Privacy Policy
Rebel Wonderland
Last updated: 28 October 2026
1. Introduction
Rebel Wonderland respects your privacy and is committed to handling personal data responsibly and transparently.
This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit www.rebelwonderland.com, contact Rebel Wonderland, purchase products, or participate in services.
2. Data Controller
The data controller responsible for processing personal data is:
Rebel Wonderland
Legal business name: Rebel Wonderland
Registration number: 880804-0029
Business address: Upplandsgatan 77A, 113 44 Stockholm
Contact email: mikaela@rebelwonderland.com
3. Personal Data We Collect
Depending on how you interact with Rebel Wonderland, we may collect:
Name, email address, and contact details
Business name, billing information, and tax-related information
Purchase and transaction records
Information submitted through forms, questionnaires, and correspondence
Website and social media links voluntarily provided by customers
Information relevant to personalized strategic services
Technical information collected through website functionality, analytics, or cookies, where applicable
Payment card information is processed by the relevant payment provider. Rebel Wonderland does not ordinarily receive or store complete payment card details.
4. How We Use Personal Data
We process personal data to:
Process purchases and administer customer relationships
Deliver purchased products and services
Communicate about orders, appointments, and deliverables
Prepare personalized strategic materials where applicable
Maintain necessary business and accounting records
Respond to inquiries and support requests
Maintain website functionality and security
Send marketing communications where a valid legal basis exists
5. Legal Bases for Processing
Depending on the circumstances, we rely on one or more of the following legal bases under the GDPR:
Performance of a contract: To fulfill purchases and deliver agreed services where the individual is a party to the contract.
Legal obligation: To comply with applicable accounting, tax, and other legal requirements.
Legitimate interests: To administer business relationships, communicate with business customers, maintain security, and improve our services, where those interests are not overridden by individual rights.
Consent: Where consent is required, including for certain marketing activities or non-essential cookies.
6. Service Providers
Rebel Wonderland may use third-party providers to operate its website, process payments, collect information, communicate with customers, and deliver services.
These may include:
Squarespace for website hosting and commerce
Stripe for payment processing
Google services for forms, email, documents, and scheduling
Zoom for online meetings
Other providers may be used where necessary for business operations. Relevant providers may process data according to their respective roles and contractual obligations.
7. International Data Transfers
Some service providers may process personal data outside the European Economic Area.
Where required, Rebel Wonderland relies on appropriate safeguards under applicable data protection law, such as adequacy decisions or approved contractual protections.
8. Data Retention
Personal data is retained only for as long as necessary for the relevant purpose or to comply with applicable law.
As a general approach:
Purchase and accounting records are retained for the period required by Swedish law, generally seven years after the end of the relevant financial year.
Customer correspondence is retained for as long as reasonably necessary for the business relationship and related legal purposes.
Information collected for personalized services is retained according to the applicable product-specific privacy information.
For Private Intensive, preparation questionnaire responses, working notes, and personalized PDF summaries are ordinarily retained for 12 months after the session, unless a longer period is legally required for particular records.
Where applicable, information may be deleted or anonymized when the relevant retention period ends.
9. Cookies and Website Analytics
The website may use cookies or similar technologies for essential functionality and, where enabled, analytics or other purposes.
Where legally required, non-essential cookies will be used only after appropriate consent has been obtained.
Further information may be provided through the website's cookie notice or consent settings.
10. Marketing Communications
Rebel Wonderland may send marketing communications where permitted by applicable law.
You may opt out of marketing emails using the unsubscribe mechanism provided or by contacting Rebel Wonderland.
11. Data Security
Rebel Wonderland takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
No online system can be guaranteed to be completely secure.
12. Your Rights
Subject to applicable conditions under the GDPR, you may have the right to:
Access your personal data
Request correction of inaccurate information
Request deletion of personal data
Restrict or object to certain processing
Request data portability where applicable
Withdraw consent where processing relies on consent
Lodge a complaint with a supervisory authority
In Sweden, the relevant supervisory authority is Integritetsskyddsmyndigheten (IMY), www.imy.se.
13. Third-Party Websites
The Rebel Wonderland website may contain links to external websites and services.
Those services are responsible for their own privacy practices. We encourage visitors to review the relevant privacy notices.
14. Changes to This Policy
This Privacy Policy may be updated to reflect changes in services, technology, or legal requirements.
The current version will be published on the Rebel Wonderland website with its latest update date.
15. Contact
For questions about this Privacy Policy or requests concerning personal data, contact:
Rebel Wonderland
mikaela@rebelwonderland.com