Privacy Policy

1. About this policy

Hjertelig AS ("we", "us") operates Lane of Memories at laneofmemories.com. This policy explains what personal data we collect, why we collect it, and your rights as a data subject. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. What we collect

Purchase and contact information

When you purchase a licence we collect: name, email address, and payment information. Payments are processed by Stripe, Inc. — we never see card numbers or other sensitive payment data. Stripe acts as a data processor under a separate data processing agreement.

Content uploaded to the service

Images and other content uploaded through Lane of Memories (e.g. guest photos, quiz profile images) are stored temporarily in connection with the event and deleted according to the agreed retention period.

Analytics and usage data

We use our own analytics tool to understand how visitors use the website. It collects visit timestamps, page views, referral source, and technical information about the device (screen size, browser, operating system). None of this data is linked to a name or email address. All analysis takes place on servers we control and is not shared with third parties.

Cookies

We use cookies for: (1) session management to ensure the service functions correctly during an event, and (2) storing your language preference. Our analytics tool may set an identifier to distinguish unique visitors. You can withdraw consent for non-essential cookies at any time via the cookie settings at the bottom of the page.

Your language preference is stored in a cookie named lom_locale, which lasts for up to one year. It is set either when you are forwarded to the regional version of the site that matches where you are visiting from, or when you choose a language yourself at the bottom of the page. It holds only one of the values no, sv, uk or us, and it neither tracks you nor is linked to any other information. Because it is strictly necessary for the site to remember your choice, it is set without consent and falls outside the cookie banner. You can change it at any time by selecting a different language, or delete it in your browser.

3. Legal basis for processing

• Contract performance (UK GDPR Art. 6(1)(b)): contact information and uploaded content are processed to deliver the service you purchased.
• Legitimate interests (UK GDPR Art. 6(1)(f)): usage analytics and security.
• Consent (UK GDPR Art. 6(1)(a)): for non-essential cookies, we request your consent via the cookie banner.

4. Retention

Purchase and contact data is retained for five years after the last transaction for accounting purposes. Content uploaded for an event is deleted no later than 90 days after the event date, or sooner on request. Analytics data is anonymised and retained for no longer than 24 months.

5. Third parties we share data with

• Stripe, Inc. — payment processor (USA). Stripe is certified under the EU–US Data Privacy Framework. See Stripe's privacy policy.
• Vercel, Inc. — web hosting (USA). Vercel processes data under Standard Contractual Clauses.

We do not sell personal data to third parties.

6. Your rights

Under UK GDPR you have the right to: access personal data we hold about you, rectify inaccuracies, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to processing based on legitimate interests. Send requests to hello@laneofmemories.com. We respond within 30 days.

If you believe we are processing your personal data unlawfully, you may lodge a complaint with the Information Commissioner's Office (ICO).

7. Changes

We may update this policy. Material changes will be communicated by email to registered users.

8. Contact

Privacy enquiries: hello@laneofmemories.com or Hjertelig AS, Fiolvegen 2, 2166 Oppaker, Akershus, Norway.