Quezzle

How we handle your data

What we collect when you book, what we do with it and what you can demand from us.

Last updated 2026-08-10

Quezzle AB runs the escape rooms at Döbelnsgatan 12 in Stockholm and the sites quezzle.se, vasteras.quezzle.se and eskilstuna.quezzle.se. We are responsible for the personal data described here.

What we collect, and why

When you book a room

Name, email, phone, number of players, date and time, the room you picked, and anything you write in the message field. A promo code if you use one.

We need it to hold the booking, let you in at the right time, and reach you if something changes. Legal basis: performing our agreement with you.

When you buy a gift card

Your details as the buyer, the recipient's name and email, and the payment. The card itself arrives as a PDF by email.

Card numbers never touch our servers. Stripe handles the payment and we only see that it went through. Legal basis: our agreement with you, plus bookkeeping law for the receipt.

When you write to us

Name, email, phone, company if you fill it in, and your message. We keep the thread so we can follow up. Legal basis: legitimate interest in answering people who contact us.

After your visit

We may send one request for a review, by email or SMS, to the address you booked with. Every message has a way out. Legal basis: legitimate interest in knowing how the visit went.

While you browse

With your consent, Google Analytics and Google Ads. Details and cookie names are in the cookie policy. Say no and this stops.

Who else sees it

Only suppliers who need it to do their job, and only for that job:

• Stripe — payments for gift cards.
• SendGrid — sends our confirmations and receipts.
• Twilio — sends SMS.
• Cloudflare — keeps bots out of our forms.
• Google — statistics and ad measurement, only with your consent.
• Oderland — our Swedish web host, where the site and database live.

We do not sell your data. We do not hand it to anyone for their own marketing.

How long we keep it

• Bookings and receipts: seven years, because bookkeeping law says so.
• Contact messages: two years, then we delete the thread.
• Reviews you leave: until you ask us to remove them.
• Analytics: as set in Google Analytics, currently 14 months.

What you can demand

You have the right to see what we hold about you, correct it, have it deleted, object to how we use it, and get a copy in a portable format. Ask at privacy@quezzle.se and we answer within a month.

Where we rely on consent, you can withdraw it whenever you like. That does not undo what we did before you withdrew it.

If you think we are handling this badly, tell us first. You can also complain to the Swedish Authority for Privacy Protection, IMY, at imy.se.

Security

The site runs over HTTPS. Access to the booking database is limited to the people who run the business. We use no more suppliers than we need.

Changes

When we start using a new tool, this page changes with it. The date at the top tells you when that last happened.