Legal
PRIVACY policy
Last updated: November 2, 2026 (purchases measured in Google Analytics and the Meta pixel). Previous version: November 1, 2026.
Soul Particles is a website with quizzes, articles and videos for self-reflection and personal growth. We are committed to your privacy, and we've tried to explain in plain language what we collect, why, and what control you have. Questions: use our contact form.
Who we are
The controller of your personal data is SIA "Incolumitas", a company registered in Latvia, registration number 40103584655, VAT LV40103584655, legal address Aleksandra Grīna bulvāris 9-7, Rīga, LV-1002, Latvia ("Soul Particles", "we", "us"). "Services" means soulparticles.com and the quizzes, emails and other features we offer.
Because we are established in the European Union, we handle all personal data to the standard of the EU General Data Protection Regulation (GDPR), wherever you live.
What we collect
Information you give us
- Quiz answers. The answers you choose or type while taking a quiz. Answers you type are saved as you go, even if you don't finish the quiz.
- Name and email address, if you enter them to receive your report or updates.
- Comments you leave on quiz questions, with the name you give.
- Messages you send us by email or a contact form.
When you buy a report
- Purchase details: your name, email, billing address and, if you buy as a business, your VAT number, which you enter on the checkout page of our payment provider, Stripe. Stripe processes your card or other payment method; we never see or store your full card details. We receive the payment result, the amount and currency, any promotion code and Stripe's reference numbers.
Information collected automatically
- Technical data: IP address, browser and device type, pages visited, referring page, and date and time. We store IP addresses only in a hashed (one-way scrambled) form for rate limiting and abuse prevention.
- Quiz progress is saved in your browser's local storage on your own device so you can continue where you left off. You can clear it with the "Start over" button or your browser settings.
- Approximate country, derived from your IP address, used for security.
- Quiz statistics: which questions were shown and answered during a visit, and whether you arrived through a landing page. These are not linked to your name or email.
- Cookies from Google and Meta, only if you accept them in our cookie notice: Google Analytics (which pages are visited, how you found us, device and approximate location) and the Meta pixel (whether you came from one of our Facebook or Instagram ads and took a step such as starting the assessment or buying the Full Report). For a purchase, they receive only the amount, the currency and our order number. See "Cookies and similar technologies" below.
We do not ask for your date of birth or government ID, we never see your full card details, and we do not knowingly collect precise location.
Quiz answers about wellbeing
Some quizzes ask about your feelings, relationships and life direction. We treat these answers as sensitive: we use them only to produce your results, to improve our quizzes (in aggregated or de-identified form), and, if you give us your email, to send you content that relates to your results. We never sell them, never use them for third-party advertising, and never share them with advertisers or data brokers. Google and Meta never receive your answers, your report, your name or your email address: they only receive the name of the page and events such as "started the assessment", "finished the assessment" or "bought the Full Report" (with the amount, the currency and our order number).
How we use it and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Run the quiz and show your results | Quiz answers, progress | Performance of our service to you (Art. 6(1)(b)); your explicit consent for wellbeing answers (Art. 9(2)(a)) |
| Email you your report | Name, email, report | Your request / consent |
| Send newsletters and content related to your results | Email, results summary | Consent (Art. 6(1)(a)); withdraw any time via the unsubscribe link |
| Process your purchase, deliver your report, send receipts and invoices, handle refunds | Name, email, billing address, VAT number, purchase details | Performance of our contract with you (Art. 6(1)(b)) |
| Keep accounting and tax records of purchases | Purchase and invoice details | Legal obligation (Art. 6(1)(c)) |
| Keep the site secure, prevent spam and abuse | Hashed IP, country, technical data | Legitimate interest (Art. 6(1)(f)) |
| Understand and improve our content | Our own cookieless visit counts and quiz statistics | Legitimate interest (Art. 6(1)(f)) |
| Google Analytics | Pages visited, events, device, approximate location, cookie ID | Your consent in the cookie notice (Art. 6(1)(a)); withdraw any time via "Cookie settings" |
| Measure our Facebook and Instagram ads (Meta pixel) | Pages visited, events, cookie ID, IP address, browser | Your consent in the cookie notice (Art. 6(1)(a)); withdraw any time via "Cookie settings" |
| Comply with the law and respond to legal requests | As needed | Legal obligation (Art. 6(1)(c)) |
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Quiz results are generated automatically from your answers, for your own reflection only.
Emails
If you sign up, we'll send you your results and occasional emails about self-reflection, new quizzes and content. Every marketing email has an unsubscribe link and shows our postal address. We may still send you a small number of service messages (for example, if this policy changes materially).
Who we share it with
We do not sell or rent your personal information. If you accept advertising cookies, the Meta pixel sends Meta information about your visit (not your answers), which California and some other US state laws may treat as "sharing" for cross-context behavioral advertising or as targeted advertising. You can say no in the cookie notice, change your mind any time with "Cookie settings" or "Your privacy choices" at the bottom of every page, or use the Global Privacy Control signal.
We share data only with:
- Service providers who process it on our behalf under a contract that restricts their use: hosting (Vercel Inc., USA), database (Neon Inc., USA, stored in the United States), content delivery and security (Cloudflare Inc., USA) and email delivery (Brevo, operated by Sendinblue SAS, France). They may only use your data to provide their services to us.
- Stripe, when you buy a report: Stripe Payments Europe, Limited (Ireland) and Stripe, Inc. (USA) process your payment. For some purposes, such as fraud prevention and meeting its own legal duties, Stripe acts as a separate controller under its own privacy policy (stripe.com/privacy).
- Google and Meta, only if you accept their cookies: Google Ireland Limited / Google LLC (Google Analytics) and Meta Platforms Ireland Limited / Meta Platforms, Inc. (Meta pixel). Meta may also use this data for its own purposes, such as improving its ad delivery, under its own privacy policy (facebook.com/privacy/policy); for the pixel, we and Meta are joint controllers for collecting and sending the data. Google's policy: policies.google.com/privacy.
- Authorities or others for legal reasons, when we believe disclosure is needed to comply with law or a valid legal request, to enforce our Terms, to protect the rights, property or safety of us, our users or others, or to detect and resolve fraud or security issues.
- A successor business, if Soul Particles is merged, acquired or its assets are transferred. This policy will continue to apply to your data.
International transfers
Our providers may process data in the United States and other countries outside the European Economic Area. Where they do, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Quiz answers not linked to an email: 24 months, then deleted or fully anonymized.
- Quiz answers and results linked to your email: until you ask us to delete them, or 24 months after your last interaction with us.
- Email address for newsletters: until you unsubscribe, after which we keep only a suppression record so we don't email you again.
- Purchase and invoice records: as long as Latvian accounting and tax law requires us to keep them.
- Security logs and rate-limit records: a few hours to 30 days.
- Google Analytics data: 14 months. Your choice in the cookie notice: 12 months, then we ask again.
- Cookies on your device: Google Analytics (`_ga`, `_ga_*`) up to 2 years, Meta pixel (`_fbp`, `_fbc`) up to 90 days, unless you delete them or withdraw consent sooner.
If the law requires us to keep something longer, we will.
Your rights
Wherever you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it;
- delete it;
- stop or restrict using it, or object to how we use it;
- give it to you in a portable format;
- withdraw any consent you've given (this doesn't affect use before the withdrawal).
Write to us through our contact form. We'll respond within 30 days (45 days where US state law allows). We may ask you to confirm you control the email address involved before we act. We will not discriminate against you for exercising your rights.
EU/EEA residents can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or their local data protection authority.
US residents: depending on your state (for example California, Colorado, Connecticut, Virginia, Washington or Nevada), you may have similar rights to know, access, correct and delete your data, and to opt out of sale, targeted advertising and profiling. We don't sell data. To opt out of advertising cookies (the Meta pixel), use "Your privacy choices" at the bottom of every page, or turn on the Global Privacy Control signal in your browser. If we deny your request, you can appeal by replying to our answer.
Children
The Services are for adults aged 18 and over. We don't knowingly collect personal data from anyone under 18. If you believe a minor has given us their data, contact us and we'll delete it.
Security
We use encryption in transit (HTTPS), hashed IP addresses, access controls on our admin tools, and rate limiting. No method of transmitting or storing information is completely secure, so we can't guarantee absolute security, but we will tell you and the authorities about a breach when the law requires.
Cookies and similar technologies
When you first visit, a cookie notice asks for your choice. Nothing beyond what the site needs to work is used until you accept. You can change your choice any time with "Cookie settings" at the bottom of every page.
- Strictly necessary (always on): local storage for your assessment progress and your cookie choice; security cookies set by our hosting/CDN provider to block bots. These don't need consent.
- Our own statistics (always on): we count visits ourselves, without cookies and without identifying you (a random ID kept only for the current browser tab).
- Analytics (only if you accept): Google Analytics 4. It sets the `_ga` cookies. We send it page addresses without search terms or other details, and IP addresses are not stored by Google Analytics 4.
- Advertising (only if you accept): the Meta pixel, so we can see whether our Facebook and Instagram ads lead to visits, assessments and purchases. It sets the `_fbp` cookie (and `_fbc` when you arrive from an ad). We have turned off its automatic collection of page content, so it doesn't read your answers.
- Google Search Console (no cookies): shows us how our pages appear in Google Search, such as which searches led to them and how often they were clicked. Google reports these as totals; it sets no cookies on our site and we send it nothing about you.
If you withdraw consent, we stop loading these tools and delete their cookies from your browser. You can also block or delete cookies and local storage in your browser settings; the assessment will then not remember your progress. We honor the Global Privacy Control (GPC) signal: with it on, advertising cookies stay off.
Links to other sites
Our Content may link to other websites and embed YouTube videos. Their own privacy policies apply when you use them. YouTube embeds load in privacy-enhanced mode and only contact YouTube when you press play.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version. If a change is significant, we'll tell you on the site or by email before it takes effect.
Contact
SIA "Incolumitas", Aleksandra Grīna bulvāris 9-7, Rīga, LV-1002, Latvia. Contact form: soulparticles.com/contact