Privacy Policy

We collect information in the following ways:

• Contact Form Submissions: When you reach out via our contact form, we collect your name, email, phone number, and the message you provide.
• Booking & Payment Data: If you register for an event or course, we process booking details and payment information through our payment provider (Stripe).
• Newsletter Subscriptions: Your email address if you opt in to receive updates.
• Technical Data: IP address, browser type, and pages visited — collected via cookies and analytics tools.

We process your data for the following purposes:

• Responding to your inquiries and providing course/event information.
• Processing bookings, payments, and sending confirmations.
• Sending newsletters and marketing emails (only with your consent).
• Improving our website and understanding how it is used.
• Complying with legal obligations.

Under Article 6 of the GDPR, we rely on the following legal bases:

• Consent: For newsletters, marketing emails, and non-essential cookies.
• Contract: For processing bookings and payments.
• Legitimate Interest: For analytics that help us improve our services.
• Legal Obligation: For record-keeping required by law.

We use cookies to enhance your experience and analyze traffic. You can manage your cookie preferences at any time using the cookie banner or the button below.

We may share data with trusted third-party providers:

• Stripe: Payment processing (PCI-DSS compliant).
• Resend: Email delivery for newsletters and confirmations.
• Google / Meta: Analytics and advertising (only with your consent).

These providers process data under their own privacy policies and act as independent data controllers where applicable.

We retain personal data only as long as necessary for the purposes described in this policy. Contact submissions are kept for up to 24 months. Booking records are retained for 7 years for tax and legal compliance. You may request deletion at any time (see Section 7).

As a data subject, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw Consent: Withdraw consent for marketing or cookies at any time.

To exercise any of these rights, email us at hello@somatherapia.com. You also have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organizational measures to protect your data, including encrypted transmission (TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

Your data may be transferred to and processed in countries outside the EU/EEA (e.g., the United States). We ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.