Privacy policy

Here we explain how Sherlocked handles your personal data when you visit sherlocked.se, book with us or contact us. We comply with the General Data Protection Regulation (GDPR).

1. Who is responsible for your data?

The data controller is Sherlocked Live Theatre AB (company registration number: 556965-4733), Norra Vallgatan 16, 211 25 Malmö. Email: info@sherlocked.se. Phone: 040-651 21 00. Website: https://sherlocked.se.

2. What data we collect and why

Booking escape room games and buying gift cards (gift codes). We receive your name, email, phone number, number of players and game time. This is done via the BokaMera/Bookmore booking system. Payment details are handled by the payment provider (Stripe/Qvickly), not by us. Legal basis: contract. Retention period: see section 5.
Table bookings at the restaurant/bar. The data needed to book a table is handled via EasyTable. Legal basis: contract. Retention period: 30 days.
Corporate bookings. Contact and invoicing details that you send to info@sherlocked.se. Legal basis: contract. Retention period: see section 5.
Accounting. Details of purchases and invoices. Legal basis: legal obligation (the Swedish Bookkeeping Act). Retention period: 7 years.
Contact form. Name, email, phone number and your message, so that we can reply to you. Legal basis: legitimate interest (customer service). Retention period: 30 days.
Chat. What you write in the chat on the website (Tidio). Legal basis: legitimate interest (customer service). Retention period: 30 days.
Newsletter. Your email address, via Mailchimp. Legal basis: consent. Retention period: until you unsubscribe.
Cookies and analytics. Data on how you use the website and whether our ads are working. Legal basis: consent. Retention period: see our cookie policy.
Security. Technical data needed to protect the website. Legal basis: legitimate interest (security). Retention period: 30 days.

3. Who we share data with

We never sell your data. We only share it with providers who help us run the business. They may only use the data on our behalf or in accordance with their own terms:

BokaMera/Bookmore – booking and gift cards
EasyTable – table booking
Stripe and Qvickly – payment
Mailchimp – newsletter
Tidio – chat
Google – Google Analytics 4, Google Tag Manager and Google Ads conversion tracking
Meta (Facebook) – the Meta Pixel
LinkedIn – the LinkedIn Insight Tag
Web hosting and IT providers – operation of the website and email (Simply.com)

4. Transfers outside the EU/EEA

Some of our providers, for example Google, Meta, LinkedIn, Mailchimp and Stripe, may process data in the USA. We ensure that such transfers are supported by law, for example through the EU's Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

5. How long we keep the data

Booking data: 30 days
Accounting records: 7 years under the Swedish Bookkeeping Act
Newsletter: until you unsubscribe
Contact form: 30 days

When the data is no longer needed, we delete or anonymise it.

6. Your rights

You have the right to:

find out what data we hold about you (access)
have inaccurate data corrected (rectification)
have data deleted (erasure), unless we are required by law to keep it
request that we restrict processing (restriction)
object to processing based on legitimate interest (objection)
receive data you have given us in a machine-readable format (data portability)
withdraw your consent at any time, for example to newsletters or cookies

7. Complaints

If you believe we are handling your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se. Please get in touch with us first, and we will try to resolve it.

8. Cookies

We only use cookies for analytics and marketing if you have accepted them in our cookie banner. You can change your choice at any time. Read more in our cookie policy.