RIFORMA STUDIO PRIVACY POLICY

Effective Date: June 2026

SECTION 1: INTRODUCTION

Riforma Studio, Inc. ("Riforma Studio," "Riforma," "we," "our," or "us") respects your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information obtained through our website, mobile application, booking platform, studio operations, memberships, class packages, private sessions, workshops, events, retail sales, marketing activities, employment inquiries, and any other services we provide.

This Privacy Policy applies to information collected through: our website located at www.riformastudio.com; our mobile application and booking platform; in-person interactions at our studio; communications by email, telephone, text message, social media, and other digital channels; workshops, events, promotions, and community activities; employment, instructor, contractor, and business-related inquiries; and any other products or services offered by Riforma Studio.

By accessing our website, using our mobile application, booking services, purchasing memberships or products, attending classes or events, applying for employment, or otherwise interacting with Riforma Studio, you acknowledge the practices described in this Privacy Policy.

SECTION 2: INFORMATION WE COLLECT

We collect personal information in three ways: directly from you, automatically when you use our services, and from third parties. The information we collect depends on the nature of your relationship with Riforma Studio and how you interact with our services.

I. Information You Provide Directly

We may collect personal information that you voluntarily provide when creating an account, booking classes or services, purchasing memberships, packages, workshops, events, or retail products, completing waivers and forms, communicating with our staff, participating in surveys or promotions, submitting reviews or testimonials, applying for employment or instructor opportunities, or otherwise interacting with Riforma Studio. Depending on the nature of your interaction with us, this information may include your name, email address, telephone number, mailing address, date of birth, emergency contact information, account credentials, membership information, reservation and attendance history, purchase history, communications, feedback, survey responses, testimonials, and other information you choose to provide.

Payment transactions are processed through third-party payment processors and service providers. Riforma Studio does not store complete payment card information on its own servers. Payment information is subject to the privacy and security practices of the applicable payment processor.

Clients may voluntarily provide information regarding injuries, physical limitations, pregnancy, medical conditions, exercise restrictions, fitness goals, or other wellness-related information. Any such information is provided voluntarily and may be used to assist instructors in providing modifications, enhancing participant safety, and delivering a more appropriate fitness experience.

II. Information Collected Automatically

When you visit our website, use our mobile application, access our booking platform, or otherwise interact with our digital services, we may automatically collect information regarding your device and usage activity. This may include your IP address, browser type, operating system, device identifiers, referral sources, session activity, website and application interactions, usage patterns, and general geolocation information. We use this information to maintain security, improve functionality, analyze performance, understand how our services are used, and enhance the overall user experience.

If you use a Riforma Studio mobile application, we may request access to certain device features and permissions, including push notifications, calendar integration, camera functionality, location services, and other permissions necessary to support application features. You may manage these permissions through your device settings at any time.

III. Information From Third Parties

We may receive information from third parties that support our business operations, including scheduling and booking providers, payment processors, analytics providers, advertising and marketing platforms, social media platforms, technology service providers, publicly available sources, referral programs, promotional programs, and other business partners.

IV. Photos, Videos, and Media Information

Riforma Studio may photograph, record, livestream, or otherwise capture images, video, audio, and other media during classes, private sessions, workshops, events, promotional activities, community gatherings, and other studio-related activities. Such media may be used for marketing, advertising, social media content, website content, email campaigns, promotional materials, public relations efforts, educational content, internal business purposes, and other lawful business activities.

Individuals may also voluntarily submit testimonials, reviews, photographs, videos, comments, social media content, or similar materials to Riforma Studio. By voluntarily submitting such content, you authorize Riforma Studio to use, reproduce, display, publish, distribute, and otherwise utilize such content for lawful business, marketing, promotional, educational, and operational purposes, subject to applicable law.

Individuals who prefer not to appear in photographs or recordings may notify studio staff. While we will make reasonable efforts to accommodate such requests when feasible, we cannot guarantee exclusion from group photography, event footage, livestreams, recordings, social media content, or materials that have already been published, distributed, archived, or incorporated into existing marketing materials.

Photographs, videos, recordings, testimonials, and other media may be retained in our archives for as long as reasonably necessary for business, historical, marketing, legal, operational, or other legitimate purposes.

V. SECURITY AND STUDIO MONITORING

To promote the safety, security, and operational integrity of our facilities, portions of our studio may be monitored by video surveillance systems. Surveillance footage may be used for facility security, incident investigation, loss prevention, emergency response, enforcement of studio policies, insurance-related matters, protection of clients and staff, and other legitimate business purposes.

Recordings may be disclosed to law enforcement agencies, insurers, attorneys, government authorities, professional advisors, or other authorized parties when required by law or when reasonably necessary to protect the rights, property, safety, or interests of Riforma Studio, its clients, employees, contractors, guests, or the public.

Security footage is generally retained for a limited period unless longer retention is reasonably necessary for investigations, legal proceedings, insurance claims, security incidents, regulatory requirements, or other legitimate business purposes.

VI. Health and Wellness Information

Any health or wellness information voluntarily provided to us is used solely for operational, safety, service-related, and instructional purposes. Such information may assist instructors in providing exercise modifications, improving participant safety, and delivering a more appropriate fitness experience.

SECTION 3: CATEGORIES OF PERSONAL INFORMATION COLLECTED, DISCLOSED, AND SHARED

California law requires certain disclosures regarding the categories of personal information we collect, use, disclose, and share.

Depending on your interactions with Riforma Studio, we may collect identifiers and contact information, commercial information relating to memberships and purchases, financial information processed by third-party payment providers, internet and electronic network activity information, general geolocation information, audio and visual information, health and wellness information voluntarily provided in connection with fitness activities, emergency contact information, and professional or employment-related information.

We use this information for business, operational, safety, marketing, customer service, employment, legal, and service-related purposes. We may disclose personal information to service providers, payment processors, scheduling providers, technology providers, analytics providers, advertising partners, professional advisors, government authorities, and other parties as described in this Privacy Policy.

We do not sell personal information in exchange for monetary compensation. However, certain uses of cookies, analytics technologies, advertising tools, software development kits (SDKs), and similar technologies may constitute "sharing" under California law.

SECTION 4: HOW WE USE INFORMATION

We use personal information to operate, manage, maintain, and improve our business and services.

Specifically, we may use personal information to:

• Create and manage user accounts;

• Process memberships, reservations, purchases, and transactions;

• Deliver classes, private sessions, workshops, events, and other services;

• Communicate with clients regarding bookings, memberships, purchases, and studio operations;

• Respond to questions, requests, and customer service inquiries;

• Provide instructor modifications and support safe participation in fitness activities;

• Verify identities and maintain account security;

• Administer promotions, contests, giveaways, referral programs, and special offers;

• Conduct marketing and advertising activities;

• Analyze website, application, and business performance;

• Improve our services, customer experience, and operational efficiency;

• Develop new programs, products, and offerings;

• Detect, investigate, and prevent fraud, misuse, security incidents, and unauthorized activity;

• Protect the safety and security of clients, staff, and studio property;

• Enforce our policies, agreements, and terms;

• Comply with legal obligations; and

• Exercise and defend legal claims.

SECTION 5: NOTICE TO CALIFORNIA RESIDENTS

At or before the time personal information is collected, California residents are entitled to notice regarding the categories of personal information collected, the purposes for which such information is used, and our retention practices.

Riforma Studio collects and uses personal information for business, operational, safety, legal, marketing, employment, and service-related purposes as described throughout this Privacy Policy. The categories of personal information we may collect include identifiers and contact information, account and reservation information, commercial information relating to purchases and memberships, internet and electronic network activity information, device and usage information, general geolocation information, audio and visual information, emergency contact information, health and wellness information voluntarily provided in connection with fitness activities, professional and employment-related information, and other information reasonably necessary to operate our business and provide services.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, protect our rights and interests, maintain business records, resolve disputes, defend legal claims, and otherwise operate our business as permitted by law.

Retention periods vary depending on the nature of the information and applicable legal requirements. Factors considered when determining retention periods include the type of information involved, the nature of our relationship with the individual, operational requirements, applicable statutes of limitation, legal and regulatory obligations, insurance requirements, safety considerations, and other legitimate business needs.

SECTION 6: HOW WE SHARE INFORMATION

Riforma Studio does not sell personal information in exchange for monetary compensation.

We may disclose personal information to service providers, contractors, vendors, and other third parties that support our business operations. These parties may include providers of scheduling and booking software (such as Mariana Tek), payment processing services, website hosting services, cloud storage platforms, analytics services, marketing and advertising services, customer relationship management systems, email and communication platforms, accounting and financial services, mobile application services, information technology services, and other operational tools necessary to operate our business.

These third parties are generally authorized to use personal information only as necessary to perform services on our behalf, fulfill contractual obligations, comply with legal requirements, or otherwise as permitted by applicable law.

I. Professional Advisors and Legal Requirements

We may disclose personal information to attorneys, accountants, auditors, consultants, insurers, government agencies, courts, law enforcement authorities, regulators, and other authorized parties when reasonably necessary to comply with legal obligations, respond to lawful requests, enforce agreements, prevent fraud, investigate security incidents, protect the rights and interests of Riforma Studio, safeguard individuals or property, or exercise and defend legal claims.

II. Business Transactions

If Riforma Studio is involved in a merger, acquisition, financing transaction, corporate restructuring, reorganization, sale of assets, bankruptcy proceeding, or similar business transaction, personal information may be transferred or disclosed as part of that transaction, subject to applicable legal requirements.

III. With Your Consent

We may disclose personal information where you direct us to do so, authorize disclosure, request that information be shared, or otherwise provide consent.

IV. Sharing Under California Law

Although Riforma Studio does not sell personal information for monetary compensation, certain uses of cookies, analytics technologies, advertising tools, pixels, software development kits (SDKs), and similar technologies may constitute "sharing" under California law. Additional information regarding California privacy rights and opt-out rights is provided in Section 17 of this Privacy Policy.

SECTION 7: DATA SECURITY

Riforma Studio implements reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, destruction, or loss. These safeguards may include access controls, password protections, encryption technologies where appropriate, secure service providers, network security measures, physical security procedures, employee training, confidentiality obligations, and other security practices appropriate to the nature of the information we maintain.

While we strive to protect personal information using commercially reasonable safeguards, no method of electronic transmission, internet communication, mobile network, or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security and encourage individuals to take reasonable precautions when transmitting information online.

In the event of a security incident involving personal information, Riforma Studio may investigate the matter, take appropriate remedial measures, cooperate with law enforcement or regulatory authorities where appropriate, and provide any notices required by applicable law.

SECTION 8: COOKIES, ANALYTICS, AND SIMILAR TECHNOLOGIES

Riforma Studio and its service providers may use cookies, pixels, software development kits (SDKs), web beacons, local storage technologies, and similar technologies on our website, mobile application, booking platform, and other digital services. These technologies help us maintain functionality, remember user preferences, manage account sessions, personalize user experiences, analyze website and application performance, measure marketing effectiveness, improve our services, and maintain security.

We may use analytics technologies to better understand how visitors interact with our website and digital services, including information relating to page views, session duration, referral sources, device characteristics, application usage patterns, and overall platform performance. This information helps us improve functionality, user experience, and business operations.

We may also use advertising and marketing technologies that assist us in measuring advertising effectiveness, delivering relevant content, understanding customer interests, improving marketing campaigns, and reaching potential clients through online advertising platforms. These technologies may collect information regarding browsing behavior, device identifiers, website interactions, and other activity across websites, applications, or digital platforms.

You may be able to manage certain tracking technologies through browser settings, device settings, cookie preference tools, privacy controls, or other available mechanisms. Disabling certain technologies may affect the functionality or availability of portions of our website, mobile application, booking platform, or other services.

SECTION 9: REFERRAL PROGRAMS AND GUEST PASSES

Riforma Studio may offer referral programs, guest passes, promotional opportunities, or similar initiatives that involve the submission of information regarding prospective clients, guests, or referrals.

Individuals providing another person's contact information should do so only where the individual would reasonably expect such information to be shared with Riforma Studio.

We may use information received through referral programs or guest pass programs to contact prospective clients regarding the services, promotions, or opportunities associated with the referral or guest invitation.

SECTION 10: COMMUNITY FEATURES

Riforma Studio may offer community groups, member forums, messaging platforms, event discussion groups, social networking features, wellness communities, or similar interactive services designed to foster engagement among members and participants.

Any information voluntarily shared through these features may be visible to other participants and may be copied, shared, reposted, or otherwise used by those individuals. Users should exercise discretion when sharing personal information through community features, as information disclosed in these environments may become publicly available or accessible to others.

Riforma Studio is not responsible for the actions of other users or for information voluntarily disclosed through community features, third-party communication platforms, or similar services.

SECTION 11: MARKETING COMMUNICATIONS

We may send emails, text messages, push notifications, and other communications relating to reservations, appointments, memberships, purchases, studio updates, events, workshops, promotions, wellness-related content, community activities, and other information relating to our services.

Where required by law, we will obtain appropriate consent before sending marketing communications. Consent to receive marketing text messages is not a condition of purchasing memberships, products, services, or participating in studio activities.

You may opt out of marketing communications at any time by clicking the unsubscribe link included in marketing emails, replying STOP to marketing text messages, adjusting notification settings within our mobile application where available, or contacting us directly.

Even if you opt out of marketing communications, we may continue to send service-related and transactional communications necessary to administer your account or provide requested services. These communications may include reservation confirmations, waitlist notifications, membership notices, purchase receipts, account updates, safety communications, studio closure notices, policy updates, and other communications necessary to provide services you have requested.

Standard message and data rates may apply depending on your mobile carrier and service plan.

SECTION 12: SENSITIVE PERSONAL INFORMATION

Certain information collected by Riforma Studio may be considered sensitive personal information under applicable California law. Depending on an individual's interactions with us, this may include account credentials, emergency contact information, health and wellness information voluntarily provided in connection with participation in fitness activities, and other information classified as sensitive under applicable law.

Riforma Studio uses sensitive personal information only as reasonably necessary to provide requested services, facilitate safe participation in fitness activities, manage memberships and reservations, communicate with clients, maintain studio safety, comply with legal obligations, enforce agreements, protect the rights and interests of the business, and otherwise operate our business as permitted by law.

Riforma Studio does not sell sensitive personal information and does not use sensitive personal information to infer characteristics about consumers or for purposes inconsistent with applicable law.

SECTION 13: HOW LONG WE KEEP YOUR INFORMATION

Riforma Studio retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide services, comply with legal obligations, maintain business records, protect our rights and interests, resolve disputes, defend legal claims, and otherwise operate our business as permitted by law.

Retention periods vary depending on the nature of the information involved and applicable legal requirements. Factors considered when determining retention periods may include the type and sensitivity of the information, the nature of our relationship with the individual, operational requirements, safety and risk-management considerations, applicable statutes of limitation, legal and regulatory obligations, insurance requirements, contractual commitments, and other legitimate business needs.

Certain categories of information, including membership records, transaction histories, attendance records, waiver acknowledgements, communications, photographs, videos, surveillance recordings, employment-related records, and other business records, may be retained for extended periods where reasonably necessary for operational, legal, historical, safety, insurance, marketing, or business purposes.

When personal information is no longer reasonably required, we will take appropriate steps to delete, de-identify, anonymize, or otherwise securely dispose of such information in accordance with applicable law.

SECTION 14: CALIFORNIA PRIVACY RIGHTS

California residents may have certain rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), subject to applicable exceptions and limitations.

I. Right to Know

Depending on applicable law, California residents may have the right to request information regarding the categories of personal information collected, the categories of sources from which information is collected, the business or commercial purposes for collecting, using, disclosing, or sharing information, the categories of third parties to whom information is disclosed or shared, and the specific pieces of personal information collected about them.

California residents may also have the right to request access to personal information maintained by Riforma Studio, request correction of inaccurate personal information, request deletion of personal information subject to applicable exceptions, request information regarding the categories of personal information disclosed or shared, and request limitations on certain uses of sensitive personal information where such rights apply.

II. Right to Opt-Out of Sale or Sharing

Riforma Studio does not sell personal information in exchange for monetary compensation. However, certain uses of cookies, analytics technologies, advertising tools, pixels, software development kits (SDKs), and similar technologies may constitute "sharing" under California law.

California residents may request that we not sell or share their personal information, as those terms are defined under California law, by contacting us at support@riformastudio.com or by utilizing any privacy controls, cookie preference tools, or similar mechanisms made available through our digital services.

III. California Shine the Light Rights

California Civil Code Section 1798.83 permits eligible California residents to request information regarding the disclosure of personal information to third parties for their direct marketing purposes, if any. Requests may be submitted by contacting privacy@riformastudio.com.

IV. Right to Non-Discrimination

Riforma Studio will not discriminate against individuals for exercising applicable privacy rights.

V. Sale and Sharing Disclosure

Although Riforma Studio does not sell personal information for monetary compensation, we may disclose information to analytics providers, advertising partners, technology providers, and service providers in ways that may constitute sharing under California law. California residents may exercise any applicable opt-out rights by contacting us using the information provided below.

VI. How to Exercise Your Rights

California residents may submit privacy requests by contacting privacy@riformastudio.com.

To protect privacy and security, we may take reasonable steps to verify the identity of individuals submitting requests before responding. We may request additional information necessary to verify identity and process the request. If we are unable to verify a request, we may be unable to fulfill it.

We will acknowledge, review, and respond to verifiable consumer requests within the timeframes required by applicable law. In most circumstances, we will respond within forty-five (45) days of receiving a verifiable request, although additional time may be permitted where authorized by law.

Authorized agents may submit requests on behalf of California residents where permitted by law. We may require proof of authorization, verification of the consumer's identity, and additional information reasonably necessary to confirm the validity of the request.

VII. Appeals

If we deny a privacy request, individuals may contact us for additional information regarding the basis for the decision and any rights available under applicable law.

SECTION 18: EMPLOYMENT AND BUSINESS INQUIRIES

This Privacy Policy also applies to personal information submitted in connection with:

• Employment applications;

• Instructor applications;

• Contractor inquiries;

• Volunteer opportunities;

• Internship opportunities;

• Workshop proposals;

• Vendor relationships;

• Business partnership discussions; and

• Other business-related communications.

Information submitted in connection with these activities may be used for recruiting, evaluation, hiring, onboarding, administration, business operations, legal compliance, and related purposes.

SECTION 15: CHILDREN'S PRIVACY

Riforma Studio's services are intended primarily for adults.

We may permit participation by individuals who are at least sixteen years of age, subject to studio policies and any required parent or legal guardian consent.

Participants under eighteen years of age may be required to have registration documents, waivers, releases, emergency contact information, and other required forms completed by a parent or legal guardian.

We do not knowingly collect personal information from children under thirteen years of age. If we become aware that personal information has been submitted by a child under thirteen without appropriate authorization, we may take reasonable steps to remove such information from our records.

Parents or legal guardians with questions regarding information relating to minors may contact us using the contact information provided below.

SECTION 16: INTERNATIONAL USERS

Riforma Studio is located in the United States and provides services within California.

If you access our website, mobile application, or services from outside the United States, you understand and acknowledge that your information may be transferred to, stored in, and processed within the United States. By using our services, you consent to the transfer and processing of information in the United States to the extent permitted by applicable law.

Privacy laws in the United States may differ from the laws of your jurisdiction.

SECTION 17: THIRD-PARTY WEBSITES AND SERVICES

Our website, mobile application, and communications may include links to third-party websites, platforms, services, advertisements, social media platforms, embedded content, or other resources that are not owned, operated, or controlled by Riforma Studio.

We are not responsible for the privacy, security, or information practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing personal information.

Any information you provide to a third-party website, platform, or service is governed by that third party's privacy policy, terms of service, and applicable practices.

SECTION 18: CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When changes are made, we will update the Effective Date appearing at the top of this Privacy Policy and post the revised version on our website.

Your continued use of our website, mobile application, services, memberships, or participation in studio activities following the effective date of an updated Privacy Policy signifies your acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

SECTION 19: CONTACT US

If you have questions regarding this Privacy Policy, our privacy practices, or would like to exercise any applicable privacy rights, please contact us at:

Riforma Studio, Inc.

1546 Victory Blvd.

Glendale, California 91201

Website: www.riformastudio.com

Email: privacy@riformastudio.com