Privacy Policy
Last updated: 27 October 2026
At Elle Baron Designs AB, I respect your privacy and am committed to handling your personal information responsibly and transparently.
This Privacy Policy explains what personal information I collect, how I use it, who I share it with and what rights you have when you visit www.ellebaron.com, contact me, book a consultation, subscribe to my emails or purchase my services and digital products.
It also explains how cookies and third-party technologies are used on this website.
1. Who is responsible for your data?
The data controller responsible for your personal information is:
Elle Baron Designs AB
Organisation number: 559407-6159
Stockholm, Sweden
Email: hello@ellebaron.com
Website: www.ellebaron.com
For questions about this Privacy Policy or how your personal information is handled, please contact me using the email address above.
2. What personal information I collect
Depending on how you interact with my website and business, I may collect:
Contact details: Your name, email address, telephone number, business name and other information you choose to share.
Enquiry and booking information: Details submitted through contact forms, applications, questionnaires and appointment bookings, including information about your business, challenges, goals and requirements.
Client information: Information necessary to manage projects, provide services, communicate with you, manage contracts and process invoices.
Email marketing information: Your name, email address, subscription preferences and, where enabled, information about how you interact with my emails.
Quiz and assessment information: Your answers, results and any contact details you voluntarily provide.
Purchase information: Order details, billing information, transaction references and information required to provide access to purchased products.
Website usage information: Technical information such as your IP address, browser type, device information, pages visited and interactions with my website, depending on the technologies used and your consent preferences.
Most personal information is provided directly by you. Certain technical information is collected automatically when you visit the website or interact with third-party content.
3. How and why I use your personal information
I process personal information only where there is an appropriate legal basis under the General Data Protection Regulation (GDPR).
Responding to enquiries and managing bookings
When you contact me, complete an enquiry form or book a discovery call, I use the information provided to respond to your enquiry, arrange appointments and discuss potential services.
Legal basis: Taking steps at your request before entering into a contract (Article 6(1)(b)) or legitimate interests in responding to business enquiries (Article 6(1)(f)), as appropriate.
Providing services and managing client relationships
When we work together, I use relevant information to manage our project, deliver agreed services, communicate with you and fulfil contractual obligations.
Legal basis: Performance of a contract (Article 6(1)(b)), or legitimate interests where information relates to a business contact who is not personally party to the contract.
Sending newsletters and marketing communications
If you subscribe to my newsletter or agree to receive marketing communications, I use your information to send relevant content, business updates, resources and information about my services.
Legal basis: Consent (Article 6(1)(a)), where required by applicable marketing laws.
You can unsubscribe at any time using the link included in my marketing emails or by contacting hello@ellebaron.com.
Providing free resources and assessments
When you request a free resource or complete an interactive assessment, I process the information necessary to deliver the resource, calculate your results or provide the information you requested.
Where I invite you to subscribe to ongoing marketing communications, this is handled separately from your request for the resource or assessment.
Legal basis: Legitimate interests in delivering a requested resource (Article 6(1)(f)), steps taken at your request before entering into a contract where applicable (Article 6(1)(b)), and consent for optional marketing communications (Article 6(1)(a)).
Processing purchases and payments
When you purchase a service or digital product, I use the necessary information to process your order, provide access to the purchased product or service, manage transactions and meet accounting requirements.
Payment card information is handled through the relevant third-party checkout or payment provider.
Legal basis: Performance of a contract (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)).
Understanding website performance
I use Google Analytics to understand how visitors find and interact with my website, including website traffic, page views and general usage patterns.
Where analytics cookies or similar technologies require consent, their use is subject to the applicable consent requirements.
Legal basis: Consent (Article 6(1)(a)) for optional analytics tracking.
Maintaining website functionality and security
Certain technical information is processed to operate and protect the website, maintain essential functionality, prevent misuse and support security.
Legal basis: Legitimate interests (Article 6(1)(f)), where appropriate, or another applicable lawful basis.
4. Third-party services and data processors
I use selected third-party platforms to operate my website, provide services and manage communications.
These providers may process personal information on my behalf or act as independent data controllers, depending on the service and activity.
Squarespace
My website is built and hosted using Squarespace, which provides website hosting, content management, security and other technical functionality.
Privacy policy: https://www.squarespace.com/privacy
Google Analytics
I use Google Analytics to understand website traffic and how visitors interact with my website.
Depending on the applicable settings and consent choices, Google may process technical information such as online identifiers, device information and website interactions.
Privacy policy: https://policies.google.com/privacy
Usercentrics
I use Usercentrics as my consent management platform to provide information about cookies and third-party technologies, collect and manage cookie preferences and retain records of consent choices.
Usercentrics may process technical information and consent preferences for these purposes.
Privacy policy: https://usercentrics.com/privacy-policy-cmp/
Flodesk
I use Flodesk to manage newsletter subscriptions, email sign-up forms, subscriber information and automated email communications.
Flodesk may process names, email addresses, subscription preferences and email engagement information where applicable.
Privacy policy: https://flodesk.com/privacy-policy
Dubsado
I use Dubsado to manage enquiries, applications, appointment scheduling and client relationships.
When you complete an embedded Dubsado form or book a consultation, the information you provide is processed through Dubsado.
Privacy policy: https://www.dubsado.com/legal/privacy-policy
Interact
I use Interact to display interactive quizzes and assessments.
When you participate in an assessment, Interact processes your responses and results, together with any contact information you choose to provide.
Privacy policy: https://www.tryinteract.com/privacy/
FeedWind (Mikle)
I use FeedWind to display podcast episodes and related content on my website.
When the embedded widget loads, FeedWind may process technical information associated with your visit.
Privacy policy: https://feed.mikle.com/support/privacy-policy/
Shosay
I use Shosay to display client testimonials and reviews through embedded website widgets.
Shosay may process technical information associated with loading and interacting with its content.
Privacy policy: https://www.shosay.com/privacy
Systeme.io
I use Systeme.io to provide an externally hosted checkout and access to digital products.
If you follow a link to purchase a product, information submitted through the checkout is processed by Systeme.io and its relevant payment providers. I receive the order and customer information necessary to fulfil the purchase and maintain appropriate business records.
Other service providers
I may also use providers for business email, file storage, project management, payment processing, accounting and other administrative purposes.
Personal information is shared with these providers only where relevant to the services they perform, subject to the applicable data protection requirements.
I do not sell personal information to data brokers.
5. Cookies and similar technologies
My website uses cookies and may use other browser technologies, including local storage and embedded scripts.
These technologies support website functionality, remember preferences and, where permitted, provide information about website usage.
Strictly necessary technologies
These are required for essential website functionality, security or services specifically requested by visitors.
They may include technologies used by Squarespace and Usercentrics.
Where they meet the applicable legal exemption, prior cookie consent is not required.
Functional technologies
Certain third-party features, including embedded enquiry forms, assessments, podcast feeds and testimonial widgets, may use cookies or similar technologies.
Whether consent is required depends on the purpose and operation of the particular technology.
Analytics technologies
I use Google Analytics to understand website traffic and visitor behaviour.
Non-essential analytics cookies and similar storage technologies require consent where applicable.
Marketing and advertising technologies
Advertising-related technologies may be used only where an appropriate legal basis and any required cookie consent are in place.
Managing cookie preferences
I use Usercentrics to provide information about the third-party services and tracking technologies used on my website.
You can accept, decline or customise optional technologies through the cookie banner and change or withdraw your choices through the Cookie Settings control.
The Cookie Settings panel provides information about the services and storage technologies configured on this website, including their purposes, providers and available storage details.
You can also manage cookies through your browser settings, although restricting certain technologies may affect optional website features.
Simply browsing my website does not constitute consent to non-essential cookies.
6. How long I keep your information
I retain personal information only for as long as necessary for the purposes for which it was collected, or where a longer retention period is required or permitted by law.
Enquiries and applications: Retained while an enquiry is being considered and for a limited follow-up period. Where an enquiry does not result in a client relationship, information is deleted in accordance with my enquiry retention schedule.
Client and project records: Retained during our working relationship and for an appropriate period afterwards where necessary for contractual responsibilities, legitimate business purposes or potential legal claims.
Email marketing information: Retained while you remain subscribed. Limited information may be retained after unsubscribing where necessary to honour your preferences or demonstrate compliance.
Quiz and assessment information: Retained for as long as necessary to provide results and manage any related enquiries or communications, subject to the applicable retention arrangements.
Accounting and transaction records: Retained in accordance with Swedish bookkeeping legislation, generally until the end of the seventh year following the calendar year in which the relevant financial year ended.
Cookie consent records and website data: Retained according to the relevant consent management, analytics and technical retention settings.
When information is no longer required, I delete or anonymise it, unless continued retention is justified or legally required.
7. International data transfers
Some third-party service providers are located outside the European Economic Area (EEA), including in the United States and Japan.
Where personal information is transferred outside the EEA, the relevant transfer must comply with the GDPR.
Depending on the provider and circumstances, appropriate mechanisms may include an applicable European Commission adequacy decision, the EU–US Data Privacy Framework for eligible certified recipients, or Standard Contractual Clauses with any necessary additional safeguards.
You can contact me at hello@ellebaron.com to request further information about applicable international transfer arrangements and safeguards.
8. Your rights under the GDPR
Depending on the circumstances and applicable legal requirements, you have the right to:
Access: Request information about the personal data I hold about you.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of your personal data in certain circumstances.
Restriction: Request that certain processing activities be restricted.
Objection: Object to processing based on legitimate interests, including direct marketing.
Data portability: Request certain personal data in a structured, commonly used and machine-readable format.
Withdraw consent: Withdraw consent at any time where processing relies on consent, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, contact hello@ellebaron.com.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):
9. Data security
I take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.
Access to personal information is limited to what is necessary for legitimate business purposes.
However, no system or method of online transmission can be guaranteed to be completely secure.
10. External websites and links
My website may contain links to external websites and platforms, including booking services, digital product checkouts, podcast platforms and social media.
When you visit an external website, that provider may collect and process information under its own privacy practices.
I recommend reviewing the relevant privacy policies before sharing personal information.
11. Automated assessment results
Some interactive assessments on my website automatically calculate results or recommendations based on the answers you provide.
These results are intended to provide general guidance and do not involve decisions that produce legal or similarly significant effects concerning you.
12. Changes to this Privacy Policy
I may update this Privacy Policy when my business practices, website integrations or legal obligations change.
The most recent version will be published on this page with an updated revision date. Where changes materially affect how personal information is processed, I will provide any additional notice required by law.
13. Contact
For questions about this Privacy Policy or requests relating to your personal information, please contact:
Elle Baron Designs AB
Organisation number: 559407-6159
Stockholm, Sweden
hello@ellebaron.com
www.ellebaron.com