PRIVACY POLICY

Last updated: May 2026

1. General

Every Night Studios ("ENS", "we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under applicable Swedish and EU data protection law, including the General Data Protection Regulation (GDPR). Every Night Studios is based at Frihamnsgatan 12, 115 56 Stockholm, Sweden and acts as the data controller for personal data collected through our managed shops.

2. Data We Collect

When you place an order or interact with an ENS-managed shop, we may collect the following:

  • Contact information: name, email address, phone number
  • Delivery information: shipping address
  • Payment information: transaction data processed securely through our payment provider. We do not store full card details.
  • Order information: products ordered, order history, and correspondence related to your order
  • Technical data: IP address, browser type, device information, and cookies collected through the shop platform

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your order
  • Communicate with you regarding your order, including shipping and delivery updates
  • Handle returns, refunds, and customer service enquiries
  • Comply with legal and regulatory obligations
  • Improve our services and shop performance through aggregated, anonymised analytics

We do not use your personal data for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

  • Contract: processing is necessary to fulfil your order
  • Legal obligation: processing is required to comply with applicable laws
  • Legitimate interests: processing is necessary for fraud prevention, security, and service improvement
  • Consent: where you have explicitly opted in, for example to receive marketing communications

5. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties solely for the purpose of fulfilling your order, including:

  • Shipping and logistics providers
  • Payment processors
  • Shop platform providers
  • The Shop Owner on whose behalf your order is fulfilled

All third parties are required to handle your data in compliance with GDPR and are only permitted to use it for the specific purpose for which it was shared.

6. Shop Owners

ENS-managed shops are operated on behalf of third-party clients ("Shop Owners"). The Shop Owner may have access to order data relevant to their shop, including customer names, order details, and shipping information. Shop Owners are independently responsible for their own GDPR compliance in relation to their customers.

7. Data Retention

We retain your personal data for as long as necessary to fulfil your order and comply with our legal obligations. Order data is typically retained for a minimum of seven years in accordance with Swedish accounting law. You may request deletion of your data where retention is no longer legally required.

8. Cookies

Our managed shops use cookies to ensure functionality, remember preferences, and collect anonymised usage data. You will be asked for your consent to non-essential cookies when you first visit a shop. You can manage or withdraw cookie consent at any time through your browser settings.

9. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data where it is no longer necessary for us to retain it
  • Restrict the processing of your data in certain circumstances
  • Portability of your data in a structured, machine-readable format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@everynightstudios.com. We will respond within 30 days.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All payment data is handled through secure, encrypted channels.

11. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure that adequate safeguards are in place in accordance with GDPR requirements.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.

13. Contact & Complaints

For any questions or concerns regarding this privacy policy or how we handle your data, contact us at:

Every Night Studios Frihamnsgatan 12, 115 56 Stockholm, Sweden hello@everynightstudios.com

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se if you believe we have not handled your data in accordance with applicable law.