Who is responsible
The controller for personal data collected through soulx.agency is Stupid Capital OÜ, registry code 17345529, VAT ID EE102915857, Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia. SOULX is a trading name of Stupid Capital OÜ.
For any privacy question or request, email hello@soulx.agency.
What we collect, and why
Contact form: name, email address, and your message, plus company name and phone number if you choose to share them. We use this to respond to your inquiry and, where relevant, to prepare a proposal. Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in responding to inquiries.
Growth Audit or dashboard request: your email address, used to plan the audit or send you what you asked for. Legal basis: taking steps at your request.
Email updates: if you separately opt in to receive content or updates from us, we use your email address to send them. Every message contains an unsubscribe link, and you can opt out at any time. Legal basis: your consent.
Usage and measurement data: when analytics or advertising measurement is active (see the next section), we process technical data such as pages visited, approximate location, device information and interactions with our ads. Legal basis: your consent.
Cookies, tracking and analytics
Functional storage, always on: the website uses browser session storage to remember that you have already seen the opening animation. It contains no personal data and expires when you close the browser. No consent is needed for this.
Analytics, only with your consent: we use, or may use, Google Analytics 4 to understand how the website is used, with IP anonymisation and the shortest practical retention settings.
Advertising measurement, only with your consent: as a performance marketing company we run campaigns for our own brand too. We use, or may use, the Meta pixel and Conversions API, the Google Ads tag, the TikTok pixel and the LinkedIn Insight Tag to measure our campaigns and to build advertising audiences. These tools share technical data (such as page views and events) with the respective platforms, which act as independent or joint controllers for parts of that processing.
Email measurement: if you receive email from us through our email platform (such as Klaviyo), it may register opens and clicks to make those emails less irrelevant. Unsubscribing stops this.
Non-essential cookies and trackers only load after you accept them via the cookie banner. You can withdraw or change your choice at any time via the cookie settings link on the website, and withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Who processes your data for us
Form submissions are delivered to our mailbox via Google Workspace and logged in a private Google Sheets document, both provided by Google Ireland Ltd.
Depending on the tools that are active, personal data may also be processed by: Google (Analytics, Ads), Meta Platforms Ireland, TikTok Technology Ltd, LinkedIn Ireland, Klaviyo (email), and Calendly (scheduling, when you book a call with us; Calendly's widget loads only after you click the booking button). Our website hosting provider processes server logs (such as IP addresses) for security and delivery of the site.
Some of these providers process data outside the EEA, mainly in the United States. Where that happens, transfers rely on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
We share your data with no one else, and we never sell personal data.
How long we keep it
Inquiries are kept for as long as needed to handle them and for a reasonable period afterwards for follow-up. If we enter into an agreement, data is kept for the duration of the relationship and any legally required retention period for business records.
Analytics and advertising data follow the retention settings of the tools involved, which we keep to the shortest period that still lets us do our work; email list data is kept until you unsubscribe. You can ask us to delete your data at any time.
Your rights
Under the GDPR you can ask for access to, correction of, or deletion of your personal data, ask us to restrict or stop processing it, withdraw any consent you gave, object to processing based on legitimate interest, and receive a copy of your data in a portable format. Email hello@soulx.agency and we will respond.
You also have the right to lodge a complaint with a supervisory authority. For Stupid Capital OÜ, that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee). You may also contact the authority in your own country.