Privacy

Who is responsible

Art with Eni Pap (sole proprietorship, org. no. 935 273 579), which runs Malemoro, is responsible for the information you give us on this website. Send any privacy questions to us via the contact form.

What we store

• Bookings: your name, email and phone number (if given), the children’s first names and ages, the class you chose, the number of children, any message (for example about allergies) and any gift card code.
• Gift cards: your name and email address, the recipient’s name, any greeting, and the recipient’s email address if the gift card is to be emailed.
• Contact form: your name, email, phone number (if given) and your message.

We never ask for national ID numbers or the children’s surnames. If you choose to tell us about allergies or needs in the message field, we only use it to make the right arrangements at the class.

Why

We only use the information to handle your booking, payment and gift card, and to reply to your message. The legal basis is our contract with you (GDPR Art. 6(1)(b)) and, for enquiries, our legitimate interest in replying to you (Art. 6(1)(f)). We don’t send newsletters or advertising, and we never sell or share your information with anyone else.

Where it is kept, and who can see it

The website and its data are hosted by a provider in Norway/the EEA. Emails are sent through Domeneshop. Both act as data processors for us and may not use the information for anything else. Only Eni has access, through an admin panel protected by two-factor login. Payments are made with Vipps, which processes them under its own terms.

How long we keep it

• Bookings are deleted automatically 12 months after the class.
• Contact form messages are deleted automatically 12 months after they were sent.
• Gift cards are deleted automatically 24 months after purchase.
• Bookings that are never confirmed, and obvious spam, are deleted after 7 days.

Under Norwegian bookkeeping law, receipts and accounting records for payments must be kept for five years. These are kept in the accounts, not on the website.

Cookies

This website uses no tracking, no analytics and no advertising cookies, and it doesn’t load anything from Google, Meta or anyone else. The only cookie is a necessary login cookie for the admin panel. That’s why you don’t see a cookie banner.

Your rights

You can ask at any time to see what we have stored about you and your children, to have it corrected or deleted, or to object to how it is used. Send us a message and we’ll sort it out within 30 days. If you believe we are not handling your information correctly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Last updated: October 2026