Privacy Policy

Last updated: November 15 2025

1. Data Controller

Sanni Kujala
Stockholm, Sweden
Email: sanni@ifswithsanni.com

2. Personal Data I Collect

Information you provide through a contact form

  • Name

  • Email address

  • Country of residence

  • Other information shared via the contact form or email, such as therapy topics/goals

  • If you become a client:

    • Address

    • Phone number

    • Emergency contact details (if provided)

    • Brief session notes

Information collected automatically by Squarespace

Because this site is hosted on Squarespace, they automatically collect basic technical data, such as:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited

  • Time and date of visits

  • Referring website

  • General location data (city-level)

  • Essential cookies used for basic site functionality

This data is used for security, performance, and correct functioning of the website. I do not use advanced tracking or marketing analytics.

3. Purpose and Legal Basis of Data Collection

When you contact me

  • To read and respond to your message

  • To determine whether we might work together

    Legal basis for data collection: Your consent and my need to review your enquiry to decide whether I can offer you an appointment.

If you become a client

  • To provide therapy services

  • To maintain necessary client records

  • To communicate and schedule sessions

    Legal basis for data collection: The information I need in order to provide therapy.

Website operation

  • To run and secure the website

    Legal basis: My legitimate interest in operating, maintaining, and securing the website.

I do not use your personal data for marketing without explicit consent.

4. Session Notes

If you become a client, I keep brief session notes stored in a secure, password-protected application accessible only to me. Notes are stored for five years and then securely deleted.

5. Contact Form Retention

Contact form submissions are retained for 3 months so I can follow up if needed. After 3 months, they are deleted.

6. Data Storage, Security, and Third-Party Processors

I use technical and organisational measures to protect your data, including secure storage, password protection, and limiting access to myself only.

Third parties that may process data on my behalf include:

  • Squarespace (website hosting)

  • Email provider (to receive enquiries)

Some of these providers may process data outside the EEA. When they do, they use legally approved safeguards to ensure your data is protected to EU standards.

7. Your Rights Under GDPR

You have the right to:

  • Access your data

  • Request corrections

  • Request deletion (in certain circumstances)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent at any time if consent is the legal basis

To exercise your rights, email me at sanni@ifswithsanni.com


You may also lodge a complaint with Sweden’s data protection authority, Integritetsskyddsmyndigheten (IMY).

8. Automated Decision-Making

I do not use automated decision-making or profiling.

9. Children and Minors

This website and my services are intended for adults. I do not knowingly collect data from anyone under 18.

10. Changes to This Policy

If this policy is updated, the new version will appear here with a revised date.

11. Contact

For questions about this policy or how your data is handled, contact:

Sanni Kujala
Email: sanni@ifswithsanni.com