Last updated: [2026-02-19]

This Privacy Policy explains how SHE SOUNDS AB ("we", "us", "our") collects, uses, and protects personal data when you visit https://www.shesounds.studio (the "Website").

1. Controller

Company: SHE SOUNDS AB
Registered office: Sweden
Address: Baringsvagen 33, SE-423 38 Torslanda, Sweden
Email: hi@shesounds.studio
Organisation number: 559572-7974
VAT number: Applied for. Will be added once issued.

2. Scope

This policy applies to:

Visits to our Website

Contact requests via email or contact forms

Analytics and performance measurement (Squarespace Analytics)

Marketing and advertising measurement (Meta Pixel)

Embedded content (YouTube)

Newsletter subscriptions (Squarespace Email Campaigns)

3. Data we collect

3.1 Data you provide

If you contact us, we may collect:

Name (if provided)

Email address

Message content

Any information you choose to include

If you subscribe to our newsletter, we may collect:

Email address

Name (if provided)

Subscription preferences (if applicable)

3.2 Data collected automatically

When you visit the Website, the following data may be processed:

IP address

Device and browser information

Referrer URL

Pages visited and interactions

Date and time of access

Cookie identifiers (if you consent to non-essential cookies)

4. Purposes and legal bases (GDPR)

We process personal data for the following purposes:

Website operation, delivery, and security

Legal basis: Legitimate interests (GDPR Art. 6(1)(f))

Responding to inquiries and providing requested information

Legal basis: Contract steps and/or legitimate interests (GDPR Art. 6(1)(b) and 6(1)(f))

Analytics and website performance measurement (Squarespace Analytics)

Legal basis: Consent where required (GDPR Art. 6(1)(a)) or legitimate interests for basic site improvement (GDPR Art. 6(1)(f)), depending on your location and settings

Marketing measurement and ad performance (Meta Pixel)

Legal basis: Consent (GDPR Art. 6(1)(a))

Embedded content (YouTube)

Legal basis: Consent where required (GDPR Art. 6(1)(a))

Sending newsletters (Squarespace Email Campaigns)

Legal basis: Consent (GDPR Art. 6(1)(a))

5. Cookies and consent management

We use a cookie consent banner to let you choose which cookies and similar technologies may be used.

Essential cookies are required to run the Website and cannot be switched off.

Analytics and marketing cookies are used only if you give consent.

You can change or withdraw consent at any time via the “Manage cookies” option in the cookie banner (or by clearing cookies in your browser settings).

Note: Some embedded services (e.g. YouTube) may load third-party resources and set cookies when you interact with them.

6.Tool directory (services used on this Website)

6.1 Website platform and hosting

Tool: Squarespace (Squarespace, Inc.)

Purpose: Hosting, website delivery, security, and content management

Data processed: IP address, device info, usage logs; form submissions if you use forms

Legal basis: Legitimate interests; contract steps (Art. 6(1)(f), 6(1)(b))

Role: Processor

6.2 Contact forms

Tool: Squarespace Forms (built-in)

Purpose: Receive and manage contact requests

Data processed: Name (if provided), email address, message content, timestamps, technical metadata

Legal basis: Contract steps and/or legitimate interests (Art. 6(1)(b), 6(1)(f))

Role: Processor

6.3 Analytics

Tool: Squarespace Analytics (built-in)

Purpose: Understand basic website activity and improve content and user experience

Data processed: Aggregated usage data (e.g. page views, traffic sources, device type), technical metadata (may include IP address depending on configuration)

Legal basis: Consent where required (Art. 6(1)(a)) or legitimate interests for basic site improvement (Art. 6(1)(f)), depending on your location and settings

Role: Processor

Status: Enabled.

6.4 Marketing / Ads measurement

Tool: Meta Pixel (Meta Platforms Ireland Limited)

Purpose: Measure ad performance, understand audiences, improve marketing effectiveness

Data processed: Page views, events (e.g. visits, button clicks depending on configuration), cookie identifiers, IP address and device info

Legal basis: Consent (Art. 6(1)(a))

Role: Joint controllers and/or processor depending on Meta product setup

International transfers: Possible processing outside the EU/EEA

Safeguards: Standard Contractual Clauses (SCCs) and additional safeguards where applicable

Status: Enabled only after cookie consent for Advertising.

6.5 Embedded media

Tool: YouTube embeds (Google)

Purpose: Display video content

Data processed: IP address, device info, cookies set by YouTube, usage data

Legal basis: Consent where required (Art. 6(1)(a))

International transfers: Possible processing outside the EU/EEA

Safeguards: SCCs where applicable

Status: Enabled only after consent or active interaction (click to load), depending on your cookie settings.

6.6 Social links

If you click links to Instagram, LinkedIn, or other platforms, you will be redirected to third-party websites that process data under their own privacy policies.

6.7 Newsletter

Tool: Squarespace Email Campaigns (Squarespace, Inc.)

Purpose: Send newsletters and marketing updates to subscribers

Data processed: Email address, name (if provided), subscription metadata (e.g. signup time), email engagement data (e.g. opens and clicks)

Legal basis: Consent (Art. 6(1)(a))

Role: Processor

Status: Enabled (only if you subscribe). You can unsubscribe at any time via the link in each email.

7. Data sharing

We share personal data only with service providers needed to run the Website and deliver services (e.g. Squarespace, Meta). We do not sell personal data.

8. International data transfers

Some providers may process data outside the EU/EEA. Where required, we rely on Standard Contractual Clauses (SCCs) and other safeguards to protect personal data.

9. Retention

We keep personal data only as long as necessary:

Contact requests: typically up to 12-24 months, unless required longer for business, legal, or tax reasons

Newsletter subscriptions: until you unsubscribe. After you unsubscribe, we may retain minimal records to document consent and compliance where required

Analytics and marketing data: according to tool settings and your consent choices

Technical logs: for a limited period necessary for security and troubleshooting (depends on provider)

10. Your rights (GDPR)

You have the right to:

Access your personal data

Rectify inaccurate data

Erase your data (where applicable)

Restrict processing

Data portability (where applicable)

Object to processing based on legitimate interests

Withdraw consent at any time (does not affect processing before withdrawal)

To exercise your rights, contact: hi@shesounds.studio

You also have the right to lodge a complaint with a supervisory authority in the EU/EEA.

11. Security

We use reasonable technical and organizational measures to protect personal data. However, no website or transmission is ever fully secure.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page with the “Last updated” date.