Privacy & cookies

Tisha Klemetz & Co. AB
Sockengatan 10b, 252 77 Helsingborg, Sweden
Organisationsnummer: 559266-9476
info@tishaklemetz.com

I decide what happens to your information, which in data protection language makes me the controller. The business is small enough that no data protection officer is required, so there is nobody between us: you write, I answer.

Only what you hand over yourself:

· Your first name and email address, if you subscribe to the newsletter.
· Your name, email and whatever you write, if you use the contact form.
· Your name, email and billing country, if you buy something.
· Your name and email, if you book a call.
· Your name, email, whatever you put in your profile and whatever you post, if you join one of my communities.
· If you accept analytics cookies: which pages you looked at, roughly which country you are in, and what kind of device you used.

Card details never reach me. The payment processor handles those and I only see that a payment succeeded.

I do not collect anything in the sensitive categories: nothing about health, beliefs, politics or anything similar.

Data protection law wants me to say not only what I do with your information, but what legally permits each use. So:

· Answering you when you write. My legitimate interest in replying to people who contact me, or the steps leading to a contract if you are asking about working together.
· Sending the newsletter. Your consent, which you can withdraw at any time.
· Delivering what you bought and supporting you afterwards. Performance of our contract.
· Analytics. Your consent, and nothing loads unless you give it.
· Keeping invoices and accounts. A legal obligation I cannot opt out of.

· Newsletter subscribers: until you unsubscribe, and then removed.
· Enquiries and contact messages: about two years, in case we pick up a conversation again, then deleted.
· Purchase and accounting records: seven years. Swedish accounting law requires this, so if you ask me to delete a purchase record before then, I have to say no and explain why.
· Analytics: twelve months.

We are a family-owned business (my husband gives me a hand), so I rely on tools. These are all of them, and each has its own privacy policy:

· Systeme.io hosts this website, my Spanish email list and my course platform.
· Communi and Skool host the communities I run. If you join one, that platform holds your profile and whatever you post there, and its own terms and privacy policy apply to you on top of mine.
· Kit holds my English newsletter list.
· ConvertBox runs the contact form, on the contact page only.
· SiteBehaviour gives me anonymous visitor statistics, and only if you accept.
· ThriveCart handles ebook checkouts and the affiliate program.
· Stripe and PayPal process payments.
· TidyCal takes call bookings.
· Google Workspace carries my email.

I do not sell, trade or rent your information to anybody, for any amount, ever. The only other time it would leave my hands is if the law required it, or to protect someone from harm.

Some of it does, and you should know which.

Systeme.io is a French company and SiteBehaviour runs on servers in Frankfurt, so that data stays in the EU. Kit, ConvertBox, ThriveCart, TidyCal, Skool and Google are United States companies. If you subscribe to my English newsletter, write through the contact form, book a call or join my Skool community, that information is processed in the United States.

Those transfers rely on the EU–US Data Privacy Framework and on standard contractual clauses, which are the mechanisms European law provides for exactly this. If you would rather not have your data processed outside the EU, write to me and we will do it another way.

Small text files your browser stores so a site can remember things between pages. Not the edible kind, sadly.

· Necessary ones make the site work at all. These do not need your permission and cannot be turned off.
· Analytics tells me which pages people read. These load only after you accept, and if you decline, nothing is set.
· The contact page also loads ConvertBox, which runs the form there.

The banner appears before anything non-essential loads, and declining is one click, the same as accepting. To change your mind later, use the cookie settings link, which reopens the choice. You can also clear cookies at any time in your browser's privacy settings.

You can ask me to:

· show you what I hold about you
· correct anything that is wrong
· delete it
· stop using it for a while, without deleting it
· object to a particular use
· send you a copy in a portable format, so you can take it elsewhere
· withdraw consent you gave earlier, which is as easy as giving it was

Write to info@tishaklemetz.com and I will answer within a month. Nothing formal is needed, and there is no charge. Every email I send also has an unsubscribe link, and one click is enough.

If you think I have handled your data badly, you can complain to the Swedish data protection authority, IMY (imy.se), or to the equivalent authority in the country where you live. You do not need to raise it with me first, though I would like the chance to fix it.

I may update this policy. Changes take effect when they are posted here, and I will say so on the site. If something significant changes, subscribers get an email about it.

Anything at all about your data, write to info@tishaklemetz.com or use the contact form. A real person reads it, and that person is me.