Last updated: 22 August 2026

1. General

This Privacy Policy explains how Katbay collects, uses, stores and shares personal data when you visit our website, contact us, subscribe to our newsletter or make a booking. Your privacy is important to us, and we want you to feel confident about how your personal data is handled. Katbay processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection legislation.

2. Data Controller

Katbay (901023-6009), Övre Kattviksvägen 84, 269 91 Båstad, Sweden, is the data controller responsible for the processing of your personal data.

3. What is Personal Data?

Personal data is information that can be directly or indirectly linked to an identifiable living person. This may include, for example, your name, email address, telephone number, booking information, IP address and other information that you provide to us.

4. Contact Forms and Enquiries

If you contact us through a contact form on our website, we may collect information such as your name, email address, telephone number and the content of your message.

We use this information to:

• respond to your enquiry;
• provide information you have requested;
• communicate with you regarding your enquiry; and
• follow up on your request when necessary.

Legal basis: Legitimate interest.

The processing is necessary for us to respond to and manage your enquiry. We do not use information submitted through a contact form for marketing purposes unless you have separately consented to receive marketing communications.

5. Bicycle Bookings

When you book a bicycle through our website, we collect the personal data necessary to process and manage your booking.

This may include:

• name;
• email address;
• telephone number;
• booking date and time;
• details of the bicycle or service booked;
• payment and transaction information; and
• any additional information you choose to provide in connection with your booking.

We use this information to:

• process and administer your booking;
• provide the bicycle rental service;
• communicate with you about your booking;
• send booking confirmations and other necessary information;
• handle cancellations or changes to your booking;
• process payments; and
• comply with legal and accounting requirements.

Legal basis: Performance of a contract.

The processing is necessary for us to enter into and fulfil the rental agreement with you.

Booking system

Our bicycle bookings are managed using LatePoint, a booking plugin for WordPress. Booking information is stored as part of our WordPress website and database, which is hosted by Oderland.

Payment

Payments for bicycle bookings are processed securely by Stripe. Katbay does not store your full payment card details. Payment information is handled by Stripe in accordance with Stripe’s own privacy and security policies.

6. Newsletter

If you choose to subscribe to the Katbay newsletter, we collect your name and email address. We use this information to send you newsletters, updates, offers and other information about Katbay that may be relevant to subscribers.

Legal basis: Consent.

You can withdraw your consent at any time. Every marketing email includes an unsubscribe link, which you can use to stop receiving newsletters. You can also contact us at hello@katbay.se.

We use MailerLite to manage our newsletter subscriber list and send emails. MailerLite processes personal data on our behalf in accordance with applicable data protection legislation.

7. Cookies

Our website uses cookies and similar technologies that are necessary for the website to function properly. Some cookies are necessary for functions such as website navigation and the bicycle booking system. These cookies may be used without consent where they are strictly necessary for the service requested by the visitor. 

You can manage cookies through your web browser settings. Please note that disabling necessary cookies may affect the functionality of the website, including the booking system.

8. How Long Do We Store Personal Data?

We only retain personal data for as long as it is necessary for the purpose for which it was collected, unless we are required by law to retain it for a longer period.

For example:

• Information relating to enquiries is normally kept only for as long as necessary to handle the enquiry and any reasonable follow-up.
• Booking information is retained for as long as necessary to administer the booking, handle potential disputes and fulfil our legal and accounting obligations.
• Newsletter information is retained until you withdraw your consent or unsubscribe, unless there is another lawful reason for us to retain it.

When personal data is no longer necessary, it will be deleted or anonymised where appropriate.

9. Sharing Personal Data

We may share personal data with trusted service providers when this is necessary to operate Katbay and provide our services.

These providers may include:

• Oderland, which hosts our website and related data;
• LatePoint, which provides our booking functionality;
• Stripe, which processes payments; and
• MailerLite, which manages our newsletter and email marketing.

We may also use accounting or other business service providers where necessary. These companies may process personal data as necessary to provide their services to us and in accordance with applicable data protection legislation. We may also disclose personal data where required to do so by law or by a competent authority, including authorities such as the Swedish Tax Agency or the police.

10. Transfers Outside the EU/EEA

Some of the service providers we use may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, Katbay will ensure that the transfer is carried out in accordance with applicable data protection legislation and that appropriate safeguards are in place where required.

11. Your Rights

Under the GDPR, you have several rights regarding your personal data. Depending on the circumstances, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data where there is no legal reason for us to continue processing it.
• Request restriction of the processing of your personal data in certain circumstances.
• Object to certain processing of your personal data.
• Withdraw consent where processing is based on your consent.
• Request data portability where applicable, meaning that certain personal data can be provided to you in a structured, commonly used and machine-readable format.

To exercise any of these rights, please contact us at:

hello@katbay.se

We may need to verify your identity before fulfilling your request.

12. Complaints

If you believe that Katbay has processed your personal data in a way that does not comply with applicable data protection legislation, you are welcome to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

13. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmitting or storing information online can be guaranteed to be completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when we introduce new services, change our systems or when applicable legislation changes. The latest version will always be published on this website, together with the date on which it was last updated.