Privacy policy

1. Controller

Spicy Collective AB, reg. no. 559368-0183, Rönnvägen 15a, 153 36 Järna, Sweden (“we”) is the controller for personal data on spicycollective.se. Contact: info@spicycollective.se, +46 70 750 42 08.

2. When you contact us

This website has no forms and no customer accounts. When you call, email, message us on WhatsApp or send a DM on Instagram, we process the details you give us (e.g. name, phone number and your request) to reply and book an appointment. Legal basis: contract/pre-contract steps and legitimate interest (Art. 6(1)(b) and (f) GDPR). We keep the data while the matter is ongoing and afterwards only as long as the law requires, e.g. bookkeeping.

3. Cookies and statistics (only with consent)

Necessary storage is always used to remember your cookie choice (localStorage “spicy-consent-v1”, 6 months). Only after you choose “Accept all” or enable “Statistics” we load:

• Google Analytics 4 – Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Visitor statistics (page views, device, approximate location); IP addresses are shortened. Cookies: _ga, _ga_* (2 years).
• Microsoft Clarity – Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Shows how visitors use the site (clicks, scrolling, session recordings). Cookies: _clck (1 year), _clsk (1 day), CLID (1 year), MUID (1 year).

Data may be transferred to the USA; Google and Microsoft are certified under the EU–US Data Privacy Framework. Legal basis is your consent (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page.

4. External links

Links to Google Maps, Instagram, WhatsApp and our shop spicytattoosupplies.se open those services; their privacy policies apply. No content from these services is loaded on spicycollective.se.

5. Hosting

The website is hosted by Hostinger International Ltd. (EU). The server keeps technical logs (e.g. IP address, time, requested page) for security and operation, legitimate interest (Art. 6(1)(f) GDPR).

6. Your rights

You have the right to access, rectify or erase your personal data, to restrict processing, to data portability and to object to processing based on legitimate interest. Contact us at info@spicycollective.se. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Last updated: 22 October 2026.

Cookie settings