I take your privacy seriously. This page explains in plain words what personal data I collect, why, who helps me handle it, and what your rights are under the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The data controller is:
Blood Sugar Mom is a brand of Digital Growth Studio, owned by Mia Sorensen.
Vensløkkevej 2, 4960 Holeby, Denmark
CVR: 27856705
Email: hello@bloodsugarmom.com
If you have any questions about your data, just email me.
What I collect and why
| When | What I collect | Why | Legal basis |
|---|---|---|---|
| You sign up for the free cheat sheet and newsletter | First name, email address, sign-up date, and whether you open or click my emails | To send you the cheat sheet and my newsletter | Your consent (GDPR art. 6(1)(a)). You can unsubscribe anytime with the link in every email. |
| You contact me through the form or by email | Name, email address, and your message | To answer you | My legitimate interest in replying to you (art. 6(1)(f)) |
| You buy a product, course, or coaching | Name, email address, billing address, what you bought, and payment status. I never see or store your full card details. | To deliver what you bought, give you access, handle refunds, and keep my accounts | Our contract (art. 6(1)(b)) and my legal duty to keep accounting records (art. 6(1)(c)) |
| You visit the site | Technical data such as IP address, browser type, and pages visited, in the server logs of my hosting provider | To keep the site running and secure | My legitimate interest in a safe, working website (art. 6(1)(f)) |
I never sell your data, and I never use it for anything you haven't been told about here.
Health information
I don't ask for health information on this site. If you choose to tell me about your diagnosis, blood sugar, or pregnancy in a message, I only use it to answer you and I delete it when our conversation is done. Please don't send more than you're comfortable sharing.
If I offer coaching in the future, I may need some health information to help you. I'll only collect it with your explicit consent (GDPR art. 9(2)(a)), explain exactly what I collect before we start, and keep it only as long as we work together.
Who I share it with
I use a few trusted services to run this site. They only process your data on my instructions, under a data processing agreement.
- Email and newsletter: Sendy, a newsletter program I run on my own server (sendroom.net). The emails themselves are sent through Amazon Simple Email Service (Amazon Web Services).
- Contact form: messages are sent by email from my website hosting (Hostinger) to my inbox.
- Payments and product delivery: ThriveCart, when I start selling products. Card payments are handled by its payment partners, and I never see your full card details.
- Website hosting: Hostinger
- Fonts: Google Fonts (Google) loads the fonts on this site, which means your browser sends your IP address to Google.
- My accountant, for purchase records only.
Some of these companies are based in the US. When your data is sent outside the EU/EEA, it's protected by the EU-US Data Privacy Framework or the EU's Standard Contractual Clauses.
When you click an affiliate link, you go to another company's website, and that company may set its own cookies to know the sale came from me. Their privacy policy applies there.
Cookies
This site doesn't use advertising or tracking cookies.
Embedded content (like videos or Pinterest pins) and affiliate partners may set their own cookies.
How long I keep your data
- Newsletter: until you unsubscribe. If you don't open any of my emails for a long time, I may remove you.
- Messages: up to 12 months after our last contact.
- Purchases: 5 years from the end of the financial year, as Danish bookkeeping law requires.
- Server logs: as long as my hosting provider keeps them, usually no more than a few months.
Your rights
You have the right to:
- see the data I have about you
- have wrong data corrected
- have your data deleted
- limit how I use it, or object to it
- get your data in a format you can take somewhere else
- withdraw your consent at any time (this doesn't affect anything I did before you withdrew it)
Just email me and I'll answer within one month. If you're unhappy with how I handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) or the data protection authority where you live.
Children
This site is meant for adults. I don't knowingly collect data from anyone under 15. If you think a child has signed up, let me know and I'll delete it.
Changes to this policy
If I change how I handle your data, I'll update this page and the date at the top. If it's a big change, I'll also tell my newsletter subscribers.
