your Meta account. Cookies: _fbp (3 months), fr (3 months). We and Meta are joint controllers for collecting and transmitting the data to Meta (Art. 26 GDPR); Meta is responsible for any further processing, see Meta’s privacy policy.

Data may be transferred to the USA; Google, Microsoft and Meta are certified under the EU–US Data Privacy Framework. Legal basis is your consent (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page.

4. Map and external links

The map on our pages is loaded from Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) only when you click “Show map”. Your IP address is then sent to Google and Google may set cookies (e.g. NID). Legal basis is your active choice (Art. 6(1)(a) GDPR). Links to Google Maps, Google reviews, Instagram, WhatsApp and our shop spicytattoosupplies.se open those services; their privacy policies apply.

5. Hosting

The website is hosted by Hostinger International Ltd. (EU). The server keeps technical logs (e.g. IP address, time, requested page) for security and operation, legitimate interest (Art. 6(1)(f) GDPR).

6. Your rights

You have the right to access, rectify or erase your personal data, to restrict processing, to data portability and to object to processing based on legitimate interest. Contact us at info@spicycollective.se. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Last updated: 23 October 2026.