Privacy policy

Who handles your information

Core Movement Group, Inc., operating as Somma Studio, is responsible for personal information we use to manage studio enquiries, purchases, memberships, and bookings. This notice covers our website and studio booking services.

Information we use and why

We use the contact and account details you provide, your purchases, bookings and attendance, payment status and transaction references, and communications with the studio to answer enquiries, deliver services, administer memberships, reconcile payments, and resolve concerns.

Our website and service providers may receive technical information such as IP address, browser and device details, page visits, referral links, and campaign identifiers. We use this to operate the website, understand usage and advertising performance, and protect services against misuse.

If you provide health or injury information for class participation, we use it to discuss suitability and adapt instruction. We seek specific consent where required for sensitive information. Please share only what is relevant.

Basis for processing

We process information as needed to respond to your requests and perform our agreement with you, meet legal obligations, and pursue legitimate interests such as service administration, security, and improvement where these do not override your rights. Where consent is required, including for sensitive information or particular marketing activities, we seek it separately. This notice itself is not a request for consent.

Booking, payments, and other recipients

Authorized studio staff and instructors receive information needed for their work. We use Rezerv for booking and account management, payment providers including Xendit for transactions, and service providers for hosting, communications, analytics, and advertising measurement. We may also disclose information where required by law or to handle a dispute.

Card details are entered through the booking/payment provider’s checkout, rather than a card form hosted by this website. Providers may use automated fraud checks and bank authentication that can decline a transaction. Contact us if a legitimate payment is declined so we can raise it with the provider.

Providers may process information outside the Philippines. We remain responsible for personal information under our control and require appropriate safeguards for processing on our behalf. See Rezerv’s privacy policy and Xendit’s privacy policy for their practices.

Cookies, analytics, and advertising

Our public website uses Google Analytics and Meta Pixel to measure visits, interactions, and advertising performance. These tools may use cookies and similar identifiers and send browsing and device information to Google and Meta. They currently load automatically on public production pages; this website does not currently provide a cookie-consent preference panel.

We also store campaign parameters in your browser tab’s session storage and pass them to Rezerv to attribute bookings and purchases. Embedded booking services may use their own cookies and tracking. You can block or clear cookies using browser settings and manage advertising preferences with Google and Meta; blocking cookies may affect booking functionality.

Contact us to object to processing or withdraw consent where processing relies on consent. You can ask us to stop promotional communications without stopping essential booking or transaction messages.

Retention and security

We retain account, booking, and communication records for as long as needed to provide services and resolve enquiries or disputes. Payment and accounting records may need to be kept longer to meet legal requirements. When information is no longer needed for these purposes, we delete or anonymize it. Contact us for retention information about a particular record.

We use reasonable organizational and technical safeguards and limit access according to work responsibilities. No online service is entirely risk-free. Never send passwords, full card details, or one-time authentication codes to the studio.

Your privacy rights

Subject to applicable law, you may request access, correction, erasure or blocking, and portability of your personal information; object to processing; or withdraw consent. You may also seek damages where applicable and file a complaint with the National Privacy Commission.

Send privacy requests to hello@sommastudio.co. We may need proportionate identity verification before releasing or changing records. We will explain any legal reason that prevents us from fulfilling a request.

Contact the studio

Somma Studio is operated by Core Movement Group, Inc.

Email: hello@sommastudio.co
Phone: +63 917-184-5992