Privacy & Cookies Policy

‍1. Who We Are

Yinergy AB operates Yinergy Wellness Studio, a meridian-based wellbeing and bodywork practice in Malmö, Sweden.

Yinergy AB is the data controller responsible for the personal data described in this policy.

Company details:

Yinergy AB
Organisation number: 559548-5094
Address: Mastgränd 21, 21177 Malmö
Email: info@yinergy.se

This policy explains how Yinergy AB collects, uses, stores and protects personal data through the Yinergy website and related digital communication channels.

‍

2. Personal Data We Collect

Contact Form and Email Enquiries

When you contact Yinergy through the website or by email, we may collect:

• Your first and last name
• Your email address
• Your telephone number
• The content of your message
• Any other information you choose to provide

We use this information to respond to your enquiry, provide requested information and, where relevant, take steps towards arranging a booking.

Please do not include detailed medical information or other sensitive personal data in the website contact form or in an ordinary email.

‍

Bookings Through Bokadirekt

Online bookings are handled through Bokadirekt.

When you follow a booking link, you leave the Yinergy website. Bokadirekt processes personal data in accordance with its own privacy information.

Yinergy may receive information necessary to administer your booking and provide the booked service, including:

• Your name
• Your contact details
• The selected service
• The date and time of the booking
• Booking-related communications and changes

‍

WhatsApp Business

You may choose to contact Yinergy through WhatsApp Business.

When you do so, Yinergy may process:

• Your telephone number
• Your WhatsApp profile name
• The content of your messages
• Booking-related communication

This information is used to respond to your enquiry and, where appropriate, provide a link to Bokadirekt so that you can complete your booking.

WhatsApp and Meta may also process information according to their own privacy policies and terms.

Please do not send detailed medical information or other sensitive personal data through WhatsApp.

‍

Website Usage and Technical Data

When you visit the website, limited technical information may be processed by the website and hosting provider in order to operate, secure and maintain the website.

This may include:

• IP address
• Browser type
• Device type
• Date and time of access
• Basic server and security logs
• Information required for essential website functions

Testimonials and Photographs

Yinergy may publish a client’s name, testimonial or photograph only where appropriate permission has been obtained.

Consent for publication may be withdrawn by contacting Yinergy. Withdrawal does not affect processing that was lawful before the consent was withdrawn, but Yinergy will stop future use and remove the content where reasonably possible.

‍

Payment, Invoicing and Accounting Information

If an enquiry or booking results in the purchase of a service, Yinergy may process information required to:

• Receive and document payment
• Issue invoices or receipts
• Maintain accounting records
• Meet tax and legal obligations
• Handle payment questions or disputes

Payment providers, banks and accounting-service providers may process relevant information according to their own legal responsibilities and privacy terms.

‍

3. Sensitive Personal Data

Information about a person’s physical or mental health is considered sensitive personal data under the GDPR.

The public contact form, ordinary email and WhatsApp are not intended for the submission of detailed medical information.

If health-related information is genuinely necessary to consider the suitability or safe delivery of a Yinergy service, it will be requested separately and handled with additional care. Where required, Yinergy will provide separate information and obtain explicit consent or rely on another applicable legal basis and GDPR exception.

If sensitive information is submitted through an unsuitable channel without being requested, Yinergy will avoid retaining it unless there is a valid and necessary reason to do so.

Yinergy is a wellbeing practice and does not diagnose or treat medical conditions.

‍

4. Why We Process Personal Data

Yinergy processes personal data for the following purposes:

• To respond to enquiries
• To communicate with potential and existing clients
• To arrange, confirm, change or cancel bookings
• To provide booked services
• To manage payments, receipts and invoices
• To comply with accounting, tax and other legal obligations
• To protect the security and proper operation of the website
• To handle questions, complaints or legal claims
• To publish approved testimonials or photographs
• To use optional analytics or marketing technologies where valid consent has been obtained

‍

5. Legal Bases for Processing

Depending on the situation, Yinergy relies on one or more of the following legal bases:

‍

Steps Before Entering Into a Contract

This may apply when you contact Yinergy to ask about a service or request a booking.

‍

Performance of a Contract

This applies when personal data is needed to administer and provide a service you have booked.

‍

Legal Obligation

This applies where Yinergy must retain or process information to comply with accounting, tax or other legal requirements.

‍

Legitimate Interests

Yinergy may rely on legitimate interests to:

• Respond to ordinary enquiries
• Maintain appropriate business communication
• Protect the website and company systems
• Prevent misuse or fraud
• Handle and defend legal claims

Yinergy will not rely on legitimate interests where your rights and interests override those interests.

‍

Consent

Consent may be used for:

• Publishing testimonials or photographs
• Sending optional marketing communications
• Activating non-essential analytics or marketing cookies
• Certain processing of sensitive personal data where explicit consent is appropriate

You may withdraw consent at any time.

‍

6. Service Providers and Other Recipients

Yinergy only shares personal data where necessary for the purposes described in this policy.

Relevant recipients may include:

one.com

one.com provides the Yinergy domain, website hosting and company email services. It may process technical website data, email communications, contact-form submissions and related hosting information on behalf of Yinergy.

Bokadirekt

Bokadirekt provides the online booking platform and processes booking-related information.

WhatsApp and Meta

WhatsApp and Meta provide the WhatsApp Business communication platform and process information according to their own privacy terms.

‍

Accounting and Payment Providers

Yinergy may use accounting, banking and payment providers, including Fortnox, Swish, PayPal or other selected providers, when necessary to manage invoices, payments and accounting.

‍

Professional Advisers and Authorities

Information may be disclosed to accountants, legal advisers, insurers or public authorities where necessary or legally required.

Yinergy does not sell personal data.

‍

7. International Data Transfers

Some service providers may process personal data outside Sweden or outside the European Economic Area.

Where personal data is transferred outside the EEA, Yinergy will rely on an applicable lawful transfer mechanism, such as:

• An adequacy decision by the European Commission
• Standard Contractual Clauses
• Other safeguards permitted under the GDPR

Relevant service providers may also act as independent data controllers for parts of their processing. Their own privacy policies provide further information about their processing locations and safeguards.

‍

8. How Long We Keep Personal Data

Yinergy keeps personal data only for as long as it is necessary for the purpose for which it was collected or as required by law.

The general retention periods are:

• Ordinary enquiries that do not result in a booking: normally deleted within 12 months after the last relevant communication
• WhatsApp enquiries that do not result in an ongoing client relationship: normally deleted within 12 months after the last relevant communication
• Booking and client-administration information: retained for as long as necessary to provide the service and manage contractual, complaint or legal obligations
• Invoices, receipts and accounting records: retained for the period required under Swedish accounting law, normally seven years
• Testimonial and photograph permissions: retained while the content is published and for a reasonable period afterwards to document the permission
• Cookie and analytics information: retained according to the periods stated in the cookie section and the settings of the relevant service

Information may be retained for a longer period where this is required by law or necessary for the establishment, exercise or defence of legal claims.

‍

9. Cookies

Cookies are small files that may be stored on your device when you visit a website.

Strictly Necessary Cookies

The Yinergy website may use strictly necessary cookies or similar technologies required for:

• Website security
• Basic website operation
• Form functionality
• Session management
• Remembering privacy or cookie choices

These technologies do not require consent where they are strictly necessary to provide the website or a service requested by the visitor.

‍

Analytics and Marketing Cookies

At the date of this policy, Yinergy does not use Google Analytics, Meta Pixel or other advertising and behavioural-tracking technologies on the website.

You can also control or delete cookies through your browser settings. Disabling strictly necessary cookies may affect the operation of parts of the website.

‍

10. External Links

The Yinergy website contains links to external services, including Bokadirekt, WhatsApp and social-media platforms.

When you follow an external link, the privacy and cookie practices of the external provider apply. Yinergy is not responsible for the content or independent data-processing practices of external websites.

‍

11. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

• Request information about how your personal data is processed
• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Request data portability where applicable
• Submit a complaint to a data-protection authority

These rights are subject to the conditions and limitations in the GDPR. For example, Yinergy may need to retain certain information to comply with accounting law or defend a legal claim.

To exercise your rights, contact: info@yinergy.se

Yinergy may need to verify your identity before completing a request.

You also have the right to submit a complaint to the Swedish Authority for Privacy Protection:

Integritetsskyddsmyndigheten — IMY

‍

12. Data Security

Yinergy takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

Measures may include:

• Secure website connections
• Password-protected systems
• Restricted access to personal data
• Two-factor authentication where available
• Regular review and deletion of information that is no longer required
• Appropriate agreements with service providers

No method of electronic transmission or storage can be guaranteed to be completely secure.

‍

13. Changes to This Policy

Yinergy may update this Privacy & Cookies Policy when:

• The website or its functions change
• A new service provider is introduced
• Analytics or marketing technologies are added
• Legal or regulatory requirements change

The latest version will always be published on this page with an updated revision date.

‍

14. Contact

If you have questions about this policy or how Yinergy processes personal data, please contact:

Yinergy AB
Organisation number: 559548-5094
Address: Mastgränd 21, 21177 Malmö
Email: info@yinergy.se