Privacy Policy
Last updated: September 2026
1. Data Controller
Astriddotter Studio
Anna Astriddotter
Email:
I am the data controller for the processing of your personal data on this website.
2. What personal data do I collect?
I collect the following personal data:
Via the contact form:
• Name
• Email address
• Message
Via the application form (The Brand Edit):
• First name and email address
• Information about your business and vision
• Answers to reflective questions about your brand
Via the client portal (The Brand Journal):
• Email address and password (for login)
• Answers to reflective journal questions
• Uploaded files (images, moodboards, PDFs)
• Session booking information (date, time, optional Google Meet link)
• Feedback messages
Via agreement signing:
• Name and email address
• Digital signature, IP address, and timestamp (to verify the signature)
Via payment links:
• Email address
• Payment information (handled by Stripe — see section 5)
3. Why do I process your personal data?
Contact form:
I process the data to respond to your inquiry and potentially start a collaboration.
Legal basis: Legitimate interest (to respond to inquiries).
Application form (The Brand Edit):
I process the data to assess your application and contact you regarding potential collaboration.
Legal basis: Legitimate interest (to manage applications for my services).
Client portal (The Brand Journal):
I process the data to deliver the service you have commissioned, including brand work, communication, and session booking.
Legal basis: Contract (performance of a service agreement).
Payments:
I process the data to complete and confirm your payment.
Legal basis: Contract (performance of a service agreement).
4. How long do I store your data?
Contact information: Stored as long as needed to handle your inquiry, typically up to 12 months.
Application data: Stored as long as needed to manage the application and any potential collaboration, typically up to 12 months.
Client portal data: Stored for the duration of the collaboration and up to 12 months after the project is completed, unless otherwise agreed.
Booking and payment data: Stored in accordance with accounting law requirements (7 years for payment records).
5. Who do I share data with?
I share your data with:
• Google (Google Calendar & Meet) — to sync bookings and create video meeting links for clients in The Brand Journal
• Resend (email provider) — to send messages and confirmations
• Stripe (payment provider) — for secure handling of payments. Stripe processes your payment details according to their own privacy policy.
• Supabase (database host) — for secure storage of application and portal data
I never sell your personal data to third parties.
6. Your rights under GDPR
You have the right to:
• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Object to processing
• Port your data (data portability)
• Withdraw consent at any time
To exercise your rights, contact me at .
7. Cookies
This website does not use any cookies for statistics, analytics, or marketing. Read more in my cookie policy.
8. Complaints
If you are dissatisfied with how I handle your personal data, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):
www.imy.se
9. Contact
Do you have questions about my processing of personal data?
Email:
