Privacy Policy

Last updated: July 2026

Privacy Policy

Your privacy matters to us.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit www.johannawestbrandt.com, contact us, subscribe to our newsletter, complete one of our assessments, or purchase coaching or other services.

We are committed to handling your personal data responsibly, transparently and in accordance with the General Data Protection Regulation (GDPR).

Who We Are

The data controller responsible for your personal data is:

Johanna Westbrandt

Email: [email protected]

Website: www.johannawestbrandt.com

If you have any questions about this Privacy Policy or how your personal information is processed, you are welcome to contact us at any time.

What Information We Collect

Depending on how you interact with us, we may collect the following types of personal data.

Information you provide

This may include:

Name

Email address

Telephone number

Company name

Billing information

Information you submit through contact forms

Information you provide when booking coaching sessions

Information you voluntarily share during coaching conversations

Responses submitted through assessments or questionnaires

Information collected automatically

When you visit our website we may automatically collect certain technical information, including:

IP address

Browser type

Device information

Pages visited

Time spent on the website

Referring websites

Cookie information

This helps us understand how our website is used and improve the visitor experience.

How We Use Your Information

We process your personal data to:

Respond to enquiries

Deliver coaching services

Administer bookings

Send assessment results

Deliver digital products and resources

Process payments and invoices

Send newsletters and marketing communications where you have consented

Improve our website and services

Comply with legal and accounting obligations

We never sell your personal information.

Lawful Basis for Processing

Under GDPR we process personal data using one or more of the following legal bases:

Your consent

Performance of a contract

Compliance with legal obligations

Our legitimate interests, provided these do not override your rights and freedoms.

Coaching Information and Session Notes

Your privacy is especially important within the coaching relationship.

Before we begin working together, we keep a coaching agreement containing your contact details, practical information about our work together, and the coaching focus or goals we have agreed upon. This coaching agreement is shared with you.

During coaching sessions, Johanna may take handwritten notes to support attentive listening, reflection, and the coaching process. These notes are working notes, intended primarily for use during the conversation and are not comprehensive records of your personal story.

To protect your privacy:

coaching notes are kept on paper rather than in digital systems;

they are not stored together with your full name or other direct identifiers;

they are stored securely and only accessible to Johanna;

they are never shared with third parties unless required by Swedish law.

We intentionally keep only the personal information that is necessary to provide our coaching services. We do not maintain detailed digital records of what clients share during coaching sessions.

If you choose to share personal or sensitive information during coaching, it is treated with respect, confidentiality, and care.

Marketing

If you subscribe to our newsletter or request a downloadable resource, we may send you occasional emails about coaching, articles, resources, events or other relevant updates.

You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

We do not sell or rent mailing lists.

Cookies

Our website uses cookies to improve functionality, understand visitor behaviour and enhance your experience.

Where required by law, we will ask for your consent before placing non-essential cookies.

For more information, please see our Cookie Policy.

Sharing Your Information

We may share personal information with trusted service providers who help us operate our business, such as providers of:

Website hosting

Email communication

Booking systems

Payment processing

Customer relationship management (CRM)

Analytics

Accounting services

These providers may only process personal data on our behalf and according to our instructions.

We never sell your personal information to third parties.

International Transfers

Some of the service providers we use may process personal data outside the European Economic Area (EEA).

Where this happens, we ensure that appropriate safeguards are in place in accordance with GDPR, such as the European Commission's Standard Contractual Clauses or other approved transfer mechanisms.

How Long We Keep Your Information

We only retain personal information for as long as necessary for the purposes for which it was collected.

Examples include:

Contact enquiries: as long as reasonably necessary to respond and follow up.

Newsletter subscriptions: until you unsubscribe.

Coaching records: only as long as reasonably necessary for providing services and meeting legal obligations.

Financial records: as required by Swedish accounting legislation.

When information is no longer required, it is securely deleted or anonymised.

Your Rights

Under GDPR you have the right to:

Access your personal information

Correct inaccurate information

Request deletion of your personal data

Restrict processing

Object to processing

Withdraw consent at any time where processing is based on consent

Request a copy of your personal data in a portable format

If you would like to exercise any of these rights, please contact us at [email protected].

Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction.

Although no internet transmission can ever be guaranteed completely secure, we continually work to protect the information entrusted to us.

Children's Privacy

Our services are intended for adults.

We do not knowingly collect personal information from children under the age of 16.

If we become aware that such information has been collected without appropriate consent, it will be deleted.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations.

The most current version will always be available on this website together with the date of the latest revision.

Complaints

If you believe that your personal data has been handled incorrectly, we hope you will contact us first so we can try to resolve the matter.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact:

Johanna Westbrandt

Email: [email protected]

Website: www.johannawestbrandt.com