PRIVACY POLICY — EVERY NIGHT STUDIOS

LAST UPDATED: MAY 2026

1. GENERAL

EVERY NIGHT STUDIOS ("ENS", "WE", "US", "OUR") IS COMMITTED TO PROTECTING YOUR PERSONAL DATA. THIS POLICY EXPLAINS WHAT DATA WE COLLECT, HOW WE USE IT, AND YOUR RIGHTS UNDER APPLICABLE SWEDISH AND EU DATA PROTECTION LAW, INCLUDING THE GENERAL DATA PROTECTION REGULATION (GDPR). EVERY NIGHT STUDIOS IS BASED AT FRIHAMNSGATAN 12, 115 56 STOCKHOLM, SWEDEN AND ACTS AS THE DATA CONTROLLER FOR ALL PERSONAL DATA COLLECTED THROUGH OUR SERVICES AND WEBSHOP.

2. DATA WE COLLECT

WHEN YOU ENGAGE WITH EVERY NIGHT STUDIOS AS A B2B CLIENT OR PLACE AN ORDER THROUGH THE ENS WEBSHOP, WE MAY COLLECT THE FOLLOWING:

• CONTACT INFORMATION: NAME, EMAIL ADDRESS, PHONE NUMBER, AND COMPANY NAME WHERE APPLICABLE
• DELIVERY INFORMATION: SHIPPING AND BILLING ADDRESS
• PAYMENT INFORMATION: TRANSACTION DATA PROCESSED SECURELY THROUGH OUR PAYMENT PROVIDER. WE DO NOT STORE FULL CARD DETAILS.
• ORDER INFORMATION: PRODUCTS ORDERED, ORDER HISTORY, ARTWORK FILES, AND CORRESPONDENCE RELATED TO YOUR ORDER
• BUSINESS INFORMATION: COMPANY REGISTRATION DETAILS, VAT NUMBERS, AND CONTRACT INFORMATION FOR B2B CLIENTS
• TECHNICAL DATA: IP ADDRESS, BROWSER TYPE, DEVICE INFORMATION, AND COOKIES COLLECTED THROUGH OUR WEBSITE AND WEBSHOP PLATFORM

3. HOW WE USE YOUR DATA

WE USE YOUR PERSONAL DATA TO:

• PROCESS AND FULFIL YOUR ORDER OR SERVICE ENGAGEMENT
• COMMUNICATE WITH YOU REGARDING YOUR ORDER, PROJECT, OR ENQUIRY
• ISSUE AND MANAGE INVOICES AND PAYMENTS
• HANDLE RETURNS, REFUNDS, AND CUSTOMER SERVICE ENQUIRIES
• COMPLY WITH LEGAL AND REGULATORY OBLIGATIONS INCLUDING SWEDISH ACCOUNTING LAW
• IMPROVE OUR SERVICES THROUGH AGGREGATED, ANONYMISED ANALYTICS
• SEND RELEVANT BUSINESS COMMUNICATIONS WHERE YOU HAVE PROVIDED CONSENT OR WHERE A LEGITIMATE INTEREST EXISTS

WE DO NOT USE YOUR PERSONAL DATA FOR UNSOLICITED MARKETING WITHOUT YOUR EXPLICIT CONSENT.

4. LEGAL BASIS FOR PROCESSING

WE PROCESS YOUR PERSONAL DATA ON THE FOLLOWING LEGAL BASES UNDER GDPR:

• CONTRACT: PROCESSING IS NECESSARY TO FULFIL YOUR ORDER OR SERVICE AGREEMENT
• LEGAL OBLIGATION: PROCESSING IS REQUIRED TO COMPLY WITH APPLICABLE LAWS INCLUDING TAX AND ACCOUNTING REGULATIONS
• LEGITIMATE INTERESTS: PROCESSING IS NECESSARY FOR FRAUD PREVENTION, SECURITY, BUSINESS ADMINISTRATION, AND SERVICE IMPROVEMENT
• CONSENT: WHERE YOU HAVE EXPLICITLY OPTED IN, FOR EXAMPLE TO RECEIVE MARKETING COMMUNICATIONS

5. DATA SHARING

WE DO NOT SELL YOUR PERSONAL DATA. WE MAY SHARE YOUR DATA WITH TRUSTED THIRD PARTIES SOLELY FOR THE PURPOSE OF FULFILLING YOUR ORDER OR SERVICE ENGAGEMENT, INCLUDING:

• SHIPPING AND LOGISTICS PROVIDERS
• PAYMENT PROCESSORS
• WEBSHOP AND IT PLATFORM PROVIDERS
• ACCOUNTANTS AND LEGAL ADVISORS WHERE REQUIRED
• AUTHORITIES WHERE REQUIRED BY LAW

ALL THIRD PARTIES ARE REQUIRED TO HANDLE YOUR DATA IN COMPLIANCE WITH GDPR AND ARE ONLY PERMITTED TO USE IT FOR THE SPECIFIC PURPOSE FOR WHICH IT WAS SHARED.

6. ASSOCIATED BRANDS

THE ENS WEBSHOP FEATURES PRODUCTS FROM ASSOCIATED BRANDS. ORDER DATA RELEVANT TO THESE BRANDS, INCLUDING PRODUCT AND FULFILMENT INFORMATION, MAY BE SHARED WITH THE RELEVANT BRAND FOR REPORTING PURPOSES. PERSONAL CUSTOMER DATA IS NOT SHARED WITH ASSOCIATED BRANDS BEYOND WHAT IS STRICTLY NECESSARY FOR FULFILMENT.

7. DATA RETENTION

WE RETAIN YOUR PERSONAL DATA FOR AS LONG AS NECESSARY TO FULFIL YOUR ORDER OR SERVICE ENGAGEMENT AND TO COMPLY WITH OUR LEGAL OBLIGATIONS. SPECIFICALLY:

• ORDER AND TRANSACTION DATA IS RETAINED FOR A MINIMUM OF SEVEN YEARS IN ACCORDANCE WITH SWEDISH ACCOUNTING LAW (BOKFÖRINGSLAGEN)
• CLIENT AND CONTACT DATA IS RETAINED FOR THE DURATION OF THE BUSINESS RELATIONSHIP AND UP TO THREE YEARS THEREAFTER
• MARKETING CONSENT DATA IS RETAINED UNTIL CONSENT IS WITHDRAWN

YOU MAY REQUEST DELETION OF YOUR DATA WHERE RETENTION IS NO LONGER LEGALLY REQUIRED.

8. COOKIES

OUR WEBSITE AND WEBSHOP USE COOKIES TO ENSURE FUNCTIONALITY, REMEMBER PREFERENCES, AND COLLECT ANONYMISED USAGE DATA. YOU WILL BE ASKED FOR YOUR CONSENT TO NON-ESSENTIAL COOKIES WHEN YOU FIRST VISIT. YOU CAN MANAGE OR WITHDRAW COOKIE CONSENT AT ANY TIME THROUGH YOUR BROWSER SETTINGS OR OUR COOKIE PREFERENCE CENTRE.

9. YOUR RIGHTS

UNDER GDPR, YOU HAVE THE RIGHT TO:

• ACCESS THE PERSONAL DATA WE HOLD ABOUT YOU
• RECTIFY INACCURATE OR INCOMPLETE DATA
• ERASE YOUR DATA WHERE IT IS NO LONGER NECESSARY FOR US TO RETAIN IT
• RESTRICT THE PROCESSING OF YOUR DATA IN CERTAIN CIRCUMSTANCES
• PORTABILITY OF YOUR DATA IN A STRUCTURED, MACHINE-READABLE FORMAT
• OBJECT TO PROCESSING BASED ON LEGITIMATE INTERESTS
• WITHDRAW CONSENT AT ANY TIME WHERE PROCESSING IS BASED ON CONSENT

TO EXERCISE ANY OF THESE RIGHTS, CONTACT US AT HELLO@EVERYNIGHTSTUDIOS.COM. WE WILL RESPOND WITHIN 30 DAYS.

10. DATA SECURITY

WE TAKE APPROPRIATE TECHNICAL AND ORGANISATIONAL MEASURES TO PROTECT YOUR PERSONAL DATA AGAINST UNAUTHORISED ACCESS, LOSS, OR MISUSE. ALL PAYMENT DATA IS HANDLED THROUGH SECURE, ENCRYPTED CHANNELS. ACCESS TO PERSONAL DATA WITHIN ENS IS LIMITED TO THOSE WHO NEED IT TO PERFORM THEIR ROLE.

11. INTERNATIONAL TRANSFERS

WHERE PERSONAL DATA IS TRANSFERRED OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA), WE ENSURE THAT ADEQUATE SAFEGUARDS ARE IN PLACE IN ACCORDANCE WITH GDPR REQUIREMENTS, INCLUDING STANDARD CONTRACTUAL CLAUSES WHERE APPLICABLE.

12. CHANGES TO THIS POLICY

WE MAY UPDATE THIS PRIVACY POLICY FROM TIME TO TIME. ANY CHANGES WILL BE PUBLISHED ON THIS PAGE WITH AN UPDATED DATE. WE ENCOURAGE YOU TO REVIEW THIS POLICY PERIODICALLY. FOR MATERIAL CHANGES, WE WILL NOTIFY EXISTING CLIENTS AND CUSTOMERS DIRECTLY WHERE POSSIBLE.

13. CONTACT & COMPLAINTS

FOR ANY QUESTIONS OR CONCERNS REGARDING THIS PRIVACY POLICY OR HOW WE HANDLE YOUR DATA, CONTACT US AT:

EVERY NIGHT STUDIOS FRIHAMNSGATAN 12, 115 56 STOCKHOLM, SWEDEN HELLO@EVERYNIGHTSTUDIOS.COM EVERYNIGHTSTUDIOS.COM

YOU ALSO HAVE THE RIGHT TO LODGE A COMPLAINT WITH THE SWEDISH AUTHORITY FOR PRIVACY PROTECTION (INTEGRITETSSKYDDSMYNDIGHETEN, IMY) AT IMY.SE IF YOU BELIEVE WE HAVE NOT HANDLED YOUR DATA IN ACCORDANCE WITH APPLICABLE LAW.