Privacy Policy

Last updated: 11/2026

At ACTUALLY STUDIOS., we value your privacy and believe that information about how personal data is handled should be clear and easy to understand.

This Privacy Policy explains how personal data is processed when you visit our website, contact us or follow links to our external online shop.

1. Who We Are

ACTUALLY STUDIOS. is a brand operated by JORDVIND, a Swedish sole proprietorship (enskild firma).

Data Controller:
Nina-Kristin Wach
Trading as JORDVIND / ACTUALLY STUDIOS.
Fluxerum 2
577 99 Pauliström
Sweden

Email: hello@actuallystudios.works

For questions about this Privacy Policy or the processing of your personal data, please contact us using the email address above.

2. Personal Data We Process

Depending on how you interact with our website, we may process the following information:

Website usage and technical information

When you visit our website, technical information such as your IP address, browser type, device information, requested pages and access times may be processed by our website hosting provider, ADVIGA AB, to deliver the website, maintain its security and ensure its technical operation. The website is hosted on a server in Germany.

Information you provide when contacting us

If you contact us by email, we process your email address, name (if provided), the content of your message and any other information you voluntarily share.

We ask that you do not send sensitive personal information unless it is necessary for your enquiry.

3. Why We Process Personal Data

We process personal data for the following purposes and on the following legal bases under the General Data Protection Regulation (GDPR):

Operating and securing our website

Technical information may be processed to deliver website content, maintain functionality, prevent misuse and protect the website.

Legal basis: Legitimate interests under Article 6(1)(f) GDPR.

Responding to enquiries

When you contact us, we use the information you provide to read and respond to your message and manage related correspondence.

Legal basis: Legitimate interests under Article 6(1)(f) GDPR or, where applicable, steps taken at your request before entering into a contract under Article 6(1)(b) GDPR.

Complying with legal obligations

Where required by law, we may retain or disclose relevant information to meet applicable legal obligations.

Legal basis: Article 6(1)(c) GDPR.

4. Online Shop and External Services

Our digital products and publications may be offered through Payhip or other external platforms.

When you follow a link from our website to an external platform, that platform may collect and process personal data under its own privacy policy.

Purchases, payments and digital product delivery are handled through the relevant external service.

For information about how these services process personal data, please review their respective privacy policies before making a purchase.

Where we receive customer information from an external platform, we process it only for applicable business purposes, such as fulfilling orders, providing customer support and complying with legal obligations. The specific data processed, legal basis and retention period depend on the service and transaction involved.

5. Cookies and Similar Technologies

Our website may use cookies or similar technologies that are strictly necessary for its technical operation.

Any non-essential cookies or tracking technologies, including those used for analytics or advertising, will only be used where permitted by applicable law and, where required, after obtaining your consent.

Before such technologies are enabled, we will provide information about their purposes, providers and storage periods, together with appropriate consent controls.

Website-specific cookie details:

This website sets no cookies. If you change the appearance or switch on high contrast, your choice is stored in your browser's local storage under the keys "theme" and "contrast", so that it is kept for your next visit. This stays on your device and is not used to recognise you. You can delete it at any time in your browser settings.

6. Audience Measurement with Umami Analytics

For the statistical analysis of visitor behaviour on this website, we use the open-source software Umami Analytics. Umami is operated on our behalf by ADVIGA AB on its own server in the European Union (Helsinki, Finland). The processing is governed by a data processing agreement under Art. 28 GDPR; no data is transmitted to third countries. Umami is designed with privacy in mind: no cookies are set; no personal data is collected; IP addresses are used solely to generate anonymous, daily-rotating visitor hashes and are not stored; no cross-device or cross-site tracking is performed.

We only record aggregated information about the use of this website, such as pages visited, time on page, approximate country of origin, browser used, and device and operating system type. The legal basis for this processing is Art. 6(1)(f) GDPR (our legitimate interest in a statistically informed optimisation of our online offering). Since no cookies are set and no personal data is stored, consent under the ePrivacy rules is not required. You can find more information about Umami at umami.is.

7. Third-Party Services

We do not use any third-party services (e.g. Google Analytics, Google Fonts, Google Maps, YouTube embeds, social media plugins) on our pages. Hosting and analytics are provided by ADVIGA AB acting on our behalf under a data processing agreement. All fonts and scripts of the website are delivered from the website's own server, except the Umami script, which is loaded from ADVIGA AB's analytics server in Finland.

8. Sharing Personal Data

We may share personal data with service providers where necessary to operate our website and business. These may include:

• Website hosting and technical service providers (ADVIGA AB).
• Email and communication service providers.
• External e-commerce and payment platforms, where applicable.
• Professional advisers or public authorities where legally required.

Service providers acting on our behalf are required to process personal data in accordance with applicable data protection requirements.

We do not sell personal data to third parties.

9. International Data Transfers

Some service providers may process personal data outside the European Union or European Economic Area.

Where such transfers take place, we will ensure that an appropriate legal transfer mechanism is in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses, where applicable.

The website is hosted on a server in Germany and our analytics tool runs on a server in Finland. Both are within the European Union; no data is transmitted to third countries.

10. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.

Server log files are kept for a maximum of seven days and then deleted. Analytics data is kept for six months and then deleted automatically.

Email correspondence is retained for as long as reasonably necessary to respond to enquiries, maintain relevant business records or meet legal obligations.

Customer and transaction records, where applicable, are retained in accordance with relevant accounting, tax and other legal requirements.

11. Your Rights

Under the GDPR, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate information.
• Request deletion of personal data in certain circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing.

To exercise your rights, please contact us at hello@actuallystudios.works.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Website: https://www.imy.se/en/

12. Children's Privacy

Our website may feature creative resources and products intended for use by children under adult supervision.

The website is not intended to collect personal data directly from children. We do not knowingly request personal information from children through the website.

If you believe that a child has provided personal data to us, please contact us so that we can assess the situation and take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, services, legal obligations or data processing practices.

The latest version will be published on this page with an updated revision date.

14. Contact

For privacy-related questions, please contact:

ACTUALLY STUDIOS. / JORDVIND
Nina-Kristin Wach
Fluxerum 2
577 99 Pauliström
Sweden

Email: hello@actuallystudios.works