Privacy

1. Who is responsible

I am, as the data controller: Mia Ottosson, the person you book with. For anything about your data, email me at miabackstage1@gmail.com.

Seller

Maria (Mia) Ottosson, trading as Spiritual Creative Development

Business form

sole trader (enskild näringsidkare), Sweden

Organisation number

670313-6207

VAT number

SE670313620701

Address

Arviken 825, 655 97 Molkom, Sweden

Email

miabackstage1@gmail.com

2. What I collect, and why

When you write to me

The contact form sends me your name, your email address, what you are writing about and your message, and sends you a short note that it arrived. I use it to answer you. The legal basis is my legitimate interest in answering the people who write to me, and, when you ask about booking, the steps you ask for before a purchase.

When you book and pay

The booking form sends me your name, your email address, what the session is mostly about and the note, if you write one. I get this by email when you go to the payment page, even if you don’t finish paying, so I can help if something went wrong. The same details are saved with your payment at Stripe, so I can match your payment to your booking.

Stripe handles your card or other payment details on its own secure page. I never see your full card number. I get your name, email address, what you bought, the amount and the date, and you and I each get a confirmation email.

I use these details to arrange and hold your session and to keep my accounts. The legal basis is our agreement, and for the payment records the Swedish accounting law I must follow.

If you use a Journey with Mia member link

The member price comes from a link in your Journey with Mia member portal. When you use it, this site checks with Journey with Mia, which is also mine, that your yearly membership is active, and the email address of your membership is saved with your payment so the member price can be given. The legal basis is our agreement.

When you withdraw from a purchase

The withdrawal form sends me your name, your email address, what you bought, and the payment date and reference if you give them, and sends you a copy with the date and time I received it. I use it to handle your withdrawal and your refund, because the law asks me to.

Things you choose to tell me

Only share what you are comfortable sharing. If you tell me about your health, your beliefs or something else sensitive in a message or a booking note, I use it only to answer you and to prepare our session, and I delete it when you ask me to.

Keeping the forms safe

The forms use Cloudflare Turnstile, a check that tells people from automated spam. It processes technical details such as your IP address and information about your browser. The legal basis is my legitimate interest in keeping the forms, and my inbox, free of abuse.

Visiting the site

The site is hosted by Vercel. Like any web server, it processes your IP address and the pages you ask for, to deliver them and keep the site secure. This site has no analytics or advertising, and it sets no cookies of its own. The payment page (Stripe) and the spam check (Cloudflare) use their own technology to work securely; their privacy notices explain it.

In a session

Sessions are held on Zoom, and I send you the link. All sessions are held under professional secrecy: what you tell me stays between us.

3. Who else handles your details

Only the services I need to run this site and my sessions, each for its own part:

• Stripe: payments.
• Resend: sends the emails from this site.
• Google (Gmail) and my other email provider: where I read and answer my email.
• Cloudflare: the spam check on the forms.
• Vercel: hosts the site.
• Zoom: the sessions themselves.

I don’t sell your details, and I don’t use them for advertising. Booking a session doesn’t put you on any mailing list.

Some of these services are based in the United States or use providers there. When your details go outside the EU, they are protected the way the GDPR requires, for example by the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

4. How long I keep your details

• Messages, booking details and session arrangements: for as long as we are in touch, then up to 24 months after our last contact.
• Payment and refund records: 7 years, as Swedish accounting law requires (bokföringslagen 1999:1078).
• A withdrawal: with the refund records when there was a refund, otherwise up to 24 months.

After that, I delete them.

5. Your rights

You can ask me for a copy of the details I have about you, and ask me to correct them, delete them, limit what I do with them, or send them to you in a form you can take elsewhere. You can object to what I do on the basis of my legitimate interest. Some records, like payments, I must keep for as long as the law says. Email me at miabackstage1@gmail.com and I answer within a month.

If you think I handle your details wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (imy.se), or to the data protection authority where you live.

6. Changes

If I change how I handle your details, I update this page and the date at the top.