Privacy Policy & booking terms.

1. Data controller

Glam Team AB, Swedish company registration number 556969-0752, operates Nordic Medical Clinic & Academy and is the data controller for personal data processed within the clinic and academy. Privacy questions may be sent to support@nordicglamteam.se or raised using the contact details below.

2. Information we process

When you contact us, book a treatment or register for a course or model appointment, we may process:

• your name, telephone number, email address and contact details,
• booking, payment and communication information,
• information about the treatment, course or service you are interested in,
• information you provide in forms, messages or conversations,
• for healthcare: relevant health information, consent records, patient notes and treatment photographs when required for safe care and documentation.

3. Purposes and legal bases

We process information to respond to enquiries, administer bookings and payments, provide treatments and courses, deliver customer service, meet legal obligations and establish or defend legal claims.

The legal basis may be a contract or steps before a contract, a legal obligation, legitimate interests or consent. Health information is processed only where permitted under applicable healthcare and data protection law.

4. Patient information and medical records

Information forming part of a patient record and safe care is handled with special confidentiality and access controls. It is retained for the period required by law. The right to erasure may therefore be limited where the clinic is legally required to retain information.

5. Bokadirekt and other providers

We may share necessary information with providers supporting bookings, payments, medical records, IT, communications and marketing. Bookings through Bokadirekt are also subject to Bokadirekt's own privacy terms. Providers may only process information under agreement and our instructions. We never sell personal data.

6. Transfers outside the EU/EEA

If a provider processes information outside the EU/EEA, we ensure that the transfer has a lawful basis and appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

7. Retention

We retain information only for as long as needed for its purpose or as required by law, accounting rules, patient data legislation or other legal obligations. It is then securely deleted or anonymised.

8. Website and cookies

The website uses technically necessary functions. If analytics or marketing cookies are introduced, you will receive clear information and the opportunity to give or refuse consent before they are used.

9. Your rights

Where the conditions are met, you may request access, correction, erasure, restriction or data portability, or object to processing. You may withdraw consent at any time without affecting processing carried out before withdrawal.

You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

10. Treatments – at least 24 hours

Cancellations or rescheduling must be made at least 24 hours before the appointment. A later change is treated as a late cancellation regardless of the reason. Any fee for late cancellation or non-attendance is stated in the booking terms.

11. Courses – at least 48 hours

Cancellations or changes must be notified at least 48 hours before the course starts. We plan premises, staff and models according to participant numbers. Later cancellations are subject to the payment and cancellation terms provided at registration.

12. Model appointments – at least 48 hours

A change of treatment or cancellation must be notified at least 48 hours before the appointment. Later changes cannot be guaranteed because we need time to arrange a new model and adjust planning.

13. Contact