Privacy Policy
Welcome!
Welcome to somble.com (“Somble” or the “Platform”), provided by Kyltr, Inc., a U.S.-based corporation (“our”, “we” or “us”). Somble is an online marketplace where Fitness and Wellness Creators upload video and audio content, set their own pricing, and offer their content to the world. Users then subscribe to or purchase their favorite Creators workouts.
We are committed to protecting the privacy, confidentiality, and security of the personal data (“Personal Data”) that we hold by complying with the requirements of applicable laws and regulations. We are equally committed to ensuring that all our employees, service providers, and agents uphold these obligations. This policy explains how we manage Personal Data and your rights and choices regarding our processing of your Personal Data.
- “User” or “Users” are those who have made accounts on the platform.
- “Creator(s)” are those who offer content to User’s. a Creator has all platform functionality granted to Users, as well as additional Creator functionality.
- “Content” is offered by Creators and can be for individuals or groups, and is offered on Somble.
- “Live Content” is any class hosted through Somble’s live streaming service.
- “On-Demand Content” is content that is recorded by a Creator and placed in that Creator’s video / audio library for future viewing / listening by a User.
Contact details of data controller (as defined in applicable regulations):
E-mail: team@somble.com
Data Protection Contact: team@somble.com
Information we collect on Somble
We collect and process the following Personal Data about you, and provide the reasons for collecting and the retention period we hold this data below. We do not share, sell, rent or trade Personal Data with third parties for their commercial purposes, except when you have consented.
Personal information processed by Somble - If you use Somble as a User or Creator, we process the following data as the data controller:
- For all Users and Creators:
- Account and profile information. This is data that all Users and Creators provide when creating a Somble account and profile, in order for us to carry out the establishment of the account and granting access to the Platform. This can include:
- Email address
- User name
- Password
- Profile photo
- Biography
- Phone Number
- First Name
- Last Name
- For Users:
- A User is anyone who makes a profile, but does not have the ability to post content as they have not completed the Creator sign-up flow. User’s consume live and on-demand content from Creators. In order to consume this content, Users must create a profile (as above).
- In order to pay a Creator, you must provide additional information to Stripe, our payment processor. This additional information includes:
- First and last name
- Credit card details (Somble does not receive your full credit card number)
- We collect usage information including how many Somble classes a User has joined, which Creators you attend Classes with, and how often you attend Classes.
- We collect aggregated Class-level analytics for each User.
- For Creators:
- A Creator is someone who creates, schedules, streams, and hosts free or paid Content through the Platform. To become a Creator, you must create a profile (as above)
- In order to receive payments from your Users you must provide information to Stripe, our payment processor. This additional information includes:
- Your date of birth
- Email address
- Home address
- Phone number
- Last four digits of your Social Security number
- Some basic business details
- Full social security number (in some cases)
- A copy of your official ID (in some cases)
- Somble does not have access to this information, but can request date of birth, home address and phone number, if needed, for identification purposes.
- In order to receive payouts from Stripe, you will need to provide bank account information to them. This information includes:
- Routing number of a US bank
- Account holder name
- Account number of a US bank account
- Account holder full name
- Account type (individual or business)
- Payment and payout data is held for as long as you have business terms with Somble. Somble does not have access to this information, but does receive an identifier containing the bank name, routing number and last four digits of the account number, and Somble can request account holder name and account type on a user if required.
- We collect aggregated Class-level analytics for each Creator.
- We may collect your social media handles for your Twitter, Instagram and Facebook profiles
- Information automatically collected by Somble: You can visit Somble without telling us who you are. For technical reasons, however, we collect the following data that your browser transmits to our server when you are navigating the site or through some third party providers:
- IP address
- date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- amount of data transferred in each case
- Website from which the request originates
- browser
- operating system and its interface
- anonymous website activity logs
- language and version of the browser software
- We use this data for the legitimate interest of displaying our website to you and providing stability and security in the operation of our website.
- We collect / process Personal Data about you in the following ways:
- When you register for Somble or consent to receive emails from us
- When you create an account and profile on Somble
- When you book or pay for content
- When you order services from us
- When you submit a query or request to us
- When you message or email us, such as for technical or other reasons
- When you respond to a survey that we run or fill in forms on one of our websites
- By tracking your use of our websites
- When you create content such as appearing in content, live video, audio or messages to Creators or Somble
How we use your personal data
We use Personal Data that we collect about you for the following purposes and on the following legal bases:
- When you provide us with consent to the processing of your Personal Data for one or more specific purposes.
- When there is a legitimate interest, meaning the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. Examples:
- Handling contact and user support requests
- When adding live content to your calendar
- To improve our website and content based on your information and feedback
- To carry out market analysis and research
- To monitor the use of our products and services
- To assess, maintain, upgrade and improve our products and services
- To carry out education and training programs for our staff
- To manage and resolve any legal or commercial complaints or issues, or to prevent fraud and abuse on the Platform
- To carry out planning and forecasting activities and other internal business processes
- In the performance of a contract with us. This means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. Examples:
- To verify your identity when you are dealing with us
- To provide the Platform, including the Content, to you
- To allow you to sign in to your account
- To allow you to join Live Content
- To process payments through our third party payment processor
- To send you emails regarding your confirmed Live Content, or other emails that are transactional in nature
- By agreeing to these terms, you consent to receiving marketing materials from us, to send you marketing materials about products or services that we think you may be interested in (including in some cases products and services that are provided by a third party). We may use your following Personal Data for the purpose of direct marketing.
- identifying information, such as your name and date of birth
- contact information, such as your postal address and email address
- products and services portfolio information and demographic data held by us from time to time
- By agreeing to these terms, you consent to receiving marketing materials from Creators whose content, classes or memberships you purchase or otherwise gain access to, to send you marketing materials about products or services that they think you may be interested in (including in some cases products and services that are provided by a third party). They may use your following Personal Data for the purpose of direct marketing.
- identifying information, such as your name and date of birth
- contact information, such as your postal address and email address
- products and services portfolio information and demographic data held by us from time to time
- You can revoke your consent at any time in the following ways:
- Click the “Unsubscribe” button in the emails you receive from us
- Sending an e-mail to team@somble.com
Sharing of personal information
- Information We Share: We may share Personal Data about you only if it is necessary for the purposes described above and only on a legal basis. We might share your Personal Data with:
- Your representatives, advisers, and others you have authorized to interact with us on your behalf
- Our staff who need the information to discharge their duties
- Creators and other third parties in order to fulfill the services
- Payment system operators and financial institutions in order to fulfill the services
- Government authorities who ask us to disclose that information, or to other people as required by law
- Information We Share with Third Parties: We use external service providers for processing of some Personal Data. Within the framework of a contract for data processing, these service Providers have committed themselves, among other things, to observing appropriate technical and organizational measures for data security and act in accordance with instructions on our behalf. Our main service providers are listed below but are subject to change. We never sell your Personal Data to third parties.
- Amazon Web Services, INC. (AWS), USA We use AWS to handle our infrastructure, hosted on AWS virtual servers. Our On-Demand Content is also stored on AWS. We use Amazon Chime as our online video and audio streaming technology. For more information, please read their Privacy Policy.
- GSuite(Google Apps), for all email, documents, forms, and spreadsheet creation.
- Mixpanel for our analysis and tracking needs. Privacy policy is here.
- Mailchimp for email automation and contact management.
- Google Analytics for the legitimate interest of analyzing the use of our website. Our analytics service provider generates statistical and other information about website use by means of cookies. Google Analytics is present on the website and software through the means of Google Tag Manager which through its code snippet delivers the Google Analytics cookie. You can read more on Google cookies in the Cookies subsection of the Privacy Policy. Google Analytics’ privacy policies are available here. The information generated by the cookie about your use of our website (including your anonymized IP address) will be transmitted to and stored by Google. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
- Stripe, USA We use Stripe as our payment processing service. Stripe allows Users to pay for their Classes and allows Creators to receive funds. Somble does not collect or store payment card numbers and all transactions are processed by Stripe. Information collected by Stripe, including full payment card information, is governed by rigorous data protection standards that apply to the payment card industry. For more information on how Stripe processes your data, please refer to their Privacy Policy. We may also share data with third parties when necessary in order to comply with a legal or regulatory obligation.
- Information Shared with Creators: When you sign up for On-Demand or Live Content with a Creator, or join a Creators Membership, the following information is shared with that Creator, as stated in our Privacy Policy:
- Your name
- Any messages you send to Creators through Somble
- Your image and audio, during live content (live content can be recorded, and your video and audio may be recorded depending on the Creators preferences)
- Anything you state or show on the shared screen during the live stream.
- Your email address
- Your Membership Details
- Platform usage metrics relevant to the Creator, such as classes attended, videos watched, and the last time you viewed a program.
- What Creators can do with a Users information: By signing up for Somble and agreeing to the Terms of Service and Privacy Policy, a User consents to have their email shared with
- If you (or any User or Creator) choose to engage in public activities on Somble, you do so at your own risk. You should be aware that any information you share may be read, seen, photographed, recorded and subsequently used by other Users (Including Creators) without our consent. You should therefore use caution in disclosing Personal Data. We are not responsible for the information you choose to submit in these situations.
- Information We Share with the Public: The following information is publicly available to visitors to the Platform, as well as Users, as per our Terms:
- Creator name, picture and Somble profile
- Live Content being recorded for the On-Demand content library. Creators have the option to record their Live Content. These videos may record the audio, images or video of Users and Creators. This may lead to recordings containing Personal Data. Users will be alerted via visual cues when live content is being recorded. After live content is recorded, it is stored on our Somble cloud, hosted by Amazon Web Services, and may be viewed by other Users. We have robust and validated access controls to prevent unauthorized access to content recordings saved to the Somble cloud. Creators have the option to download recordings of their live content to be uploaded as on-demand content. When a Creator chooses to store a recording locally, Somble does not have control over the recording. Somble holds recordings of live content for as long as the Creator has an account with Somble.
Retention of your personal data
We retain your Personal Data for a period of time consistent with the original purpose of collection. We determine the appropriate retention period for Personal Data on the basis of the amount, nature, and sensitivity of your Personal Data, the potential risk of harm from unauthorized use or disclosure, and whether we can achieve the purposes of the processing through other means, as well as the applicable legal requirements (such as statutes of limitation).
After the retention period ends, your Personal Data will be deleted. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of the data.
Device and storage data we process
Cookies - We use cookies for the legitimate interests of monitoring and observing your use of our websites, compiling aggregate data about that use, and providing you with a more effective service on Somble. "Cookies" are small text files that a website saves on your computer or device when you visit the site. This small text file enables a site to remember your actions and preferences for a specified period of time so you don’t have to re-enter your login or settings information each time you visit a new page on Somble. We don’t use cookies for any purposes other than those described here. We also include web beacons in the emails we deliver to you. We use the data from those web beacons to understand the aggregate open rate of emails we send to our users.
Types of Cookies Used - We currently use the following cookie types:
- Security / Authentication: Somble uses some necessary cookies which are vital to ensuring that Somble works properly for visitors and Users, such as maintaining the security, safety and integrity of the Platform, authentication and logging in (including remembering permissions and consents you have granted) and ensuring the ability to securely complete transactions.
- Performance / Analytics and Research: Some technologies help provide performance data on how Somble is functioning in order to make improvements to it. Data collected on site functionality and speed, how Somble is used and detecting and gathering reporting on bugs helps improve the Platform. Some third-party cookies collect and analyze information about your use of Somble and report on activities and trends. Our analytics cookies are from OST, as well as Google Tag Manager, Google Analytics, and Google Optimize, Google Ads, and Pixels from Facebook.
- Preferences / Localization: Cookies enable your personalized views and settings, and provide localized experiences. If you have any specific questions on the cookies we are using please do not hesitate to contact us.
- Advertising Cookies: We use third party advertising cookies to present you with Somble advertising while on other websites, as well as for retargeting.
How to manage cookies - Most internet browsers have an option to allow you to disable cookies altogether – please refer to your browser’s help menu to find out how to do this. You may always go to your browser history settings and clear your cookies. You also typically have the ability to accept or decline cookies by modifying the settings in your browser. If you choose to disable cookies, you may still use Somble, however you may have limited access to some areas. Additionally, you may use the following tools in order to opt-out from certain cookies:
- https://tools.google.com/dlpage/gaoptout - for Google Analytics cookies
- https://optout.aboutads.info/?c=2&lang=EN in the USA
- https://youradchoices.ca/ in Canada
- https://www.youronlinechoices.com/ in EU
International transfer of information collected
Your Personal Data may be collected, transferred to and stored by us in the United States and by our affiliates in other countries where we operate. Therefore, if you are an EU data subject, your Personal Data may be processed outside the EEA, and in countries which are not subject to an adequacy decision by the European Commission and which may not provide for the same level of data protection in the EEA. In this event, we will ensure that such a recipient offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of data as approved by the European Commission.
Your rights relating to your personal data
- Your data rights - Users in certain locations may have rights, including those under the EU General Data Protection Regulation 2016/679 (“GDPR”), the California Consumer Privacy Act (CCPA) or other analogous legislation in other jurisdictions regarding data that Somble controls as a Controller under the GDPR, CCPA or similar (“Personal Data”), including:
- To request access to Personal Data that we may process about you (right to access);
- To require us to correct any inaccuracies in your data, free of charge (right to rectification);
- To erase/delete your Personal Data to the extent permitted by other legal obligations (right to erasure; the right to be forgotten);
- To restrict/oppose our processing of your Personal Data (right to a restriction of processing/right to object);
- To transfer your Personal Data to another controller to the extent possible (right to data portability);
- Where we process your Personal Data for direct marketing purposes (after explicit opt-in) or share it with third parties for their direct marketing purposes, to object at any time to this processing without giving a specific reason, including to opt out of the sale of Personal Data;
- Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects ("Automated Decision-Making"; Automated Decision-Making currently does not take place on our websites);
- To withdraw your consent at any time, without affecting the lawfulness of the processing based on such consent before its withdrawal.
- We do not discriminate against Users or Creators who exercise their privacy rights. If you submit a request to exercise your privacy rights, you may be asked to verify the request by logging into your Somble account. If we are unable to verify your request, then for your protection, we reserve the right to deny the request. In certain cases, we may charge you an administration fee for providing you with access to the information you have asked for, but we will inform you of this before proceeding. There may be cases where we aren’t able to provide the information you request, such as where it would interfere with the privacy of others or result in a breach of confidentiality. In these cases, we will let you know. Even if you do not request access to and/or correct your Personal Data held by us, we may take reasonable steps to correct Personal Data that is inaccurate, incomplete, out-of-date, irrelevant or misleading.
- How to exercise your rights - To exercise your rights, please contact us in accordance with the “Contact Us” section below. If you want to exercise your right to have us stop processing your Personal Data for direct marketing purposes, you can do this via the Unsubscribe link present in every email from us, or directly via email, in which case you should put your request in writing (an email with a header that says 'Unsubscribe'); provide us with enough information to identify you, and if your objection is not to direct marketing in general, but to direct marketing by a particular channel, please specify which channel.
Deleting your account
If you no longer want to use Somble, and would like to delete your account, please reach out to us at team@somble.com. Once your account is deleted, your profile will be removed from the Platform and we may delete all of your Personal Data.
Storage and security of personal data
The security of your Personal Data is important to us. We generally store the Personal Data that we collect in electronic databases, some of which may be held on our behalf by third party data storage providers. Sometimes we also keep hard copy records of this Personal Data in physical storage facilities.
Somble’s systems do not access your full credit card number. We use a range of physical and technical security processes and procedures to protect the confidentiality and security of the information that we hold, and we update these from time to time to address new and emerging security threats that you become aware of.
We also take steps to monitor access to and modification of your information by our staff, and ensure that our staff is aware of and properly trained in their obligations for managing your privacy.
As a User or Creator of the Platform, you can help prevent unauthorized access to your account and information by choosing a strong and unique password which is stored in a password manager.
Please do not engage in any behavior that endangers the security of our website and Users. This prohibited behavior includes items described in our Terms as well as the following list, which is not exhaustive:
- Illegal activities
- Distribution of others’ Personal Data, including Users distributing Personal Data of other Users
- Spam/Malware
- Service Degradation
- Data Mining
- Reverse Engineering
If you do engage in these behaviors or otherwise endanger the security of the Platform or Somble website, or Users, we may terminate your Somble account.
Children
Our websites and Services are not directed at children under 13, and children may not create an account or otherwise use Somble.
California residents
California residents may be entitled to obtain information about Personal Data. The California Consumer Privacy Act (CCPA) allows California residents to request access to the specific pieces and categories of Personal Data that the business has collected about the consumer, the categories of sources for that information, the business or commercial purposes for collecting the information, and the categories of third parties with which the information was shared. Somble provides you the right to access your Personal Data by emailing us at team@somble.com.
California residents also have the right to submit a request for deletion of information at team@somble.com.
"DO-NOT-TRACK” TECHNOLOGIES
We do not respond to browser “Do-Not-Track” signals.
Complaints
We try to meet the highest standards in order to protect your privacy. However, if you are concerned about the way in which we are managing your Personal Data and think we may have breached any applicable privacy laws or any other relevant obligation, please contact us using the details set out below.
We will make a record of your complaint, will deal with the matter as soon as we can, and keep you informed of the progress of our investigation.
If we have not responded to you within a reasonable time or if you feel that your complaint has not been resolved to your satisfaction, you are entitled to make a complaint to the proper authorities.
Contacting us
This policy is part of Somble’s Terms. If you need any further information from us on privacy matters, please contact our privacy compliance team at team@somble.com, call us at 888-317-6377, or mail us at the below address:
Address
137 Sullivan Street, New York, NY 10012
If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA, you have the right to lodge a complaint with the competent supervisory authority.
Changes to the policy
We periodically update this Privacy Policy. If we make materially different changes that affect your rights under this policy, we will notify you via email. Continuing to use the Platform after a change to this policy means you accept the new policy.