WORLD BUILDER — PRIVACY POLICY
Rebel Wonderland
Last updated: October 28, 2026
1. Introduction
This Privacy Policy explains how Rebel Wonderland, operating under the brand Rebel Wonderland, collects, uses, stores, and protects personal data in connection with the purchase and use of World Builder.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.
2. Data Controller
The data controller responsible for personal data processed in connection with World Builder is:
Rebel Wonderland
Registration Number: 880804-0029
Business Address: Upplandsgatan 77A, 113 44 Stockholm
Email: mikaela@rebelwonderland.com
Website: www.rebelwonderland.com
3. Personal Data We Collect
Depending on the purchase and delivery process, we may process:
Identity and contact information: Name, email address, business name, and contact details provided during checkout.
Purchase and billing information: Order details, purchase date, amount, applicable taxes, payment status, transaction references, and billing information.
Delivery information: The email address used to send the automated access email and relevant delivery or support records.
Communications: Questions, access requests, support inquiries, and correspondence relating to World Builder.
Technical information: Information processed by Squarespace and other service providers when visitors access the website or password-protected program page, which may include IP addresses, browser information, device information, cookies, and access logs.
Payment card details are handled by the payment provider. Rebel Wonderland does not store complete payment card numbers.
4. Purposes and Legal Bases
We process personal data for the following purposes:
Purchases and payments
To process purchases, provide receipts, manage payments, and administer orders.
Legal basis: performance of a contract, legitimate interests in fulfilling contracts with business customers, or legal obligation, as applicable.
Digital delivery
To send the automated email containing the World Builder access link and password.
Legal basis: performance of a contract or legitimate interests in fulfilling the agreement with the purchasing business.
Maintaining access
To retain the contact and purchase information reasonably necessary to provide updated access details if the password, website address, or delivery method changes.
Legal basis: performance of a contract or legitimate interests, as applicable.
Customer support
To respond to questions and resolve access or delivery issues.
Legal basis: performance of a contract or legitimate interests.
Accounting and legal compliance
To maintain required accounting records and comply with tax and legal obligations.
Legal basis: legal obligation.
Website security and operation
To maintain website functionality, security, and reliable delivery of digital content.
Legal basis: legitimate interests or other applicable legal bases, depending on the processing.
5. Access to World Builder
World Builder is hosted on a password-protected Squarespace page.
Access is provided through a link and password sent automatically by email after purchase.
The program does not require individual course accounts or personal login profiles.
Rebel Wonderland does not use a course learning management system to track individual lesson completion or participant progress.
Clients complete their exercises and create their blueprints independently.
Completed blueprints are not routinely submitted to or stored by Rebel Wonderland.
Squarespace may nevertheless process technical information relating to visits to the password-protected page as part of its website hosting and security functions.
6. Sensitive Personal Data
We do not intentionally request special categories of personal data under GDPR, such as health information, religious beliefs, or political opinions.
Clients should avoid including unnecessary sensitive personal information in support requests or other communications.
7. Third-Party Service Providers
We may use external providers to operate World Builder, including services for:
Website hosting and password-protected content delivery, including Squarespace.
Payment processing.
Automated transactional emails.
Customer support and business communication.
Accounting and administration.
Website security and related technical functions.
These providers receive only the information reasonably necessary for their functions.
Where providers act as data processors, appropriate data processing agreements are maintained as required by GDPR.
8. International Data Transfers
Some service providers may process personal data outside the EU/EEA.
Where international transfers occur, we rely on appropriate mechanisms under GDPR, such as adequacy decisions or the European Commission’s Standard Contractual Clauses, together with supplementary measures where required.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy.
Purchase and access entitlement information
Because World Builder includes lifetime access, information necessary to identify a purchase and maintain the Client’s access entitlement may be retained for as long as that access is provided.
This allows Rebel Wonderland to assist with access issues and communicate changes to passwords, links, or delivery arrangements.
Automated delivery records
Records relating to delivery emails may be retained as reasonably necessary to verify delivery, resolve technical issues, and administer the purchase.
Customer support communications
Support correspondence is retained only as long as reasonably necessary to resolve requests, administer the service, and address potential disputes.
Accounting records
Accounting information is retained according to Swedish accounting legislation, generally for seven years following the end of the calendar year in which the financial year ended.
Technical website data
Technical data processed by Squarespace or other service providers is subject to applicable retention arrangements and the purposes for which it is collected.
When personal data is no longer needed, it is deleted or anonymized unless a legal obligation or another valid legal basis requires continued retention.
10. Access and Data Deletion
Clients may request deletion of personal data, subject to applicable GDPR conditions and legal retention obligations.
Because World Builder does not use individual course accounts, deleting a purchaser’s contact or transaction information does not automatically revoke access to the shared password-protected page.
However, deletion of contact information may affect our ability to verify a previous purchase or provide updated access credentials in the future.
Where relevant, we will explain these consequences when responding to a deletion request.
11. Marketing Communications
Service-related emails, including purchase confirmations, access instructions, and important changes to World Builder access, may be sent as necessary to provide the purchased service.
Promotional marketing communications are handled separately and in accordance with applicable marketing and data protection laws.
Where consent is required, promotional emails will be sent only with valid consent.
Recipients may unsubscribe from marketing emails through the provided unsubscribe mechanism or by contacting us.
12. Cookies and Website Technologies
The Rebel Wonderland website and password-protected World Builder page may use cookies or similar technologies through Squarespace or other integrated services.
These technologies may support essential website functions, security, and other purposes.
Where consent is required for non-essential cookies or tracking technologies, consent will be requested in accordance with applicable law.
Additional information about website-wide cookies may be provided through a separate cookie policy or cookie consent interface.
13. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, loss, alteration, and misuse.
Access to personal data is limited according to operational need.
The password-protected program page is an access-control measure for the educational content, rather than an individual customer account system.
14. Your Rights
Subject to applicable GDPR requirements, you may have the right to:
Request access to your personal data.
Request correction of inaccurate information.
Request deletion of personal data.
Request restriction of processing.
Object to processing based on legitimate interests.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
These rights are subject to legal conditions and exceptions, including mandatory recordkeeping requirements.
To exercise your rights, contact mikaela@rebelwonderland.com
15. Complaints
You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority.
Website: www.imy.se
16. Updates to This Policy
We may update this Privacy Policy to reflect changes in World Builder, our technical systems, or applicable legal requirements.
The latest version will be made available through the Rebel Wonderland website.
17. Contact
Rebel Wonderland
Registration Number: 880804-0029
Business Address: Upplandsgatan 77A, 113 44 Stockholm
Email: mikaela@rebelwonderland.com
Website: www.rebelwonderland.com