Privacy Policy

Last updated 16 September 2026

Who we are

Lindhagen Media Group AB (org. nr 559253-0306), Rindögatan 23, 115 58 Stockholm, Sweden, trading as Lindhagen Studio. We are the controller of the personal data described here. Questions and requests: hello@lindhagen.studio.

This policy covers our website (lindhagen.studio), people who contact us, people we approach about our services, our newsletter, and our clients.

What we collect, why, and on what basis

If you visit our website

Our host, Squarespace, records technical data when you load a page: IP address, browser and device type, pages viewed, referring site, date and time. We use this to run the site securely (legitimate interest, GDPR Art. 6(1)(f)). Squarespace's built-in visitor statistics, Google Ads conversion measurement and the LinkedIn Insight Tag run only if you accept cookies in the banner (consent, Art. 6(1)(a)). See our Cookie Policy for details.

The contact form is protected by Google reCAPTCHA, which sends your IP address and browser data to Google to tell people from bots (legitimate interest in preventing spam). Some page elements load from Ghost Plugins, a Squarespace plugin provider, which sees your IP address when they load.

If you contact us

Name, email, company, phone if you give it, and what you write. We use it to answer you and, if you ask about working with us, to prepare a proposal (steps before a contract, Art. 6(1)(b)). Kept 12 months after our last exchange, longer if you become a client.

If we approach you

We contact senior executives we believe we can help. Before we do, we may collect from your LinkedIn profile and posts, your company's website, public registers or an introduction: your name, role, company, work contact details, what you have published, and our notes from any conversation. We use this to decide whether to reach out and to run that conversation, on the basis of our legitimate interest in marketing our services to a relevant, limited audience (Art. 6(1)(f)). You can object at any time by replying or emailing us; we then stop and delete your record. Kept 12 months after our last contact.

If you subscribe to our newsletter

Email address and name, used to send the newsletter you signed up for (consent, Art. 6(1)(a)). Our email tool records whether an email was opened and which links were clicked. Unsubscribe with the link in every email or by writing to us; we then remove you.

If you are a client, or work for one

Contact details, briefing material, interview recordings and transcripts where you have agreed to them, drafts and published content, access you grant us to your LinkedIn or other accounts, and performance data. We process this to deliver the service under our agreement (Art. 6(1)(b)) and to invoice and keep accounts (legal obligation, Art. 6(1)(c)). Kept for the term of the agreement; accounting records for seven years under the Swedish Bookkeeping Act; the rest deleted within 12 months after the agreement ends unless you ask us to keep it.

We do not collect sensitive categories of data, do not use automated decision-making, and do not knowingly collect data from anyone under 18.

Who we share it with

We use these providers to run the business. Each processes data on our instructions under a data processing agreement.

Provider What for Company and location Squarespace Website hosting, contact form, visitor statistics Squarespace, Inc., USA Google Workspace Email, documents, files Google Ireland Ltd, with processing by Google LLC, USA Google Ads and reCAPTCHA Conversion measurement (with your consent), spam protection Google Ireland Ltd / Google LLC, USA LinkedIn Insight Tag Measuring the effect of our LinkedIn advertising (with your consent) LinkedIn Ireland Unlimited Company, with processing by LinkedIn Corporation, USA monday.com Tracking inquiries, sales conversations and client work monday.com Ltd, Israel Mailchimp Newsletter and email sending The Rocket Science Group LLC (Intuit), USA Claude by Anthropic AI assistance with research and drafting Anthropic Ireland, Limited, with processing by Anthropic PBC, USA. Not used to train Anthropic's models

We also share data where the law requires it, with our accountants and advisers under confidentiality, and with a buyer if the business is sold. We do not sell personal data.

Transfers outside the EU/EEA

Google, LinkedIn, Squarespace and Intuit (Mailchimp) are certified under the EU-US Data Privacy Framework. Anthropic processes under the EU standard contractual clauses. Israel, where monday.com is based, is recognised by the EU as providing adequate protection. Where a Data Privacy Framework certification lapses, the standard contractual clauses in the provider's data processing agreement apply instead.

Your rights

You can ask us for a copy of your data, have it corrected or deleted, restrict how we use it, receive it in a portable format, object to processing based on legitimate interest, and withdraw consent at any time (which does not affect what was done before). Email hello@lindhagen.studio; we answer within one month.

Complaints

You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy@imy.se, www.imy.se, or to the data protection authority in the country where you live.

Changes

We update this policy when our tools or practices change. The date at the top shows the current version.