This Privacy Policy describes how A. Corona Strings (“Corona Strings,” “we,” “us,” or “our”) collects, uses, and protects information when you use coronastrings.com (the “Site”), in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
1. Who we are
Corona Strings is a Filipino violin atelier based in Marikina, Metro Manila, Philippines. For data-protection enquiries the Personal Information Controller can be reached at privacy@coronastrings.com.
2. What we collect
We collect only what we need:
- Email address — when you subscribe to our newsletter, request the Buying Guide, or sign up for one of our Coming Soon segments (Shop, Services, Lessons).
- Name and OAuth profile data — when you sign in with Google or Facebook. We receive your display name, email, and profile photo URL.
- Practice statistics — when you use our practice tools while signed in. Includes session duration, exercise difficulty, and accuracy. No audio is ever collected; the tuner processes your microphone input locally in your browser only.
- Contact form submissions — name, email, and the message you write us.
- Usage data — anonymous analytics (page views, referrer, country) collected via privacy-first analytics (Plausible or Vercel Analytics). No personal identifiers, no cross-site tracking, no advertising cookies.
3. Why we collect it
- To deliver the Buying Guide and other content you request.
- To create and manage your account, save your tool settings, and track your practice progress.
- To send you occasional emails about Corona Strings — only on the segments you signed up for. You can unsubscribe at any time.
- To respond to your messages.
- To improve the Site and tools using anonymous traffic data.
4. Who we share data with
We do not sell or rent your personal data. We use a small number of trusted service providers to operate the Site:
- Vercel — hosting and content delivery (United States).
- Supabase — database and authentication (United States / European Union).
- Auth.js / Google / Facebook — for social login flows you initiate.
- Resend — transactional and newsletter email delivery (United States).
- Sanity — content management for our blog and articles (European Union).
- Plausible / Vercel Analytics — privacy-first analytics. No personal identifiers leave the browser.
Some of these providers are based outside the Philippines. By using the Site, you consent to your data being processed in those jurisdictions, with the same standard of protection.
5. Your rights under the Data Privacy Act
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data (the “right to erasure”).
- Withdraw consent at any time.
- Object to processing, request data portability, and lodge a complaint with the National Privacy Commission.
To exercise any of these rights, email privacy@coronastrings.com. We’ll respond within 15 working days.
6. Data retention
We keep your data only as long as needed for the purposes above. If you close your account, we delete your personal data within 30 days, except where we’re required by law to retain certain records (for example, financial records under BIR rules once Phase 2 commerce launches).
7. Security
All traffic is encrypted in transit (HTTPS). Personal data at rest is protected by Supabase’s Row Level Security and standard cloud security practices. Access to production data is limited to the owner. We have a documented breach response plan; in the event of a breach affecting your data, we will notify you and the National Privacy Commission within 72 hours of becoming aware.
8. Children
The Site is not directed at children under 13. If you believe a child has provided personal data without parental consent, email us and we’ll delete it.
9. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be announced on the Site and via email where appropriate.
10. Contact
Privacy questions: privacy@coronastrings.com.
General contact: hello@coronastrings.com.
Corona Strings · A Filipino violin atelier based in Marikina.