Privacy policy

Marketing Dinosaur is a one-person business, so this page is short. It says what I collect, why I collect it, and what you can ask me to do with it.

Who is responsible

Marketing Dinosaur is brand and marketing consulting by Jordan Nasser (enskild firma), Stockholm, Sweden, VAT SE690427571301. I am responsible for the personal data described on this page. You can reach me at jordan@marketingdinosaur.com.

When you visit the site

The site is hosted by Cloudflare, which handles every visit and counts page views so I can see how many people come by. Those statistics use no cookies and do not track individual visitors. The site sets no cookies of its own.

When you email me

If you write to me, I keep your message and email address so I can reply. My email is hosted by Apple iCloud.

When you get the field guide PDF

The PDF is sold and delivered by Gumroad, including when you pay nothing. Gumroad handles checkout and payment, and shares your email address with me. I use it only to tell you when the guide is updated. Gumroad's own privacy policy covers what you enter on Gumroad.

When you subscribe to the newsletter

The newsletter runs on Substack. When you subscribe, Substack shares your email address with me so the newsletter can reach you. Substack's own privacy policy covers your Substack account, and you can unsubscribe from any issue.

When you hire me

If we work together, I keep your contact details, what we agreed, and the invoices. Swedish bookkeeping law requires me to keep accounting records for seven years.

Why I use your data

To answer you, to deliver what you asked for, and to do the work you hire me for. Site statistics rely on my legitimate interest in knowing whether anyone reads the site. I never sell your data or use it for advertising.

Where it goes

Cloudflare and Apple are based in the United States. Both are certified under the EU-US Data Privacy Framework, which the EU recognizes as protecting personal data moved there.

How long I keep it

Emails are kept as long as they are useful for our conversation or our work together. I delete them when you ask, unless the law requires me to keep them.

Your rights

Under the GDPR, you can ask to see, correct, or delete the data I have about you, or object to how I use it. Email me and I will answer within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Changes

If anything here changes, I update this page and the date at the top.