Skip to content
    Astriddotter Studio

    Privacy Policy

    Last updated: September 2026

    1. Data Controller

    Astriddotter Studio Anna Astriddotter Email: I am the data controller for the processing of your personal data on this website.

    2. What personal data do I collect?

    I collect the following personal data: Via the contact form: • Name • Email address • Message Via the application form (The Brand Edit): • First name and email address • Information about your business and vision • Answers to reflective questions about your brand Via the client portal (The Brand Journal): • Email address and password (for login) • Answers to reflective journal questions • Uploaded files (images, moodboards, PDFs) • Session booking information (date, time, optional Google Meet link) • Feedback messages Via agreement signing: • Name and email address • Digital signature, IP address, and timestamp (to verify the signature) Via payment links: • Email address • Payment information (handled by Stripe — see section 5)

    3. Why do I process your personal data?

    Contact form: I process the data to respond to your inquiry and potentially start a collaboration. Legal basis: Legitimate interest (to respond to inquiries). Application form (The Brand Edit): I process the data to assess your application and contact you regarding potential collaboration. Legal basis: Legitimate interest (to manage applications for my services). Client portal (The Brand Journal): I process the data to deliver the service you have commissioned, including brand work, communication, and session booking. Legal basis: Contract (performance of a service agreement). Payments: I process the data to complete and confirm your payment. Legal basis: Contract (performance of a service agreement).

    4. How long do I store your data?

    Contact information: Stored as long as needed to handle your inquiry, typically up to 12 months. Application data: Stored as long as needed to manage the application and any potential collaboration, typically up to 12 months. Client portal data: Stored for the duration of the collaboration and up to 12 months after the project is completed, unless otherwise agreed. Booking and payment data: Stored in accordance with accounting law requirements (7 years for payment records).

    5. Who do I share data with?

    I share your data with: • Google (Google Calendar & Meet) — to sync bookings and create video meeting links for clients in The Brand Journal • Resend (email provider) — to send messages and confirmations • Stripe (payment provider) — for secure handling of payments. Stripe processes your payment details according to their own privacy policy. • Supabase (database host) — for secure storage of application and portal data I never sell your personal data to third parties.

    6. Your rights under GDPR

    You have the right to: • Access your personal data • Rectify inaccurate data • Erase your data ("right to be forgotten") • Restrict processing • Object to processing • Port your data (data portability) • Withdraw consent at any time To exercise your rights, contact me at .

    7. Cookies

    This website does not use any cookies for statistics, analytics, or marketing. Read more in my cookie policy.

    8. Complaints

    If you are dissatisfied with how I handle your personal data, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se

    9. Contact

    Do you have questions about my processing of personal data? Email: