This policy explains exactly what GGS Studio collects when you use this website, why we hold it, who else can see it, and what you can ask us to do with it. We only collect what a booking actually needs. We do not sell your information, we do not run advertising trackers, and we do not profile you.
GGS Studio is a recording studio at Manson Trading, Looc, Lapu-Lapu City, Cebu, Philippines. For anything covered by this policy we are the personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173).
Reach us at contact@ggsstudio.site or +63 976 350 6301.
Everything below is collected because a specific part of booking or paying for a session needs it. Nothing here is optional-but-collected-anyway.
| What | Why we need it |
|---|---|
| Account details: your name, email address, and password. A phone number if you choose to add one. An account is optional: you can book without one. | To create your account, sign you in, attach bookings to you, and contact you about a session. Passwords are stored only as a salted hash by our authentication provider: we never see or store the password itself. |
| Booking without an account: the name, email and mobile number you type on the booking form, plus a random identifier and a random key generated by your browser and kept in its local storage. We store the identifier and only a one-way hash of the key. | To hold the booking in your name, and to let that browser prove a booking is yours so you can view, reschedule, or cancel it without signing in. The identifier is not linked to advertising and is never shared. If you later sign in or register with the same email address, those bookings move into your account. Clearing your browser's site data erases both values, and with them that browser's access to those bookings. |
| Booking details: the date, start and end time, the room, the add-on services you picked and how many units of each, the calculated price, the booking status, and any note you or our staff add. | To hold the slot, price the session correctly, and manage changes, cancellations, and the studio calendar. |
| Valid ID: only when you choose to pay at the studio: which kind of ID it is, the last four characters of its number (we never store the full number), and a photo of the front. Before you send it, your own device reads the photo to check that your name and the number appear on it; that text never leaves your device, and only the yes or no results are sent to us. | To make an unpaid booking hard to fake and to recognise you on arrival. The photo sits in a private, access-controlled bucket that only you and studio staff can open, and it is deleted automatically a set number of days after your session (30 by default). Staff can delete it sooner. After that only the check result remains. |
| Payment records: the amount, the payment option (cash, downpayment, or full), the channel used (GCash, GoTyme, or BPI), the reference number you enter, your uploaded receipt image, and whether staff verified or rejected it (with the reason). | To confirm your booking, keep an accurate record of what was paid, handle refunds, and meet our bookkeeping and tax obligations. We never see or store your card number, bank login, or e-wallet password. |
| Emails with the studio: copies of the booking emails we send you, and any email you send to our studio addresses. | So any staff member can see what you were told and reply to you from the studio address, without sharing a password. |
| Mailing list: your email address (and name, if given), only if you ticked the box when booking, signed up in the website footer, or asked us to add you. | To send occasional studio news and offers. Every email has a one-click unsubscribe link, and we never add anyone who did not ask. |
| Reviews: the star rating, comment and photos you choose to send through the review link we email after a session. | To learn how sessions went. If we feature a review on the website, it shows your first name and last initial only (for example "Bea V."), never your email or phone. |
| Chat assistant messages: what you type into the help chat at the bottom-right of the site. | To answer your question. See section 4 for exactly what leaves our systems when a question is complex enough to need our AI provider. |
| Technical records: your sign-in session token (kept in your own browser's local storage), plus standard server logs such as IP address, timestamps, and error traces held by our hosting provider. | To keep you signed in, to keep the service secure, and to diagnose faults and abuse. We do not use advertising cookies, analytics pixels, or cross-site trackers. |
Inside the studio, only GGS Studio staff and administrators can see customer records, and only through the staff dashboard. Access to the database is restricted per-account by row-level security, so a signed-in customer can only ever read their own bookings, payments, ID photo, and receipts. Uploaded ID photos and receipts sit in private storage and are opened by staff through short-lived links, not permanent public URLs.
Outside the studio, we share only what a service needs to do its job:
| Provider | What they process |
|---|---|
| Supabase: database, sign-in, file storage, and server functions. | All of the data in section 2. This is where your information actually lives. |
| Google (Google AI Studio / Gemini): the chat assistant. | Only your chat messages, your first name, and a summary of your own bookings. Your email address, phone number, password, ID photo, and receipt images are never sent. |
| Resend: our email provider. | Your email address and the contents of the emails we send you, and of any email you send to our studio addresses. |
| GitHub Pages: hosting for this website. | Standard web request logs. No booking or account data is stored there. |
| PayMongo: card and e-wallet checkout, currently switched off. | Nothing at present. If online card/e-wallet checkout is re-enabled, the amount and a booking reference would be sent to them to process the payment. Any card details would be entered on their page, never ours. |
We may also disclose information where the law requires it: for example a lawful order from a court or government agency. We do not sell, rent, or trade your personal information, and we do not share it for advertising.
The help chat at the bottom-right of the site answers most questions on its own, using information the page already has: our published rates, opening hours, our booking and payment policy, and, if you are signed in, your own bookings. Those answers never leave your browser and are not sent anywhere.
When a question is too open-ended for a prepared answer, we forward it to Google's Gemini model to write a reply. In that case we send: the recent messages in that conversation, your first name, and a short summary of your own bookings (room, date and time, status, total, add-ons, and payment state). We do not send your email address, phone number, ID photo, or receipt images. Our API key stays on our server and is never exposed to your browser.
The assistant is limited to GGS Studio topics and cannot make, change, cancel, or pay for a booking: only you can, through the booking form and the My Bookings page. Its answers are a convenience and are not a binding quotation; the price shown on the booking form, and the terms you accept when you book, are what govern your session. Please do not type sensitive personal details, passwords, or card numbers into the chat.
You can delete your account yourself from your Profile page, or ask our staff to do it. Deleting an account permanently erases your login, your personal details, and any ID photos and receipts you uploaded.
Past sessions themselves are kept for the studio's books, but are anonymised: they stay on record as walk-in bookings with no link back to you. This is deliberate: we cannot delete a financial record we are required to keep, so we strip the personal information out of it instead. Deletion is refused only while you still have an upcoming session on the calendar or money that has not been refunded; resolve those first, or ask us and we will sort it out with you.
As a data subject under RA 10173 you have the right to:
To exercise any of these, email contact@ggsstudio.site. We will respond promptly and, where a request needs more work, within the periods set by law. If you are not satisfied with our response, you may complain to the National Privacy Commission (privacy.gov.ph).
No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the National Privacy Commission as the law requires.
This site is not intended for children under 13, and we do not knowingly create accounts for them. Minors should book through a parent or guardian, who is responsible for the booking and for everyone they bring to the session. If you believe a child has given us personal information, contact us and we will remove it.
If we change how we handle your information we will update this page and move the "last updated" date at the top. Where a change is significant, we will say so the next time you sign in or book.
Questions, requests, or complaints about your information: contact@ggsstudio.site · +63 976 350 6301 · Manson Trading, Looc, Lapu-Lapu City, Cebu.
See also our , which cover booking, payment, cancellation, and studio rules.