Privacy policy

1. Who is responsible

Black Molly Entertainment AB is the data controller for the personal data described here. Contact details are at the bottom of this page.

2. What we collect

Bookings: name, email, phone number, team name, dates, rooms and payment status. Invoice bookings also include company name, company registration number, VAT number, billing address, invoice email and your reference.

Gear enquiries: company name, contact person, email, phone number and your message.

Reviews: name, team name, team logo, rating and comment, if you choose to leave a review.

Payments: card and Swish payments are handled by Stripe. We never see or store your full card details; we receive a payment reference and the payment status.

3. Why we use it and our legal basis

To handle bookings, rentals, invoices and refunds (performance of a contract).

To keep accounting records (legal obligation under the Swedish Bookkeeping Act).

To answer enquiries and send messages about your booking (legitimate interest).

To show your review on the website, only after you have ticked the consent box (consent, which you can withdraw at any time).

4. How long we keep it

Booking and enquiry data is kept for as long as needed to deliver the service and then up to 24 months. Accounting records, such as invoices and receipts, are kept for 7 years as required by law. Reviews are kept until you ask us to remove them.

5. Who we share it with

We share data only with suppliers that help us run the service: Stripe (payments), our hosting and database provider, our email provider and our inventory system. They process data on our behalf under data processing agreements. Some suppliers may process data outside the EU/EEA; when that happens, it is protected by the EU standard contractual clauses or an equivalent safeguard. We never sell personal data.

6. Visitor statistics

Our website uses Lovable's built-in visitor analytics. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. This is recorded for every visitor.

Lovable's analytics uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy at lovable.dev/privacy explains how it handles it.

The site does not use advertising pixels. Staff sign-in stores a session in the browser for staff only. Stripe may set its own cookies on its payment page to prevent fraud.

7. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to processing, and to data portability. Email us to use any of these rights. You can also complain to the Swedish Authority for Privacy Protection (IMY, imy.se).

Contact

Black Molly Entertainment AB, Mälarvägen 1, 141 71 Segeltorp, Sweden. Email .