Privacy Policy (GDPR)

• Contact details: name, phone number and/or email.
• Messages you send us (e.g., goals, questions).
• Photos/attachments you voluntarily upload (e.g., daylight hair photos for assessment).
• Booking and service information (e.g., date, method, maintenance).
• Technical data that may arise from hosting/security operations (e.g., provider logs).

• To respond to inquiries and communicate with you (legitimate interests and/or consent depending on the case).
• To take steps prior to a contract and deliver booked services (contract).
• Customer service, quality follow-up and potential disputes (legitimate interests).
• To comply with legal obligations when applicable (e.g., accounting) (legal obligation).

We keep personal data only as long as necessary for the purposes above or as required by law. Inquiries and uploaded photos/attachments are typically stored for a limited time and deleted when no longer needed.

We may use service providers for hosting, communication and file handling. They may process data as processors under our instructions.

• Web hosting and technical logs.
• Email and communication.
• File handling for attachments (e.g., when you upload photos/documents).
• Website performance measurement (aggregated/statistical) to improve the user experience.

We take reasonable technical and organizational measures to protect personal data. Please do not include sensitive personal data in free-text fields unless necessary.

• Access your data.
• Rectification or erasure.
• Object to processing or request restriction.
• Data portability where applicable.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

To exercise your rights: hello@exlov.se.

Our services are not intended for children. Contact us if you believe a child has provided personal data to us.

We may update this policy when needed. The latest version is always available on the website.