PRIVACY POLICY
Last updated: 8 October 2026
1. Introduction
Your privacy matters at NIDRISTA. This Privacy Policy explains how your personal information is collected, used, stored, and protected when you visit our website, subscribe to our newsletter, become a member, purchase a service, or get in touch.
NIDRISTA is a sole proprietorship based in Sweden, operated by Johanna Andersson, which acts as the data controller for personal information processed for NIDRISTA's purposes.
For privacy-related enquiries, please contact rest@nidrista.com.
2. Information We Collect
Depending on how you interact with NIDRISTA, we may collect and process:
Personal details: Your name, email address, and information you voluntarily provide.
Membership information: Your account details, subscription status, purchases, and transaction history.
Payment information: Information relating to purchases and payments. Payments are securely processed by Stripe, and we do not directly store your full payment card details.
Communications: Emails, enquiries, and other information you choose to share with us.
Technical information: Certain device, browser, and security-related information necessary to operate and protect the website.
3. How We Use Your Information
We process personal information for the following purposes:
Providing services: To manage memberships, subscriptions, purchases, bookings, and access to digital content. Our legal basis is the performance of a contract.
Customer communication: To respond to enquiries and communicate about services you have requested. Our legal basis is contractual necessity or our legitimate interests.
Newsletter subscriptions: To manage and deliver newsletters through Substack when you subscribe. Our legal basis is consent, where applicable.
Website security: To maintain the security and essential functionality of our website. Our legal basis is our legitimate interests.
Legal compliance: To maintain financial records and fulfil applicable tax, accounting, and other legal obligations.
We do not sell your personal information.
4. Cookies and Similar Technologies
Our website is hosted by Squarespace, which uses essential cookies to support website security, account access, memberships, and purchases.
We have restricted Squarespace's non-essential cookies and disabled its Activity Log feature.
Our website also includes an embedded subscription form provided by Substack. The embedded form may use cookies and similar technologies, including those supporting security and technical functionality. Visitors are redirected to Substack to complete their newsletter subscription.
Stripe, our payment provider, may use cookies and similar technologies for secure payment processing, authentication, and fraud prevention.
Our website provides cookie preference controls through a cookie banner. You can also manage cookies through your browser settings. Certain third-party technologies may operate independently of Squarespace's cookie consent settings.
For further information, please refer to the privacy and cookie policies of Squarespace, Stripe, and Substack.
5. Third-Party Services
We use the following platforms to operate NIDRISTA:
Squarespace: Website hosting, customer accounts, memberships, subscriptions, and website functionality.
Stripe: Secure payment processing, transaction management, and fraud prevention.
Substack: Newsletter subscriptions, email distribution, and subscriber management.
Our website features an embedded Substack form that redirects visitors to Substack to complete their subscription and select their subscription preferences. Newsletter registrations and subscriber information are managed through Substack. As the publisher, we may access subscriber information made available through the platform to manage and deliver our newsletter.
You can unsubscribe at any time through Substack. For further information about Substack's data processing, please see Substack's Privacy Policy.
Personal information is stored and processed through these platforms rather than in a separate NIDRISTA customer database.
Depending on the service and applicable agreements, these providers may process information on our behalf or as independent data controllers.
6. Data Storage and Retention
Personal information is stored and processed through the third-party services we use to operate NIDRISTA, including Squarespace, Stripe, and Substack.
We retain membership and customer information for as long as necessary to provide our services, manage subscriptions, respond to enquiries, and comply with applicable legal obligations.
Newsletter subscriber information is processed through Substack. You can unsubscribe at any time, and you may request the deletion of your personal information, subject to applicable legal requirements.
Payment and transaction information is processed through Stripe, which may retain certain records after a transaction or customer relationship has ended for legal, regulatory, security, and fraud-prevention purposes.
Accounting records are retained for the period required under Swedish law, generally until the end of the seventh year following the calendar year in which the financial year ended.
When personal information is no longer required, we take appropriate steps to delete or anonymise it, subject to applicable legal obligations and the retention practices of our service providers.
For further details, please refer to the privacy policies of Squarespace, Stripe, and Substack.
7. International Data Transfers
Some of our service providers may process personal information outside the European Economic Area (EEA), including in the United States.
Where required, international transfers are protected through recognised legal mechanisms, such as adequacy decisions, the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
Further information about these safeguards is available in our service providers' privacy policies.
8. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right, subject to applicable conditions, to:
Access the personal information we hold about you.
Request corrections to inaccurate information.
Request deletion of your information.
Restrict or object to certain processing.
Request the portability of your information.
Withdraw your consent at any time where processing is based on consent.
To exercise your rights, please contact rest@nidrista.com.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se.
9. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or misuse.
Our service providers maintain their own security measures to protect information processed through their platforms. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, data processing practices, or legal requirements.
The latest version will be available on this page, together with the date of the most recent update.
11. Contact
NIDRISTA
Johanna Andersson
Bygdegårdsvägen 22B
142 65 Trångsund
Sweden
Email: rest@nidrista.co