Privacy Policy

Last updated October 8, 2026.

This policy explains what information drkarenbergstrom.com collects, why, and the choices you have. The short version: we collect only what you send us through the contact form, we use it only to reply, and we do not sell or share it.

What we collect

Contact form. Your name, email address, the topic you choose and your message. These are delivered by email to Dr. Bergstrom's office and used to respond to you and, if you ask, to arrange an engagement.

Abuse prevention. To stop spam, the form keeps a short-lived count of submissions tied to your network address. It is held by our host and expires within an hour.

Server logs. Like every website, our host processes technical data such as IP address, browser type and the pages requested in order to deliver the site and protect it from attacks. We do not use this data to build profiles of visitors.

We do not use advertising, retargeting, social media pixels or third-party analytics.

How we use it and our legal basis

We use contact details to answer your message (steps you asked us to take) and server data to keep the site secure (our legitimate interest in operating a safe site). We do not use your information for automated decision-making.

Who processes it

Cloudflare hosts the site and stores the anti-spam count. Resend delivers contact form email. Our email provider receives the message. Each processes data only to provide its service to us. If you press play on a podcast episode, the audio streams directly from the podcast's host (Spotify for Creators), which receives your network address the way any podcast app's request would. Some of these providers may store data outside your country, including in the United States, under their own safeguards.

How long we keep it

Contact messages are kept as long as needed to respond and to keep a record of the conversation, and are deleted on request. The anti-spam count expires within an hour.

Your rights

You can ask to see, correct or delete the information we hold about you, or object to how it is used. Residents of California, the European Economic Area, the United Kingdom and other places with privacy laws have these rights by law, and we extend them to everyone. We will not treat you differently for making a request. We do not sell or share personal information as those terms are defined under California law, and we honor Global Privacy Control signals, although there is nothing on this site for them to switch off.

To make a request, use the contact form. We may need to confirm your identity before acting on it. You may also complain to your local data protection authority.

Children

The site is intended for adults. We do not knowingly collect information from children under 13. If you believe a child has sent us information, contact us and we will delete it.

Security

The site is served only over HTTPS with strict security headers, the contact form checks where requests come from and limits repeated attempts, and no third-party scripts run on any page.

Changes

If we change this policy, we will update the date at the top. For cookies and browser storage, see the Cookie Policy.