Legal & privacy

Privacy Policy

This policy explains what personal data Vibespark collects, why we collect it, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR).

Last updated: today

1. Who we are

Vibespark is a small studio that publishes structured mental refresh programs and reflective routines as general informational content. For the purposes of the GDPR, we act as the data controller for the personal data described in this policy.

You can reach the person responsible for data protection using the details below:

  • Operator: Vibespark
  • Address: Fredikanterassi 1, 00520 Helsinki, Finland
  • Phone: +358 40 548 4273
  • Email: admin@vibespark.world
  • Website: vibespark.world

2. Scope of this policy

This policy applies to personal data we process through this website, including the contact form, any messages you send us, and limited technical information generated when you browse the site. It does not apply to third-party websites that we may reference for context; those services operate under their own policies.

The content on this website is provided for general information and education only. It is not professional, medical or legal advice, and processing your data does not create any professional relationship between you and the studio.

3. Data we collect

We aim to collect as little personal data as possible. Depending on how you use the site, we may process the following categories:

3.1 Information you give us

  • Contact details such as the name and email address you enter in the contact form.
  • Message content, meaning the text you choose to write to us and any details you decide to include.
  • Consent records, including the fact that you ticked the privacy consent box and when you did so.

3.2 Information collected automatically

  • Technical data such as browser type, device type, approximate region and pages viewed, where analytics cookies are enabled with your consent.
  • Cookie preferences, stored locally in your browser so we can remember your choices.

We do not ask for, and request that you do not send us, sensitive information such as data about health, beliefs or other special categories. Our content is not designed to collect that kind of information.

4. Purposes and legal bases

We only process personal data where we have a lawful basis to do so under Article 6 of the GDPR:

  • To respond to your enquiry. When you submit the contact form, we process your details to read and reply to your message. The legal basis is our legitimate interest in answering questions about our content, and your consent where you provide it.
  • To operate and secure the website. We process limited technical data to keep the site available and to prevent misuse. The legal basis is our legitimate interest in running a safe service.
  • To understand which content is useful. Where you allow analytics or marketing cookies, we process related data on the basis of your consent, which you can withdraw at any time.
  • To meet legal obligations. We may process data where the law requires us to keep certain records.

5. Cookies and analytics

The website uses a small number of cookies. Strictly necessary cookies are always active because the site cannot function without them. Analytics and marketing cookies are optional and load only after you give consent through the cookie banner. You can change your choices at any time by clearing the stored preference and reloading the page.

For a full description of each cookie category and how to manage them, please read our Cookie Policy.

6. Sharing and processors

We do not sell personal data, and we do not share it with third parties for their own advertising. We may share limited data with trusted service providers who help us operate the website, such as hosting and email delivery. These providers act as processors on our instructions and are bound by appropriate contracts.

We may also disclose data where we are required to do so by law, or where it is necessary to protect the rights and safety of our visitors or the studio.

7. International transfers

Where a service provider processes data outside the European Economic Area, we take steps to ensure an adequate level of protection, for example by relying on adequacy decisions or standard contractual clauses approved by the European Commission.

8. How long we keep data

We keep personal data only for as long as needed for the purpose it was collected:

  • Contact messages are generally retained for up to 24 months after our last exchange, then deleted or anonymised, unless a longer period is required for legal reasons.
  • Cookie preferences remain in your browser until they expire or you clear them.
  • Aggregated analytics that no longer identify you may be kept for longer to understand general trends.

9. Security measures

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encrypted connections (HTTPS) across the website, limited access to messages on a need-to-know basis, and regular reviews of the tools we rely on. No method of transmission over the internet is completely secure, so we encourage you to share only what you are comfortable sending.

10. Your rights

Subject to the conditions in the GDPR, you have the right to:

  • request access to the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to erase your data in certain circumstances;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting earlier processing;
  • lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman.

To exercise any of these rights, contact us using the details in section 1. We will respond within the timeframes set out in the GDPR.

11. Children

This website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. When we make a material change, we will update the date shown at the top of this page. We encourage you to review the policy periodically.

13. Contact

If you have any questions about this policy or about how we handle personal data, please reach out using the studio details above or through our contact page. We are happy to help.