Who we are
This website (https://www.empathchamber.co) is run by me, Christian Svalander, through my company Empath Design AB, based in Sweden. I value your privacy and only collect personal data when it’s needed to provide services, improve the site, or keep in touch if you choose to hear from me.
Contact
For any privacy questions or GDPR requests, email: ch***@**********gn.co.
Legal bases for processing (GDPR)
I process personal data under these legal bases: (a) consent – e.g. analytics cookies, newsletter; (b) contract – to process and deliver your orders; (c) legal obligation – bookkeeping and tax; (d) legitimate interests – site security, spam prevention.
Comments
When visitors leave comments, I collect the data shown in the form, plus the visitor’s IP address and browser user agent to help spam detection.
An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. Gravatar’s privacy policy: https://automattic.com/privacy/. After approval, your profile image is public in the context of your comment.
Media
If you upload images, avoid including embedded location data (EXIF GPS). Visitors can download and extract that data from images on the site.
Cookies & consent
A consent banner lets you accept or reject non-essential cookies. You can change or withdraw consent at any time in the banner. You can also control cookies in your browser settings.
Essential cookies run to keep the site working (e.g. login, security). Non-essential cookies (e.g. analytics) only run with your consent.
Standard WordPress cookies
If you leave a comment, you may opt in to saving your name, email, and website in cookies for convenience – they last for one year.
If you visit the login page, a temporary cookie checks if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
When you log in, several cookies save your login information and display choices. Login cookies last two days (or two weeks if you select “Remember Me”). Screen options cookies last one year. Logging out removes login cookies.
If you edit or publish an article, an additional cookie stores the post ID of the article you edited. It includes no personal data and expires after one day.
Analytics
Google Analytics
I use Google Analytics to understand site traffic and improve content. IP anonymization is enabled, and analytics cookies are only set after you consent in the banner. You can revoke consent at any time. Data retention in GA is configured (e.g. 14 months).
Newsletter
Google Workspace + YAMM
If you subscribe, I collect your name and email to send updates about Empath Chamber projects. Emails are sent via Google Workspace (Gmail) using Yet Another Mail Merge (YAMM). You can unsubscribe via the link in any email – your data will then be removed from the mailing list. I use double opt-in and keep proof of consent.
E-commerce
WooCommerce on MissHosting
When you purchase from the webshop, WooCommerce collects your name, billing/shipping address, email, phone number, ordered items, and order notes. WooCommerce is an add-on running on my WordPress site, which is hosted by MissHosting. This means personal data related to orders is stored on their servers (EU-based).
Payment details are processed securely by the chosen payment provider (e.g. Stripe, PayPal, Klarna) – card data is not stored on this site.
CRM
Notion
If you register, make a purchase, or share your contact details, I may store your name and email in Notion to manage customer relationships, orders, and communication. Notion is US-based and participates in the EU–US Data Privacy Framework. Learn more: https://www.notion.so/help/data-privacy.
Anti-spam
CleanTalk
This site uses the CleanTalk.org anti-spam service to protect against unwanted spam submissions. When you submit a form or comment, certain data (like your IP address and form content) may be sent to CleanTalk for spam detection. Their privacy policy is available here: https://cleantalk.org/publicoffer#privacy.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the same way as if you visited the other website directly. Those websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with that content – including tracking if you have an account and are logged in there.
Who we share your data with
Service providers that help operate the site and deliver services may process your data: MissHosting (hosting), Google Workspace/YAMM (newsletter), payment processors (to complete orders), Notion (CRM), spam/anti-abuse tools like Akismet and CleanTalk. I do not sell your personal data.
International transfers
When data is transferred outside the EU/EEA (e.g. Google, Notion, CleanTalk), transfers rely on adequacy decisions such as the EU–US Data Privacy Framework or on Standard Contractual Clauses.
How long we retain your data
Comments and their metadata are kept indefinitely so follow-up comments can be recognized automatically. User account data is stored in your profile until you delete it. Order records are kept as required by Swedish accounting law – typically 7 years. Newsletter data is kept until you unsubscribe.
What rights you have over your data
You have the right to request access to your personal data, ask for corrections, request erasure, restrict or object to processing, and withdraw consent at any time (e.g. for the newsletter or analytics). These rights are subject to legal exceptions – for example, I must retain invoices for bookkeeping.
To exercise your rights, email me at ch***@**********gn.co. I will respond without undue delay.
Where your data is sent
Visitor comments and form submissions may be checked by automated spam detection services like Akismet and CleanTalk. Order data is stored on MissHosting’s servers (EU). Newsletter data is processed in Google Workspace. CRM data may be stored in Notion. Analytics data is processed by Google Analytics with IP anonymization.
Changes to this policy
I may update this policy from time to time to reflect changes in the site or legal requirements. I’ll post the new version here and update the “last updated” date.
Last updated: 2025-08-26
