Privacy

    What we know about you, and why

    I built Soul Seekers so people could find each other in Marbella, not so I could build a database. But a community does collect some things, and you have a right to know exactly what. This page is the honest version, in plain English, with no lawyer voice.

    Last updated 18 September 2026.

    Who holds your data

    Soul Seekers, based in Marbella, Spain. I am Kenneth, I founded it, and I am the person responsible for what happens to your information.

    You can reach me at hello@soulseekerstribe.com. That address goes to a real person, and it is the fastest way to ask for anything on this page.

    If you give us your email

    No form on this site asks for your email any more. The newsletter box and the membership one were both removed on 1 November 2026, because the newsletter is sent from Luma and the addresses they collected sat in a list nobody read.

    Everything that needs your email now happens somewhere else and under that company's own policy: events and the newsletter on Luma, membership payment on Stripe, a directory application on Tally. Each of them is linked further down.

    The database that held the old signups is empty and nothing writes to it. It is kept for the monthly deletion job described below rather than dropped, so the promise still has something to run against.

    If you apply to the directory

    Facilitators and studios apply through a form hosted by Tally. Their form, our questions, our data.

    A facilitator gives us their name, practice name, Instagram, website, the town they work in, email, WhatsApp number, what they do and how long they have done it, who it is for, what they run, what they charge, any member offer, training worth knowing about, photos, and a couple of lines about why they want to be here. A studio gives us the studio name, a contact name, email, WhatsApp, a map pin, Instagram, website, a link to the live schedule, a description and a photo.

    What gets published is only what the form says gets published. Email addresses and prices never appear on the site. A contact's personal name never appears on a studio page. A facilitator's WhatsApp number does appear, as the Get in touch button, and the form says so in the same breath as it asks for the number.

    The basis is your consent for the listing, and, once you pay for one, the contract between us.

    If you pay us

    Membership payments run through a payment link. Your card details are typed into our payment provider, never into us. We never see or store a card number. We see that a payment happened, who it was from, and for what.

    The basis is the contract with you, plus the legal duty to keep proper accounting records.

    If you come to an event

    Events live on Luma. When you register for one, you register with Luma, and they hold your name, email and ticket. We can see the guest list for our own events, which is how we know who is coming and how many.

    The homepage embeds the Luma calendar, so loading the homepage loads something from Luma. Their privacy policy covers what they do with that.

    The basis is the contract to get you into the event you signed up for.

    The WhatsApp community

    The community group runs on WhatsApp, which means WhatsApp, and therefore Meta, handles the messages. Everyone in the group can see your phone number and whatever name you have set. That is how WhatsApp groups work, and it is worth knowing before you join rather than after.

    You can leave at any time, and leaving removes you from the group for good. Their terms are here.

    Instagram

    We post on @soulseekerstribe. Some of those posts are published by a small tool we built, which is connected to our own Instagram account through Meta and posts on our behalf. It publishes our own photos and captions and reads our own account's numbers. It does not read your profile, your messages, your followers or anything else about you.

    If you follow, like or comment, that interaction lives on Instagram under Meta's policy, not ours.

    Analytics, and the honest bit about cookies

    One tool, PostHog. It tells us which pages people actually read and on what kind of device, and we use that to decide what to build next. We do not use it to identify you personally and we do not run advertising pixels. We also used to run Google Analytics. It is gone, tag and all, since September 2026.

    PostHog here is set up cookieless. It sets no cookie and writes nothing into your browser's storage, so nothing about you survives the page you are on. That is why this site asks you to accept nothing. It can still tell roughly which country a visit came from, because that is readable from the connection itself rather than from anything stored on your machine.

    Stripe's checkout and the Luma calendar embed do still set their own storage. They are other people's products doing their own jobs, and we cannot turn that off from here. If you would rather not be counted at all, a browser-level blocker or a private window stops the lot, and nothing on the site breaks.

    Where it all sits

    The site is hosted by Cloudflare, which also holds the signup database and keeps standard server logs, including IP addresses, to serve pages and block abuse.

    Stripe, Luma, PostHog and Meta are all based in or transfer data to the United States. Each of them handles that transfer under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. If that matters to you, their policies are all linked above.

    How long we keep it

    An email address given through the old newsletter or membership form is deleted three years after you gave it to us. That is a job that runs against our database every month, not a promise to remember. Those tables are empty today and no form fills them any more, so in practice there is nothing of yours left in them.

    A directory application that we turned down, or that never went live, is deleted twelve months after it was sent. While a listing is live, its application stays, and the answers behind it stay with Tally. Event data stays with Luma for as long as your Luma account does. Payment records stay for as long as the law requires.

    Ask for any of it to be deleted and it goes, except the bits an accountant is legally obliged to hold on to.

    What you can ask for

    Under GDPR you can ask us for a copy of everything we hold about you, ask us to correct anything wrong, ask us to delete it, ask for it in a file you can take elsewhere, object to us using it, or ask us to pause using it while something is being sorted out. Where we rely on your consent, you can withdraw it, and that does not undo anything done before you did.

    Email hello@soulseekerstribe.com and say what you want. No form, no template. I will get back to you within a month, which is the legal limit, and usually a lot sooner.

    If I handle it badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es. I would rather you told me first and gave me the chance to fix it.

    Children

    Soul Seekers events and this site are for adults. We do not knowingly collect anything from anyone under 14, the age of digital consent in Spain. If you think we have, email me and it goes.

    When this changes

    If we add a tool that touches your data, this page changes in the same breath. The date at the top tells you when it last did. If something changes in a way that actually affects you, we will say so in the newsletter rather than quietly editing a page nobody is watching.

    Questions about any of it: hello@soulseekerstribe.com. Or find me at an event and ask in person, which is more our style anyway. The directory is here.