Privacy & Cookie Policy

Last updated: 1 October 2026

1. Who We Are and How We Collect Personal Data

Dufvebol Consulting AB, operating under the name Malinée Ponselius, is responsible for the personal data processed through our website and services.

We collect personal data that you provide when contacting us, completing a form, subscribing to emails, booking a session, purchasing a service or participating in personal guidance, whether as an individual or on behalf of a business.

This may include:

Name, email address and other contact details.
Billing, purchase and booking information.
Information you choose to share in correspondence or during our work together.
Technical information, such as IP address and browser information.
Date of birth, exact time of birth and place of birth, if you choose to explore your personal design with us.

Data controller:

Dufvebol Consulting AB
Company registration number: 559015-5940
Solvallavägen 13
172 37 Sundbyberg, Sweden

Email: [email protected]

2. Personal Guidance, Recordings and Confidentiality

During individual guidance, you may choose to share information about your experiences, circumstances, relationships, work or personal challenges.

We treat information shared during our work together confidentially and use it to provide and follow up on your guidance.

With your prior agreement, sessions may be recorded and transcribed to support documentation and follow-up. AI-assisted tools may be used to organise and summarise session information.

Video recordings are deleted within 30 days after each session. Transcripts, summaries and personal guidance notes are deleted within 12 months after our work together ends, unless retention is required by law.

We do not routinely request sensitive personal data, such as health information. If such information is shared, we handle it in accordance with applicable data protection requirements.

Recordings and transcripts are not published or used for marketing without separate permission.

3. Personal Design and IGNITE Her® Frequencies

Exploring your personal design is optional and is not required to participate in our personal guidance services.

If you choose to explore your design with us, we will ask for your date of birth, exact time of birth and place of birth. We use this information in Maia Mechanics to access and explore your personal design and prepare for our conversations. Your details may be saved in our account within the service.

You may also choose to explore reports and interactive tools provided through Julie Ciardi's IGNITE Her® platforms. When using these tools yourself, you decide what information to share directly with the platform.

4. How We Use Your Personal Data

We use personal data to:

Respond to enquiries and messages.
Manage bookings and meetings.
Deliver purchased services and digital resources.
Provide personal guidance and relevant follow-up.
Process payments and maintain accounting records.
Send service-related information.
Send marketing communications where permitted.
Maintain the security and functionality of our website and services.

Depending on the purpose, our legal bases for processing are performance of a contract, compliance with legal obligations, legitimate interests or consent.

Where we rely on consent, you may withdraw it at any time.

5. Marketing Communications

If you subscribe to our emails or otherwise agree to receive marketing communications, we may send you:

Tips, reflections and free resources.
Information about our services and offers.
Invitations to workshops, events and other activities.

You can unsubscribe at any time using the link in our emails or by contacting [email protected].

6. External Service Providers

We use external service providers to support our website, email communication, bookings, online meetings, payments, accounting and delivery of our services.

We may also use external tools for personal design exploration, documentation and AI-assisted summaries.

Personal data may be shared with these providers where necessary for these purposes. We do not sell personal data.

Some providers may process personal data outside the EU/EEA. Where this occurs, transfers are subject to applicable data protection requirements and safeguards.

7. Cookies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for website functionality and security. These do not normally require consent.

Other cookies, such as analytics or marketing cookies, require consent where applicable.

We use CookieScript to provide information about cookies and allow visitors to manage their preferences.

You can also manage or delete cookies through your browser settings.

8. How Long We Keep Your Information

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

Our retention practices are:

Video recordings: Deleted within 30 days after each session.
Transcripts, summaries and personal guidance notes: Deleted within 12 months after our work together ends, unless retention is required by law.
Marketing subscriptions: Until you unsubscribe or we no longer have a lawful reason to retain the information.
Accounting records: As required by Swedish accounting law, generally until the end of the seventh year following the relevant financial year.
Customer and booking information: As long as necessary for service delivery, administration or applicable legal obligations.
Personal design information in external tools: Retention depends on the relevant service and our use of the information.

9. Your Rights Under GDPR

Depending on the circumstances, you have the right to:

Access your personal data.
Request correction of inaccurate information.
Request deletion of your information.
Request restriction of processing.
Object to certain processing.
Withdraw consent.
Request data portability where applicable.

To exercise your rights, contact [email protected]. We will respond within the time limits required by applicable law, normally within one month.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
Website: https://www.imy.se/