Privacy policy

mikaeldoust.comis Mikael Doust's website. The controller for personal data collected here is Doust Media Limited, the company Mikael works through. For any privacy question or request, email hello@mikaeldoust.com.

• Booking a call. When you book through the calendar on the contact page, the details you enter (name, email, any notes and the time you pick) go to Cal.com and to me so the meeting can happen. Legal basis: steps taken at your request before a possible contract (GDPR art. 6(1)(b)).
• Emailing me. If you email me, I keep the conversation so I can reply and follow up. Legal basis: the same, or my legitimate interest in answering business enquiries (art. 6(1)(f)).
• Your cookie choice. A small cookie remembers whether you accepted or rejected analytics. Each choice is also logged with a random ID, the date, the page and your browser type, so I can show that consent was given properly. No IP address, name or email is stored with it. Legal basis: legal obligation to be able to demonstrate consent (art. 6(1)(c) with art. 7(1)).
• Analytics, only with your consent. If you click Accept, PostHog (EU cloud) records which pages you visit, clicks, how far you scroll, the site that referred you and campaign tags in the link, plus a session replay where everything typed into forms is hidden. You are not identified by name or email. Legal basis: consent (art. 6(1)(a)). You can withdraw it any time through Cookie settings in the footer.
• Hosting logs. The hosting provider keeps short-lived technical logs (such as IP address and request time) to deliver and protect the site. Legal basis: legitimate interest in a secure, working site (art. 6(1)(f)).

These services process data on my behalf, each under its own data processing terms:

• Vercel (website hosting)
• Cal.com (call booking), connected to my calendar so the meeting shows up
• PostHog, EU cloud in Frankfurt (analytics, only with consent)
• Supabase, EU region (stores the consent log)
• My email provider (for emails you send me)

Some of these companies are based in the United States. Where data leaves the EU/EEA, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Booking and email details: as long as we are in contact or working together, and after that only as long as needed for bookkeeping or legal claims.
• Analytics: no longer than 24 months. Session replays are kept for a much shorter period.
• Consent log: as long as needed to show how consent was collected.
• The cookie that stores your choice: 6 months, then you are asked again.

You can ask to see the data I hold about you, correct it, delete it, restrict or object to its use, or get a copy to take elsewhere. Where processing is based on consent, you can withdraw it at any time without affecting what happened before. Email hello@mikaeldoust.com and I will answer within one month.

If you think your data is handled wrongly, you can complain to a data protection authority, for example the Swedish Authority for Privacy Protection (IMY, imy.se) or the authority where you live.

The full list of cookies and similar storage is on the cookie policy page.

If this policy changes, the date below changes with it. Big changes that affect consent will ask you again.