Last updated: 25 September 2026
This Privacy Policy explains how Thundermother AB processes personal data when you visit `www.thundermother.com`, contact us, subscribe to our mailing list or use content supplied by third-party services.
1. Who is responsible for your personal data?
Thundermother AB is the data controller for the processing described in this policy.
Thundermother AB
Company registration number: 559423-7561
VAT number: SE559423756101
c/o Nässil
Poseidons Gränd 13, Apartment 1202
136 46 Handen
Sweden
Email: info@thundermother.com
The merchandise shop at `shop.thundermother.com` is operated by Merch-Ants Stockholm AB. Merch-Ants is responsible for personal data processed in connection with merchandise purchases. Its own privacy notice and purchase terms apply when you use the shop.
2. Personal data we process
Website operation and security
When you visit the website, our hosting provider may process technical information such as your IP address, browser and device information, requested page, referring page, date and time, and security or error logs.
We process this information to deliver the website, maintain security, prevent misuse and diagnose technical problems. The legal basis is our legitimate interest in operating a secure and reliable website. Server and security logs are normally retained for no longer than 30 days, unless information is required for investigating an incident or establishing, exercising or defending legal claims.
Mailing list
If you subscribe to the Thundermother mailing list, MailerLite processes the information you submit, normally your email address and any optional information requested in the subscription form. MailerLite may also record the date and method of consent, subscription status, delivery information and engagement with newsletters, such as opens and link clicks.
The legal basis is your consent. You may withdraw your consent at any time by using the unsubscribe link in a newsletter. Your subscription data is retained while you remain subscribed. After you unsubscribe, a limited record may be retained where necessary to document and respect your opt-out request.
Messages and enquiries
If you contact Thundermother AB or one of the contact persons listed on the website, we process the information you provide, such as your name, email address, organisation, telephone number and the contents of your message.
We use this information to respond to your enquiry, administer a potential agreement or booking, and keep necessary business correspondence. The legal basis is taking steps at your request before entering into a contract, performing a contract, or our legitimate interest in handling enquiries and business communications. Enquiries are normally deleted or anonymised no later than 24 months after the matter has been closed, unless they must be retained for a longer period due to a legal obligation or legal claim.
Website administrators and editors
For authorised administrators and editors, WordPress processes account details, login information and security logs so that the website can be managed securely. The legal basis is performance of an agreement and our legitimate interest in controlling access to the website. Account data is retained for as long as access is required and is then deleted or anonymised, subject to necessary security records.
3. Third-party content and services
The website uses services supplied by other companies. When third-party content is loaded, the provider may receive technical information including your IP address, browser and device information, referring page and the time of the request. The provider may also use cookies or similar technologies under its own terms.
MailerLite
MailerLite provides the mailing-list signup form and newsletter service. The MailerLite script and form are loaded when you choose to open the signup form. MailerLite acts as a processor for Thundermother AB when it manages our subscriber list. Read MailerLite’s Privacy Policy
Bandsintown
Bandsintown supplies concert and tour information. When its widget is loaded, data is transferred to Bandsintown LLC, which may process device, network and location-related information under its own policy. Read Bandsintown’s Privacy Policy.
YouTube
Video players are loaded only after you choose to play a video. The website uses YouTube’s privacy-enhanced domain, `youtube-nocookie.com`. Google may nevertheless process technical information and set or read cookies or similar technologies when the player is used. Read Google’s Privacy Policy and information about YouTube’s privacy-enhanced mode.
External links and social media
The website links to services including Facebook, Instagram, X, YouTube, Spotify, Bandsintown and the external merchandise shop. A link does not transmit information to the destination merely because it is displayed. When you follow a link, the destination service processes information under its own privacy policy.
4. Cookies and similar technologies
The website may use strictly necessary cookies for security and administration. These do not require consent when they are essential for a service you request.
Third-party services such as Bandsintown, YouTube and MailerLite may use cookies or similar technologies when their content is loaded. Where consent is legally required, the service must not be loaded until you have made an active choice. You must be able to refuse or withdraw consent as easily as you give it.
Your browser also allows you to delete or block cookies. Blocking third-party content may prevent tour listings, video players or signup forms from working.
5. Who receives personal data?
Depending on how you use the website, personal data may be processed by:
– One.com, which provides website hosting and related infrastructure;
– email and IT service providers used to receive, secure and answer messages;
– MailerLite, which provides mailing-list forms and email delivery;
– Bandsintown LLC, when tour information is loaded;
– Google/YouTube, when a video player is loaded;
– professional advisers or public authorities when required by law or necessary to establish, exercise or defend legal claims.
We do not sell your personal data.
6. Transfers outside the EU/EEA
Some service providers or their subprocessors may process personal data outside the EU/EEA, including in the United States. Where this occurs, the transfer must be supported by an applicable adequacy decision, the EU Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, or another lawful safeguard under the GDPR.
7. Your rights
Subject to the conditions in the GDPR, you may request:
– information about how we process your personal data;
– access to your personal data;
– correction of inaccurate or incomplete data;
– deletion of your personal data;
– restriction of processing;
– data portability where processing is based on consent or contract and carried out automatically;
– to object to processing based on legitimate interests;
– to withdraw consent at any time, without affecting processing carried out before withdrawal.
Thundermother AB does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, contact info@thundermother.com. We may need enough information to verify that the request concerns the correct person, but we will not request more information than necessary.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). See www.imy.se
8. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet service can guarantee absolute security.
9. Changes to this policy
We may update this policy when the website, our services or legal requirements change. The current version and its last-updated date will always be published on this page.
10. Contact
Questions about this policy or Thundermother AB’s processing of personal data may be sent to info@thundermother.com or to the postal address stated in section 1.