Privacy Policy

Last updated: 12 September 2026

This privacy policy explains how I handle personal information when you visit my website, contact me about freelance services, work with me as a client, or receive professional outreach from me.

Who is responsible for your data?

I am SHAWNA BIRNBAUM, a freelance business based in Sweden.

I am the data controller for the personal information described in this policy.

You can contact me about privacy or personal data.

Information I collect

If you contact me, request a quote, or work with me, I may collect information such as your name, professional email address, company, job title, the contents of our communications, and information necessary to provide and invoice for my services.

My website is hosted through Squarespace. Squarespace may process technical information associated with visits to the website, such as IP addresses, browser information, device information, security data, and cookies required for the website to function.

Why I use your information

I use personal information to respond to inquiries, prepare quotes, communicate with potential and existing clients, provide freelance services, manage contracts and invoices, comply with legal and accounting requirements, maintain the security and operation of my website, and carry out relevant business-to-business outreach.

Depending on the situation, the legal basis for processing may be performance of a contract, steps taken before entering into a contract, compliance with a legal obligation, or my legitimate interests in operating and developing my freelance business.

Professional outreach

I may occasionally contact people in relevant professional roles to introduce my freelance services.

For this purpose, I may use limited professional information such as your name, employer, job title, professional email address, and the source where I found those details. This information may come from publicly available professional sources, such as an employer's website or professional networking profile.

This processing is based on my legitimate interest in promoting my services to businesses that may reasonably have a need for them.

You have the right to object to the use of your personal information for direct marketing at any time. If you ask me not to contact you again for marketing purposes, I will stop doing so.

I may retain the minimum information necessary to record that request so that I do not accidentally contact you again.

How long I keep information

I keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected.

Information relating to unsuccessful prospective-client discussions or professional outreach will normally be deleted after 12 months if no business relationship develops.

Client, contract, payment, and accounting information may be retained for longer where necessary to fulfil contractual obligations, comply with Swedish accounting or tax requirements, or establish or defend legal claims.

Service providers

I may use service providers that process limited personal information on my behalf where necessary to operate my business.

My website is hosted by Squarespace. Some processing by Squarespace or its subprocessors may take place outside the European Economic Area. Where required, appropriate legal safeguards for international transfers are used.

I may also use providers for services such as email, invoicing, accounting, cloud storage, or payment processing.

I do not sell personal information.

Cookies and website analytics

The website may use cookies or similar technologies necessary for security and basic website functionality.

Where non-essential analytics or similar technologies require consent, they will only be used where the required consent has been obtained.

Your rights

Under the GDPR, you may have the right to request access to your personal information, ask for inaccurate information to be corrected, request deletion or restriction of your information, object to certain processing, or request portability of information where applicable.

Where processing is based on legitimate interests, you may object to that processing. You may always object to the use of your personal information for direct marketing.

To exercise any of these rights, contact me.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Changes to this policy

I may update this privacy policy if my services, website, or data-processing practices change. The current version will always be published on this website.