In short: Soulcircus is built in Sweden, hosted in the EU, and fully GDPR-compliant. We collect only what we need to operate the platform, we never sell your personal data, and you have full control over your information at all times.
1. Who we are
DreamTroopers AB (org. nr. 559024-1179) is a wellness marketplace operated and registered in Stockholm, Sweden. We connect wellness seekers with guides, coaches, and therapists through our platform at soulcircus.se.
Our platform provides three core services: Sessions (1:1 and group booking), Events (a wellness event calendar with ticketing), and @Work (corporate wellness programs). We also publish editorial content through our Stories section and the Soulcircus Podcast.
For the purposes of the EU General Data Protection Regulation (GDPR), DreamTroopers AB is the data controller for the personal data we process through our platform and website.
2. What data we collect
We collect different types of data depending on how you interact with Soulcircus. Here is a complete overview:
For wellness seekers (clients)
| Data type | What we collect | When |
|---|---|---|
| Account | Name, email address, phone number (optional) | When you create an account |
| Booking | Session details, date, time, practitioner selected, booking status | When you book a session |
| Event registration | Event details, ticket type, attendance status | When you register for or purchase a ticket to an event |
| Payment | Transaction ID, amount, payment method used (not card numbers) | When you make a payment through Stripe |
| Reviews | Review text, star rating, date | When you leave a review for a practitioner |
| Video sessions | Session metadata (duration, participants). Recordings and transcripts only if the practitioner enables recording and you consent. | When you join a video session |
| Communication | Messages sent through the platform contact system | When you message a practitioner |
| Technical | IP address, browser type, device type, pages visited, referral source | Automatically when you visit the site |
For guides and event organizers
| Data type | What we collect | When |
|---|---|---|
| Account and profile | Name, email, phone, business name, organization number, profile bio, photos, certifications, specializations | When you create a practitioner or organizer account |
| Booking and event data | Client bookings, session history, event registrations, attendance records | When clients book sessions or register for events |
| Financial | Stripe Connect account ID, payout history, invoices, transaction records | When you connect Stripe and receive payments |
| Video sessions | Session metadata, recordings (if you enable recording), transcripts (if you enable transcription) | When you host a video session |
| @Work | Company contact details, booking history, invoicing records | When you accept corporate wellness bookings |
For corporate clients (@Work)
| Data type | What we collect | When |
|---|---|---|
| Company details | Company name, organization number, contact person name and email, billing address | When you set up a corporate account |
| Booking | Session type, practitioner booked, date, number of attendees | When you book a corporate wellness session |
| Invoicing | Invoice amounts, payment status, VAT details | When we issue or process an invoice |
For newsletter subscribers
If you subscribe to our newsletter or the Stories digest, we collect your email address and track open rates and click-through rates to improve our content. You can unsubscribe at any time through the link at the bottom of every email.
3. How we use your data
We process your personal data for the following purposes:
- Operating the platform: Creating and managing accounts, processing bookings, facilitating sessions and events, handling payments, and providing customer support.
- Video sessions: Enabling built-in HD video calls between guides and clients, and storing recordings and transcripts when explicitly enabled by the practitioner with client consent.
- Communication: Sending booking confirmations, reminders, session links, receipts, invoices, and platform updates via email.
- Trust and safety: Displaying verified reviews, managing the Verified Professional badge program, and preventing fraud or abuse.
- Promotion: Featuring practitioner profiles and events across the platform, including the Picks of the Week, Boost carousel, and social media channels (only for publicly listed profiles and events).
- Improving the service: Analyzing usage patterns, identifying technical issues, measuring platform performance, and developing new features.
- Legal compliance: Fulfilling legal obligations, including Swedish tax and accounting requirements, and responding to legitimate data access requests.
We do not use your personal data for automated decision-making or profiling that produces legal effects.
4. Legal basis for processing
Under the GDPR, we process your personal data based on the following legal grounds:
| Legal basis | When it applies |
|---|---|
| Contract performance | Processing necessary to deliver the services you signed up for: account management, bookings, payments, video sessions, event registration. |
| Legitimate interest | Platform improvement, analytics, fraud prevention, and promoting publicly listed profiles and events. We balance our interests against your rights and only process data where the impact on you is minimal. |
| Consent | Newsletter subscriptions, session recording and transcription, optional cookies and tracking, and marketing communications. |
| Legal obligation | Tax and accounting records, responding to authority requests, and retaining transaction data as required by Swedish law. |
5. Payments and financial data
All payments on Soulcircus are processed through Stripe, a PCI-DSS Level 1 certified payment processor. We support payment and credit cards (EU), Klarna, and Swish.
Soulcircus never has access to your full card number, CVV, or bank account details. This information is handled entirely by Stripe and is never stored on our servers. We only receive a transaction reference, the amount, and the payment method used.
For guides, payouts are processed through Stripe Connect. Your Stripe account is governed by Stripe's own terms of service and privacy policy.
Invoices and receipts are generated automatically for every transaction and are accessible from your account dashboard. We retain financial records for the period required by Swedish accounting law (currently seven years from the end of the fiscal year).
6. Video sessions, recordings, and transcripts
Soulcircus includes built-in HD video calls for online sessions. The video infrastructure is fully encrypted and hosted on EU-based servers.
Key principle: Recording and transcription are always off by default. They can only be enabled by the practitioner, and the client is always notified and must consent before any recording begins.
Here is how video data is handled:
- Video call metadata (participants, duration, date) is stored as part of the booking record.
- Video and audio streams are end-to-end encrypted in transit. Live streams are not stored unless recording is explicitly enabled.
- Recordings, when enabled, are stored in encrypted form on EU-based servers. They are accessible only to the practitioner who initiated the recording and the client who participated.
- Transcripts are generated automatically from recordings. They are stored alongside the recording and subject to the same access controls.
- Both guides and clients can delete recordings and transcripts from their dashboard at any time.
- Recordings and transcripts are automatically deleted after 12 months unless the practitioner chooses to retain them for a specific reason (such as ongoing treatment documentation).
7. Cookies and tracking
Soulcircus uses cookies to keep the platform functional and to understand how people use it. Here is what we use:
Essential cookies (always active)
These are required for the platform to work. They include session cookies for authentication, language preference, and shopping cart state for event tickets. You cannot opt out of essential cookies.
Analytics cookies (optional)
We use analytics tools to understand how visitors interact with the platform, which pages are visited most, and where people drop off. This data is aggregated and anonymized. You can opt out of analytics cookies through our cookie banner when you first visit the site, or at any time through your browser settings.
Marketing cookies (optional)
If you consent, we may use marketing cookies to measure the effectiveness of our campaigns and to retarget visitors on social media platforms. These cookies are only placed with your explicit consent and can be withdrawn at any time.
Embedded YouTube videos
Some pages embed YouTube videos using YouTube's privacy-enhanced mode (youtube-nocookie.com). No cookies are placed by YouTube when the page loads. If you click Play, YouTube may set cookies and collect data in accordance with Google's privacy policy (policies.google.com/privacy). We have no control over those cookies.
We do not use fingerprinting, invisible pixels in emails (except standard open-rate tracking in newsletters, which you can avoid by unsubscribing), or any other covert tracking methods.
8. Who we share data with
We share personal data only when necessary to operate the platform, and only with the following categories of recipients:
| Recipient | What they receive | Why |
|---|---|---|
| Stripe (payments) | Transaction data, payer identity | To process payments for sessions and event tickets |
| Video infrastructure provider | Session metadata, encrypted video streams | To deliver HD video calls. EU-hosted, GDPR-compliant. |
| Email service provider | Email address, name, email content | To send transactional emails (booking confirmations, reminders, receipts) and newsletters |
| Hosting provider | All platform data (encrypted at rest) | To host the Soulcircus platform and database |
| Analytics provider | Anonymized usage data | To understand platform usage and improve the service |
| Practitioners | Client name, email, booking details, reviews | To fulfill the booking and enable the practitioner to deliver the session |
| Event organizers | Attendee name, email, ticket details | To fulfill event registrations and manage attendance |
| Corporate clients (@Work) | Practitioner name, session details, invoicing | To deliver corporate wellness bookings |
We never sell, rent, or trade your personal data to third parties for marketing purposes. We do not share data with advertisers.
9. How long we keep your data
- Account data: Retained for as long as your account is active. If you delete your account, personal data is removed within 30 days, except where retention is required by law.
- Booking and event records: Retained for 3 years after the session or event date for reference and dispute resolution.
- Financial records: Retained for 7 years as required by Swedish accounting legislation (Bokföringslagen).
- Video recordings and transcripts: Automatically deleted after 12 months unless the practitioner explicitly extends retention.
- Reviews: Retained for as long as the reviewed practitioner's profile is active. Reviews are anonymized (not deleted) if you delete your account.
- Analytics data: Aggregated and anonymized. Individual-level analytics data is not retained beyond 26 months.
- Newsletter subscriptions: Email address retained until you unsubscribe.
10. Your rights under GDPR
As a data subject under the GDPR, you have the following rights:
- Right of access: You can request a copy of all personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can ask us to delete your personal data, subject to legal retention obligations.
- Right to restriction: You can ask us to limit how we process your data in certain circumstances.
- Right to data portability: You can request your data in a machine-readable format to transfer to another service.
- Right to object: You can object to processing based on legitimate interest, including direct marketing.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at the address below. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
11. Children's privacy
Soulcircus is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has submitted data to us, please contact us immediately.
12. International data transfers
Soulcircus is based in Sweden and our primary infrastructure is hosted within the European Union. We process and store the vast majority of personal data within the EU/EEA.
In some cases, data may be transferred to countries outside the EU/EEA when using third-party services (for example, Stripe operates globally). In all such cases, we ensure that appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission, as required by the GDPR.
13. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our services, legal requirements, or data practices. When we make material changes, we will notify you by email (if you have an account) and by posting a notice on the platform. The 'Last updated' date at the top of this page always reflects the most recent version.
14. Contact us
If you have any questions about this privacy policy or how we handle your data, we're happy to help.
For general enquiries, you can also reach us at hello@soulcircus.com or through the contact form on our About page.