Privacy
How I handle your data
In short: I only use what you send to reply to your inquiry, and it is deleted from the website automatically after one year.
Data controller
Airy Blooms. Contact: airy.blooms.se@gmail.com.
What is collected
When you send an inquiry, what you fill in is stored: name, e-mail, phone number (if given), what you are interested in, date, budget, style preferences and any images you attach.
Why
So I can reply to you and discuss your order. The legal basis is your consent and steps taken before a possible agreement (Article 6(1)(a) and (b) GDPR). I send no newsletters and never sell or share your data with others for marketing.
Where it is stored and for how long
Your inquiry is stored on the website’s server at Hetzner Online in Finland (EU) and sent to my e-mail at Google (Gmail). Google may process data outside the EU, protected by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Images you attach are not stored publicly. On the server, inquiries and images are deleted automatically after 12 months. I delete the e-mail copy in my inbox myself once it is no longer needed, at the latest after 12 months. Hetzner and Google process the data on my behalf.
The portfolio images and videos are fetched from my own Instagram account and served from the website’s own server. The site loads nothing directly from Instagram – no tracking scripts, embeds or videos. If you follow a link to Instagram, Meta’s terms and privacy policy apply there.
Server logs
Like every web server, the server records technical details of each visit, such as IP address, browser and which page was shown. This is used only for security and to stop spam, and the logs are deleted automatically after 14 days (legitimate interest, Article 6(1)(f) GDPR).
Cookies
The site uses no cookies for tracking or marketing. Only your language choice is stored in a cookie, so the site is shown in the right language next time.
Your rights
You can ask me at any time to see, correct or delete your data, or withdraw your consent. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY, imy.se), the Danish Data Protection Agency (datatilsynet.dk) or the authority in your own country.