Privacy policy

Redir Nerway Fitness determines why and how personal data is processed in the service.

• Name, email, optional phone number and message when you book.
• Selected service, date, time, booking code and payment references.
• Administrator account details and technical logs for security and troubleshooting.
• Page views and a booking event in Vercel Web Analytics. The payment session id is removed before the page view is sent.

• To reserve, charge for and deliver your booking. Legal basis: contract.
• For accounting and other legal requirements. Legal basis: legal obligation.
• For customer service, security, fraud prevention and troubleshooting. Legal basis: legitimate interest.

Supabase is used for database and authentication, Stripe for payments, Resend for email, Vercel for hosting and web analytics and Sentry for error reporting. Card details are handled by Stripe and are not stored by the website. Error reporting sends technical details such as the page address, browser and error message, and is configured not to include what you typed into forms. Provider safeguards apply when data is processed outside the EU or EEA.

Booking and contact data is retained for as long as needed for the service, customer support, legal claims and statutory accounting. It is then deleted or anonymised. Technical logs are retained only as long as needed for security and troubleshooting.

You may request access, correction, deletion or restriction and object to certain processing. You may also complain to the Swedish Authority for Privacy Protection. Contact us through the contact page to exercise your rights.

The website uses necessary session cookies for administrator sign-in. No marketing pixels are installed. Vercel Web Analytics is used for basic traffic and conversion statistics and is configured not to measure admin pages or the payment session id.