Privacy
Privacy Policy
Your trust matters to me. This page explains, in plain language, what personal data I collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR).
Last updated: 21 October 2026
Who is responsible for your data
Malin Österlöf is the data controller for personal data collected through this website. If you have any questions about your data, or want to use any of your rights, simply get in touch through the contact form.
What I collect
I only collect what you choose to give me through the contact form:
- your name and e-mail address
- your country
- your message
- whether you want to receive the newsletter
Please don’t include sensitive information, such as health details about yourself or your children, in your message.
Why I use it, and the legal basis
To answer your message. I use your details to read and reply to what you sent me. The legal basis is my legitimate interest in responding to people who contact me (GDPR Article 6(1)(f)).
To send the newsletter, only if you sign up. If you tick “Yes, sign me up”, I use your name and e-mail address to send you the newsletter. The legal basis is your consent (Article 6(1)(a)). The box is never ticked in advance, and you can withdraw your consent at any time by using the unsubscribe link in any newsletter or by contacting me.
Your country helps me understand where my readers are. It is not used for profiling or advertising.
I never sell your data, and I never share it with anyone for their own marketing.
Who helps me handle it
To run this website I use a few trusted services that process data on my behalf, under data processing agreements:
- Formspree delivers contact form messages to my inbox. Formspree is based in the United States; transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
- My e-mail provider stores the messages I receive.
- My newsletter service stores the e-mail addresses of newsletter subscribers.
The typefaces on this site are stored on the site itself, so your browser doesn’t connect to Google or any other font service when you visit.
How long I keep it
Contact messages are kept for as long as needed to answer you and handle any follow-up, and are deleted within 12 months. Newsletter subscribers are kept until you unsubscribe; after that your address is removed from the mailing list.
Cookies
This website does not use cookies, analytics or tracking of any kind, and it doesn’t load anything from third-party services while you browse. Only when you send the contact form is your message passed to Formspree.
Your rights
Under the GDPR you have the right to:
- see the personal data I hold about you
- have it corrected if it’s wrong
- have it deleted
- limit or object to how it is used
- receive a copy of it in a portable format
- withdraw your consent to the newsletter at any time
To use any of these rights, just send me a message. I’ll reply within one month.
If you feel your data has not been handled properly, you can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority in your own country.
Changes to this policy
If anything about how I handle personal data changes, I’ll update this page and the date at the top.