Legal

Privacy policy

Last updated 2026-10-11.

Who is responsible

Sonic Seed Investments AB (org. no. 559429-7227), Tärnkobbsvägen 12, 139 53 Värmdö, Sweden, is the controller for the personal data handled through this website. Contact: support@elliotofficialmusic.com.

What we collect and why

When you buy

Name, delivery address, email address, what you bought and what you paid. We need this to deliver your order and handle returns and complaints (performance of the purchase agreement), and we must keep order records for seven years under the Swedish Bookkeeping Act (legal obligation). Card and payment details are handled by Stripe and never reach us.

The VIP list

Your email address and, if you give it, your first name — plus when and where you signed up and confirmed. We use it only to email you about new music, shows and merch. The legal basis is your consent, which you can withdraw at any time with the unsubscribe link in every email or by emailing us. We keep your details until you unsubscribe or ask us to delete them; after you unsubscribe we keep a record that you did, so we don't email you again.

When you email us

What you write and your contact details, to answer you (legitimate interest).

Who handles data for us

We use these services to run the site. They only process data on our behalf or as described:

Supabase — database (orders, VIP list), stored in Stockholm, EU.
Vercel — hosting of the website. Technical logs (such as IP address) are kept for a short time.
Stripe — payments. Stripe is also its own controller for payment data, under its privacy policy.
Resend — sending order and VIP emails.
Google Workspace — our email.
Anthropic (Claude) — an AI assistant our team uses to manage the shop; order and subscriber details can be processed when we look them up.

Some of these companies are based in the USA. Where data is transferred outside the EU/EEA, it is protected by the EU–US Data Privacy Framework or the EU Commission's standard contractual clauses. We never sell your data.

Cookies and storage

We use no analytics or advertising cookies. Your cart is saved in your browser's local storage so it survives a reload; it contains only which sizes and how many. Stripe sets its own necessary cookies on the checkout page. The Spotify player on the music page and the YouTube videos on the video page load only when you press play, and Spotify or YouTube (Google) may then set cookies. Videos use YouTube's privacy-enhanced mode.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to get it in a portable format. Email support@elliotofficialmusic.com. Some data, such as order records, we must keep by law. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.