Privacy Policy

LEJONKLINIKEN AB (Swedish company registration number 556857-9733, VAT SE556857973301), with its registered office at Lützengatan 9 b, 115 20 Stockholm, Sweden, is the data controller for the personal data processed via this member portal. The company operates under the brand name "The Clinic".

When you register as a member, we store the following information:

• Name, email address and telephone number
• Address details (street, postal code, city, country)
• Date of birth and gender
• Swedish personal identity number (if you choose to provide it)
• Emergency contact (name, phone, relationship)
• Health declaration — structured information about your state of health (pregnancy, heart conditions, pacemakers, epilepsy, allergies, etc.). Required before purchase and renewed at least every twelve (12) months. Processed under GDPR Art. 9 (special categories) on the basis of your explicit consent.
• Booking history and purchases
• Any notes recorded by clinic practitioners

• To administer your membership
• To manage bookings and reminders
• To process payments and invoices
• To contact you if something affects your booking
• To comply with the Swedish Accounting Act (Bokföringslagen) and other applicable Swedish law

We retain your personal data for as long as you remain an active member. When your membership ends, personal data is deleted or anonymised within twelve (12) months, with the exception of data that must be retained under the Swedish Accounting Act (seven (7) years).

The Clinic uses only strictly necessary cookies:

• Login session (Supabase) — keeps you signed in
• Payment security (Stripe) — during checkout

We use no tracking cookies, marketing cookies or third-party advertising cookies.

We share data with the following service providers who process data on our behalf:

• Supabase (database and authentication) — EU
• Stripe (payment processing) — Ireland
• Resend (transactional email) — EU
• Vercel (website hosting) — global

We never sell or share your data with advertisers or other third parties for marketing purposes.

Under the GDPR you have the following rights:

• Right of access — you may at any time request a copy of your personal data
• Right to rectification — you may correct inaccurate data directly in your profile or by contacting us
• Right to erasure — you may request deletion of your account
• Right to data portability — you may request an export file of your data
• Right to object — you may opt out of marketing communications
• Right to lodge a complaint — you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY)

To exercise any of your rights, or for questions about how we handle your data, please contact us at contact@theclinicstockholm.com.

Data controller: LEJONKLINIKEN AB
Lützengatan 9 b, 115 20 Stockholm, Sweden
Company registration number 556857-9733