Privacy policy.
Last Modified: October 15, 2026
INTRODUCTION. Mise en Plan LLC (“Company”) respects your privacy. This policy explains what information I collect when you visit miseenplan.com “the website”, subscribe to my newsletter, book a call, or work with me, and what I do with it. I've written it in plain language on purpose. If anything here is unclear, email me at contact@miseenplan.com.
This policy covers the website and the services I offer through it. It does not cover third-party sites and platforms I link to or post on, including Spotify, Apple Podcasts, YouTube, Instagram, Threads, and LinkedIn. If you follow, message, or interact with me there, their privacy policies apply.
What I collect
Information you give me directly
When you subscribe to my newsletter: your name and email address.
When you fill out the contact form or book a call: your name, email address, what you're interested in, and anything you write in the message field. If you book through my scheduling link, you'll also answer a few short questions about your business so I can prepare.
When you become a client: your business name, billing address, phone number, the materials you share with me for the engagement (positioning documents, customer research, website copy, and similar), and notes and recordings from our sessions.
When you pay an invoice: your payment is processed by Stripe or another payment processor through my invoicing system. I see your name, the amount, and the last four digits of your card. I never see or store your full card number.
When you're a guest on The Table: your name, bio, headshot, contact details, and the recording of our conversation.
Information collected automatically
When you visit the site, analytics tools collect technical information such as your IP address, approximate location (city or region), browser and device type, the pages you view, how you got to the site, and how you move through it. This is collected through cookies and similar technologies. See "Cookies and tracking" below for the specifics.
What I don't collect
I don't collect sensitive personal information (health, biometric, precise location, financial account numbers, or similar). I don't knowingly collect information from children. The site and my services are for business owners and are not directed at anyone under 18.
How I use it
To send you the newsletter you signed up for. You can unsubscribe at any time using the link at the bottom of every email.
To respond to your inquiry and schedule a call.
To deliver the work you've hired me for, send invoices and contracts, and keep the records a business is required to keep.
To understand how people find and use the site so I can improve it.
To produce and promote The Table podcast.
To protect the site from spam and abuse (the contact form uses Google reCAPTCHA).
To comply with legal obligations.
I do not sell your personal information. I do not share it with anyone for their own marketing. I do not use your information to make automated decisions that have legal or similarly significant effects on you.
If you're in the UK or EU, the legal bases I rely on are: performance of a contract (client work, invoicing), consent (newsletter), legitimate interests (responding to inquiries, site analytics, protecting the site from abuse, running the business), and legal obligation (tax and accounting records).
Cookies and tracking
The site is built on Squarespace.
Squarespace (including Squarespace Analytics). Runs the site, keeps your session working, basic visitor stats. Essential.
Google Analytics and Google Search Console (via Google Tag Manager). Tells me which pages people visit, how they got here, and how the site shows up in search. Analytics.
Metricool. Measures traffic from my social media posts Analytics.
Flodesk. Powers the newsletter sign-up forms. Essential for the form.
Google reCAPTCHA. Protects the contact form from spam. Essential.
Adobe Fonts. Loads the site's fonts. Essential.
Your choices. You can block or delete cookies in your browser settings and the site will still work, though a few things like form submissions may be affected. You can also opt out of Google Analytics with Google's browser add-on. I don't currently use a cookie consent banner; if you're in the UK or EU and would prefer I not collect analytics about your visit, blocking cookies in your browser does that.
Who I share it with
I use a small number of service providers to run the business. They process your information on my behalf, under their own privacy and security commitments, and only for the purposes above:
Squarespace (website hosting, forms, and site analytics)
Flodesk (email newsletter)
Google (Analytics, Search Console, Tag Manager, reCAPTCHA, and Google Workspace for email, documents, and file storage)
Moxie (client management, scheduling, proposals, contracts, and invoicing)
Stripe and Found (payment processing and business banking)
Zoom (calls and session recordings)
Zapier (moves information between the tools above, for example adding a new inquiry to my client system)
Metricool (social media analytics)
AI tools, described in the next section
Beyond these providers, I share personal information only when the law requires it, to protect my legal rights, or if the business is ever sold or merged (in which case this policy would still apply to your information).
How I use AI tools
I use AI tools, including Claude by Anthropic and Perplexity, to help me draft, summarize, research, analyze, and organize work. That can include materials you share with me as a client, notes from our conversations, and your inquiry details. I use these tools on business accounts configured so that what I put in is not used to train the provider's models. I review all AI-assisted output myself; it supports my thinking, it does not replace it. I do not use AI tools to make decisions about you, and your confidential business information is still covered by the confidentiality terms in our engagement agreement. If you'd rather I not use AI tools on your materials, tell me, and we'll work that way.
Where your information is stored
I'm based in Virginia, USA, and my service providers store information primarily in the United States. If you're in the UK, EU, or elsewhere, your information will be transferred to the US. My providers rely on recognized transfer mechanisms (such as the EU-US Data Privacy Framework and Standard Contractual Clauses) for those transfers.
How long I keep it
I keep personal information only as long as I need it for the purpose I collected it, and then I delete it or anonymize it. In practice:
Newsletter: until you unsubscribe, after which your address is removed from the active list.
Inquiries that don't become client work: up to 12 months, then deleted.
Client records and session materials: for the length of our work together plus 3 years, so I can pick back up if you return, unless you ask me to delete them sooner.
Invoices and financial records: 7 years, because tax law requires it.
Podcast recordings: indefinitely, as published content.
Website analytics: Google Analytics keeps event-level data for14 months; Squarespace keeps aggregate traffic data as part of the platform.
Your rights
Wherever you live, you can ask me to:
Tell you what personal information I hold about you and give you a copy
Correct it
Delete it
Stop using it for marketing, or restrict how I use it
Send it to you in a portable format
If you're in the UK or EU, you also have the right to object to processing based on legitimate interests, to withdraw consent at any time, and to complain to your supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk; in the EU, your national data protection authority).
If you're a resident of California, Virginia, or another US state with a privacy law, you have equivalent rights under those laws. I don't sell personal information or share it for targeted advertising. I will never treat you differently for exercising your rights.
To make a request, email contact@miseenplan.com. I'll confirm it's you (usually by replying to the email address I have on file) and respond within 30 days.
Security
I take reasonable steps to protect your information, including using reputable providers, two-factor authentication on business accounts, and limiting who has access. No system is perfectly secure, and I can't guarantee against every risk, but if a breach ever affects your information, I'll notify you as the law requires.
Changes to this policy
When I update this policy I'll change the date at the top. If a change is significant, I'll say so on the site or by email to subscribers and clients.
Contact
Mise en Plan LLC Attn: Danielle Henneberger 407 E Raymond Ave #2, Alexandria, VA 22301 contact@miseenplan.com