Privacy Policy

of SoulRise Global

Last updated: 28 June 2026

For website visitors, Clients and users of SoulRise Global services

This Privacy Policy (the “Policy”) governs the processing of personal data in the relationship between SoulRise Global, a sole proprietorship established at Bruul 115, 2800 Mechelen, Belgium, email info@soulriseglobal.com, website www.soulriseglobal.com, telephone +32 498 29 24 03 and +39 366 68 71 381 (also “SoulRise Global”, “SRG” or the “Controller”), and any natural person or legal entity whose personal data are processed by SRG in connection with the use of the Website and/or the coaching and mentoring services (also the “Data Subject” or the “Client”).

SRG processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR), the United Kingdom data protection legislation (UK GDPR and the Data Protection Act 2018), the Swiss Federal Act on Data Protection and any other mandatory provisions under the laws of the Data Subject’s country of residence, where applicable.

This Policy applies to Data Subjects located in any country worldwide, although specific rights and protections may vary depending on the applicable local legal framework.

---

1. Data Controller

The Data Controller is SoulRise Global (SRG), a sole proprietorship established in Mechelen, Belgium.

Email: info@soulriseglobal.com

Website: www.soulriseglobal.com

Telephone (Belgium): +32 498 29 24 03

Telephone (Italy): +39 366 68 71 381

VAT number: BE 0683.882.167

---

2. Categories of Personal Data Processed

The Controller may process the categories of personal data described below.

2.1 Identification and contact data

Identification and contact data may include first name and last name, email address, telephone number, country and/or city of residence, billing address and, where applicable, VAT number.

2.2 Account and booking data

Where applicable, account and booking data may include login details, with passwords stored in encrypted or hashed form, booking history, session-related information and communication preferences.

2.3 Coaching and mentoring data

Coaching and mentoring data may include information the Data Subject chooses to share before, during or after sessions, such as goals, challenges, personal and professional background, reflections and notes about their journey.
It may also include intake forms, questionnaires, feedback forms, self-assessments and notes taken by the Controller for the purpose of tracking and tailoring the Client’s programme.

2.4 Payment and invoicing data

Payment and invoicing data may include payment information processed through secure payment service providers, payment confirmations, transaction references, invoices and related accounting information.
The Controller does not store full payment-card data.

 2.5 Browsing data collected automatically

When the Data Subject visits or interacts with the Website, the Controller may automatically collect the IP address, device type, operating system, browser type and version, date, time and duration of the visit, pages visited, links clicked and the referrer URL.
These data are typically collected through cookies and similar technologies, as described in Section 9.

---

3. Purposes of Processing and Legal Bases

The Controller processes personal data for the purposes and on the legal bases set out below:

3.1 Provision of coaching and mentoring services

Personal data are processed to manage requests, bookings and online sessions, to communicate with the Client before, during and after sessions, and to send materials, exercises and follow-up content.

Legal basis: performance of a contract or taking steps at the Data Subject’s request before entering into a contract, in accordance with Article 6(1)(b) GDPR

3.2 Handling contact requests

Personal data are processed to respond to questions, requests for information, quotations and support inquiries.

Legal basis: the Controller’s legitimate interest in handling requests and maintaining relationships with Clients and contacts under Article 6(1)(f) GDPR and/or pre-contractual measures under Article 6(1)(b) GDPR.

3.3 Administrative, accounting and tax management

Personal data are processed to handle payments, issue invoices and fulfil accounting and tax obligations.

Legal basis: compliance with legal obligations under Article 6(1)(c) GDPR.

3.4 Newsletters and marketing communications

Where applicable, personal data may be processed to send informational and promotional communications relating to the Controller’s services, including newsletters, offers, updates and events.

Legal basis:
the Data Subject’s consent under Article 6(1)(a) GDPR, which may be withdrawn at any time, and/or the Controller’s legitimate interest in informing existing Clients about similar services within the limits permitted by law under Article 6(1)(f) GDPR.

3.5 Improvement of the Website and services

Personal data may be processed for statistical analysis of Website usage in aggregated or pseudonymised form, to improve service quality and Website functioning, and to maintain security and prevent abuse or unauthorised access.

Legal basis: the Controller’s legitimate interest under Article 6(1)(f) GDPR. Consent may be required for non-essential cookies and analytics under Article 6(1)(a) GDPR.

3.6 Protection of the Controller’s rights

Personal data may be processed to prevent or manage disputes and to establish, exercise or defend legal claims.

Legal basis: the Controller’s legitimate interest in protecting its rights under Article 6(1)(f) GDPR.

---

4. Special Categories of Data

SRG provides coaching and mentoring services and does not perform psychotherapeutic or medical activities. During sessions, however, the Data Subject may choose to share information that qualifies as special-category personal data under the GDPR, such as health data, beliefs or information concerning sexual life.

Providing special-category data is not a condition for receiving the services. When the Data Subject chooses to share such information, the Controller will use it solely to support the coaching and mentoring process. Where required by law, the Controller will obtain the Data Subject’s explicit consent under Article 9(2)(a) GDPR before processing those data.

The Data Subject is always free not to provide special-category data. This choice may limit the possibility of addressing specific topics in depth, but it does not prevent access to the service in general.

---

5. Recipients and International Transfers

5.1 Recipients

Personal data may be disclosed to service providers acting as processors, including hosting and IT infrastructure providers, email, CRM and newsletter providers, online booking and scheduling platforms, video-conferencing platforms, payment service providers and banks.

Personal data may also be disclosed, where necessary, to professional collaborators involved in the Client’s journey and bound by confidentiality commitments, as well as to legal, tax or accounting advisers and public authorities where disclosure is required by law or is necessary for the establishment, exercise or defence of legal claims.

These recipients will process personal data either as processors under appropriate data-processing agreements in accordance with Article 28 GDPR or, where applicable, as independent controllers.

5.2 International transfers

Some service providers or tools used by SRG may be located in, or process data from, countries outside the European Union or European Economic Area, including the United Kingdom, Switzerland and other third countries.

In those circumstances, the Controller adopts appropriate safeguards to ensure a level of data protection consistent with the GDPR. These safeguards may include reliance on adequacy decisions of the European Commission and/or the use of Standard Contractual Clauses together with additional security measures where appropriate.

By using the Website and SRG’s services, the Data Subject acknowledges that personal data may be transferred and processed outside their country of residence, subject to the safeguards described in this Section.

---

6. Data Retention

Personal data are retained only for as long as necessary to achieve the purposes for which they were collected, or for a longer period where required by law.

Client and session-related data: retained for the duration of the contractual relationship and, in principle, for up to [e.g. 5 years] after the last significant interaction with the Client, unless a different period is required by law or is necessary for legal defence.

Invoicing and accounting data: retained for the period required by tax and accounting law, typically up to 7-10 years.

Marketing-related data: retained until consent is withdrawn or the Data Subject unsubscribes.

Technical logs and browsing data: retained for variable periods, for example from a few months up to [e.g. 2 years], depending on security and analysis requirements.

At the end of the applicable retention periods, personal data are deleted or irreversibly anonymised.

---

7. Security Measures

The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include the use of secure protocols such as HTTPS, authentication and authorisation systems, regular backups, limited access on a need-to-know basis and confidentiality commitments for collaborators who may process personal data.

No system can guarantee absolute security. The Controller nevertheless undertakes to respond promptly to any relevant data breach or security incident in accordance with applicable law.

---

8. Rights of the Data Subject

Subject to the conditions and limitations established by applicable law, in particular the GDPR, the Data Subject may exercise the rights described below.

Right of access. The Data Subject may obtain confirmation as to whether personal data concerning them are being processed and, where processing takes place, access to those data and related information.

Right to rectification. The Data Subject may request correction of inaccurate personal data and completion of incomplete personal data.

Right to erasure. The Data Subject may request deletion of personal data where, for example, those data are no longer necessary for the purposes for which they were collected, or where consent is withdrawn and no other legal basis applies.

Right to restriction of processing. The Data Subject may request restriction of processing in the circumstances provided by law, including where the accuracy of the data is contested.

Right to data portability. The Data Subject may receive personal data in a structured, commonly used and machine-readable format and transmit those data to another controller where technically feasible and legally applicable.

Right to object. The Data Subject may object, on grounds relating to their particular situation, to processing based on the Controller’s legitimate interests and may object at any time to processing for direct-marketing purposes.

Right to withdraw consent. Where processing is based on consent, the Data Subject may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, the Data Subject may contact the Controller at info@soulriseglobal.com and use the suggested subject line “Data protection rights request”. The Controller may request additional information necessary to verify the identity of the requester before acting on the request.

The Data Subject also has the right to lodge a complaint with a competent supervisory authority, for example in the country of habitual residence, place of work or place of the alleged infringement.

---

9. Cookies and Similar Technologies

The Website www.soulriseglobal.com uses cookies and similar technologies to ensure the technical functioning of the Website, remember user preferences such as language, compile anonymous or aggregated statistics on Website usage, and improve performance and user experience.

On the first visit, a cookie banner informs the Data Subject and enables them to accept all cookies, refuse non-essential cookies or customise cookie preferences. The Data Subject can also manage or delete cookies through their browser settings.

Further information is provided in the separate Cookie Policy, which complements this Policy.

---

10. Non-European / Extra-European Data Subjects

For Data Subjects resident outside the European Union, the European Economic Area, the United Kingdom or Switzerland, the Controller applies data-protection standards inspired by the GDPR, which in many cases provide a high level of protection.

Personal data may be processed in Belgium and in other countries where the Controller’s service providers operate, subject to the safeguards described in Section 5. Local laws in the Data Subject’s country may provide additional or different rights from those expressly described in this Policy.

A Data Subject who has questions about the interaction between local law and this Policy is invited to contact the Controller.

---

11. Children’s Data

SRG’s services are intended primarily for adults. The Controller does not knowingly collect personal data from children below the age required by applicable law without the consent of a parent or legal guardian where such consent is required.

If the Controller becomes aware that personal data of a minor have been collected without the necessary legal basis, reasonable steps will be taken to delete those data as soon as possible.

12. Changes to this Policy

The Controller may amend or update this Policy at any time to reflect changes to the services offered, developments in applicable laws or regulatory guidance, or technical and organisational changes affecting the processing of personal data.

In the event of material changes, the Controller will update the “Last updated” date and may provide additional notice through the Website, by email or through another appropriate channel.

---

13. Contact

Questions or requests relating to this Policy or the processing of personal data may be addressed to SoulRise Global using the contact details below.