Last updated: 10 October 2026
This notice explains how we handle your personal data when you send a booking request through our website.
1. Who is responsible
The data controller is Sculpté AB (org. no. 559335-3419; company address Kyrkogatan 42B, 411 15 Gothenburg, Sweden), which runs Mindr and TouristDr by Mindr.
For questions about privacy and your personal data, email us at dpo@mindr.se.
2. What we collect and why
| Data | Why |
|---|---|
| First name, age, sex | To prepare your appointment and match you with a doctor |
| Phone number, whether you use WhatsApp, email | To contact you with a time and a payment link |
| What you need help with, warning-sign answers, free text you write | To choose the right type of visit and doctor |
| City, preferred time and language, visit type | To find an available doctor |
| Technical data (IP address, time) | To protect the form against misuse; not linked to your profile |
We only collect what is needed to handle your request. Information about your symptoms is health data, a special category of personal data.
Legal basis. We process your data to take steps at your request before providing care (GDPR art. 6.1 b), and health data for the purpose of providing health care (art. 9.2 h), under the duty of confidentiality that applies to healthcare staff in Sweden. Your consent in the booking form confirms that you have read this notice and want us to contact you.
3. Warning signs
If you answer yes to a warning-sign question, your name, phone number and that answer are sent to our team straight away, even if you do not finish the form, so that we can try to call you. This never replaces calling 112.
If you leave the form before the end without a warning sign, nothing is saved.
4. Who can see it and where it is stored
- Only our administrators and management can see your contact details.
- Data is stored on servers in the EU (Cloudflare, EU data location).
- Payments are handled by Stripe; we never see your card details.
- If you choose WhatsApp or email, we contact you through those services, which have their own privacy terms.
We do not sell your data or use it for marketing.
5. How long we keep it
- Your name, phone number, email and free text in the booking request are deleted automatically 7 days after we have handled your request.
- A request we never handle is deleted after 14 days.
- If you become our patient, your consultation is documented in a medical record, which we must keep under Swedish law (patientdatalagen), normally for at least 10 years. That record is kept in our separate medical record system, not in the booking system.
- Payment records are kept as required by Swedish accounting law.
6. Your rights
You have the right to know what data we hold about you and get a copy, have incorrect data corrected, have your data deleted (except where the law requires us to keep it, such as medical records), and object to or restrict how we use your data.
To use your rights, email dpo@mindr.se. If you are not happy with our answer, you can complain to the Swedish Authority for Privacy Protection, IMY (imy.se).