Privacy policy

DRAFT — needs review before publishing. The text accurately describes what the site technically does, but the fields marked [FILL IN] need your real details, and you should read the whole document since it is your legal commitment. I'm a developer, not a lawyer.

Who is responsible for your data

The data controller is:

Divine Madness (DM by Vik) [FILL IN: company registration number] [FILL IN: street address], Stockholm, Sweden hello@dmbyvik.se

If you have questions about how your data is handled, email me at the address above. You'll hear back from me personally.

What I collect, and why

When you send a message through the contact form

I receive your name, email address and what you write. The message is delivered to my inbox through the service Resend. I use it only to reply to you.

Legal basis: legitimate interest — you got in touch and expect an answer.

When you book a session

Bookings go through Cal.com, a separate service with its own privacy policy. There you provide your name, email and the time you choose.

If you use the booking form on this site instead, I receive your name, email, phone number if you give one, which session type you want, your preferred dates, and whatever you choose to write in the message field.

Legal basis: entering into and performing the agreement for the session.

⚠️ If you write about your health

The message fields are open — some people describe their life situation, past trauma, diagnoses or medication. That kind of information counts as special-category personal data under the GDPR (Article 9).

I don't ask for it. If you choose to share it, I process it solely to be able to hold the session safely for you, and it stays between us. You never need to write more than you want to — anything essential we can cover in conversation instead.

Legal basis: your explicit consent, given by choosing to write it.

When you visit the site

Google Analytics — only if you accept. If you choose "No thanks" in the cookie notice, analytics is not loaded at all and nothing is sent to Google. If you accept, it collects an anonymised IP address, which pages you visit, how far you scroll and which buttons you click. I use it to understand what works on the site — not to follow individual people.

Vercel Analytics — measures visits and page-load times without cookies and without identifying you. It is always on, because it does not process personal data in a way that requires consent.

Server logs — the site runs on Vercel, which logs technical details such as IP address and timestamp for security and operational reasons.

Legal basis: consent (Google Analytics), legitimate interest (operation, security, anonymous statistics).

Cookies and local storage

What	Why	How long
dmbyvik-consent	Remembers whether you accepted or declined analytics	Until you clear your browser
innerdans-theme	Remembers whether you chose light or dark mode	Until you clear your browser
Google Analytics cookies	Statistics — only if you accepted	Up to 2 years

The first two aren't tracking: they live in your own browser and are never sent to me.

To change your analytics choice, clear this site's stored data in your browser and you'll be asked again.

Who else sees the data

I never sell your data and don't share it for marketing. To run the site I rely on:

Service	What they do	Where
Vercel	Hosts the site	US/EU
Resend	Delivers form messages to my inbox	US/EU
Cal.com	Bookings	US/EU
Google Analytics	Statistics, only with consent	US

Several are US companies. Transfers there rely on the safeguards the GDPR requires (the EU–US Data Privacy Framework or standard contractual clauses).

How long I keep things

• Messages and booking enquiries: as long as our contact is active, and after that as long as I need for accounting or to follow up. If you ask me to delete them, I will, unless the law requires otherwise.
• Statistics: aggregated, and linked to you as a person only for as long as Google Analytics' default retention allows (14 months).

Your rights

You have the right to:

• know what data I hold about you
• correct anything that's wrong
• have data erased
• restrict or object to the processing
• receive your data in a readable format
• withdraw consent at any time — this doesn't affect what has already been processed

Email me and I'll take care of it. If you're unhappy with how I handle your data, you have the right to complain to the Swedish Authority for Privacy Protection, IMY (imy.se).

Changes

If this text changes, I'll update the date below. I'll mention any significant changes as they happen.