Privacy Policy

Last updated: March 2026

At M.Rituals & Aesthetics, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, book appointments, or use our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

M.Rituals & Aesthetics is an advanced medical aesthetics and skincare clinic offering personalised treatments designed to enhance natural beauty and support skin health.

For the purposes of data protection law, M.Rituals & Aesthetics acts as the Data Controller responsible for your personal information.

Contact details:

M.Rituals & Aesthetics,
9 Charing Cross, Norwich Norfolk, NR2 4AX

T: 07918 348925
E: m.rituals_aesthetics@icloud.com

2. Information We Collect

We may collect the following types of personal data when you interact with our website or services.

Personal Information

This may include:

  • Full name
  • Email address
  • Phone number
  • Address (where required)
  • Information provided in contact forms or enquiries

Appointment and Booking Information

When booking treatments through our website or booking system we may collect:

  • Appointment preferences
  • Service selections
  • Booking history
  • Notes relevant to your appointment

Payment Information

If you make payments online, payment information may be processed by secure third-party payment providers. We do
not store full card details on our website.

Payment providers may collect information such as:

  • Billing details
  • Transaction information
  • Payment method details

Health or Consultation Information

For certain treatments we may collect relevant medical or health information during consultations to ensure treatments are safe
and appropriate.

This information is treated as confidential medical information and handled with strict care.

Technical Website Data

When you visit our website, we may automatically collect certain information such as:

  • IP address
  • Browser type
  • Device type
  • Pages visited
  • Website usage data

This helps us understand how visitors use the site and improve our services.

3. How We Collect Your Data

We collect data through:

  • Website contact forms
  • Appointment booking systems
  • Online payment systems
  • Email or telephone enquiries
  • In-clinic consultation forms
  • Cookies and analytics tools

4. How We Use Your Data

Your personal information may be used for the following purposes:

  • Responding to enquiries
  • Scheduling and managing appointments
  • Providing aesthetic treatments safely
  • Processing payments
  • Maintaining client consultation records
  • Improving our website and services
  • Sending marketing communications (only where you have consented)

The lawful bases we rely on include:

  • Consent
  • Performance of a contract (e.g. appointment bookings)
  • Legal obligations
  • Legitimate business interests

5. Sharing Your Data

We do not sell or rent your personal data.

Your information may be shared with trusted third-party service providers where necessary, including:

  • Website hosting providers
  • Appointment booking platforms
  • Secure payment processors
  • Email service providers
  • Professional advisers where legally required

These providers are required to comply with appropriate data protection regulations.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data.

These measures include:

  • Secure website encryption (SSL)
  • Controlled access to personal data
  • Secure storage of consultation records
  • Trusted payment processing systems

Despite these measures, no online transmission of data can be guaranteed to be completely secure.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Client consultation or treatment records may be retained longer to comply with medical, professional, or legal obligations.

8. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data (where applicable)
  • Restrict or object to certain data processing
  • Withdraw consent where processing is based on consent

You can exercise these rights by contacting us directly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data
protection regulator.

9. Cookies

Our website uses cookies to improve functionality and understand how visitors interact with our website.

Cookies are small files stored on your device when you visit a website.

We use cookies for:

  • Website functionality
  • Performance and analytics
  • Improving user experience

We may use services such as Google Analytics to analyse website usage.

You can manage or disable cookies through your browser settings. Some website features may not function correctly if cookies
are disabled.

10. Third-Party Links and Content

Our website may contain links to external websites or embedded content such as videos or social media feeds.

These third-party websites may collect data about you independently. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or our services.

The most recent version will always be available on this page.