Privacy policy
Last updated: 15 October 2026
This notice explains how Ghost Bites handles personal data when you visit our website, contact us or order our food through our ordering platform.
1. Who is responsible?
Ghost Bites is operated by Helsingborg Golden Star AB, the controller for the processing described here.
Address: Verkstadsgatan 6A, Helsingborg, Sweden.
Email: hello@ghostbites.se.
2. Visiting our website
Technical information, such as your IP address, the time, the requested page and browser information, is processed to deliver and secure the website. Our hosting provider may record this information in operational and security logs. The purposes are to serve the website, troubleshoot problems and prevent misuse. The legal basis is our legitimate interest in operating a reliable and secure website.
We also use necessary storage to remember your cookie choices. You do not need to accept statistics to use the website or follow our ordering links.
3. Optional visitor statistics
With your consent, we use Google Analytics 4 to measure website visits and understand how the website is used. This includes page views and interactions with website links, helping us evaluate and improve our content and navigation.
Information may include a cookie identifier, page views, clicks, timestamps, the referring website, device and browser information, and approximate location. A cookie identifier can link several visits to the same browser, so analytics information may constitute personal data. Google states that GA4 does not log or store IP addresses.
Med ditt samtycke till Marknadsföring använder vi också Meta-pixeln för att mäta sidvisningar (PageView) och klick på Foodora-länkar (FoodoraClick) från vår webbplats. Ett Foodora-klick visar intresse för beställning, inte att ett köp har genomförts. Händelserna och tekniska uppgifter, till exempel besökt sida, klickad beställningslänk, tidpunkt, webbläsarinformation, IP-adress och cookieidentifierare, skickas till Meta Platforms Ireland Limited för annonsmätning. Läs Metas integritetspolicy. Du kan när som helst stänga av annonsmätningen via Cookie settings.
The legal basis is your consent. You can withdraw it at any time through Cookie settings. Withdrawal does not affect the lawfulness of processing before withdrawal.
4. Contacting us
If you email us, we process your email address, any name you provide and the information in your message to reply and handle your enquiry. For order-related enquiries, the legal basis is performing a contract or taking steps at your request before entering a contract. For other enquiries, it is our legitimate interest in responding and providing customer service.
Contacting us is voluntary. We need a way to contact you and enough information about your enquiry to respond. Only provide information needed for the matter, and avoid sending identity numbers, payment-card details or sensitive information unnecessarily.
5. Orders and delivery
This website has no checkout of its own. Following an ordering link takes you away from ghostbites.se to an external ordering platform. The platform is responsible for its own processing under the privacy information available on its service.
To prepare and deliver your order, we may receive information from the ordering platform, such as order contents, name, telephone number, delivery address and delivery instructions. We use the information needed for the order, delivery and related customer service. The legal basis is performing the contract. Information needed for accounting is processed to meet a legal obligation. Without the necessary contact or delivery details, we cannot complete the delivery.
6. Who may receive the information?
Authorised staff and suppliers needed for hosting, technical operations, email, analytics, ordering and delivery may handle information. Google receives analytics information when you have consented. Information may also be disclosed to authorities where required by law.
Google may process data outside the EU/EEA, including in the United States. Google describes safeguards including the EU–US Data Privacy Framework and standard contractual clauses where needed. Read Google’s information on data transfers. You can contact us for further information about recipients and transfer safeguards concerning your data.
7. How long is information kept?
Retention depends on the purpose. Retention of contact and customer-service information is determined by what is needed to resolve and follow up the matter, handle a complaint or establish or defend a legal claim. Accounting records are retained for the period required by accounting rules. For operational and security logs, retention is assessed against the need to troubleshoot problems, prevent misuse and investigate security incidents.
Consent cookies last for up to 365 days. Google Analytics cookies normally last for up to two years and may be renewed on a later visit. You or your browser can remove cookies sooner. Retention on Google’s servers is controlled separately by the Analytics settings; the cookie lifetime does not describe how long analytics data is kept. Read about Google’s retention settings or contact us for details of the retention applicable to your information.
8. Your rights
You can contact us to request access to your personal data, correction or deletion. You may also have rights to restriction and data portability, and to object to processing based on legitimate interests. These rights are subject to the conditions in the GDPR; for example, information required by law cannot always be deleted immediately.
Email hello@ghostbites.se. We may need to verify your identity proportionately to protect your information. You can complain to the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority.
We normally respond to a rights request within one month. For complex requests, this may be extended by up to two additional months; we will inform you within the first month and explain why.
9. Cookies and updates
Our cookie policy explains cookies, their purposes and how to change your choices. We update this notice when our services or processing change. The date at the top shows when this text was last updated.