This Policy serves as a legally binding agreement between you ("User", "you", or "your") and Rituals Salon & Spa (operating as "Rituals", "Rituals Salon & Spa", "we", "us", or "our"). If you are entering into this agreement on behalf of a business or other legal entity, you confirm that you have the authority to bind that entity to this agreement. In that case, the terms "User", "you", or "your" refer to the entity. If you do not have such authority, or if you disagree with the terms of this Policy, you must refrain from accepting it and may not access or use the Website or Services. By accessing and using the Website and Services, you confirm that you have read, understood, and agree to the terms of this Policy. Please note that this Policy does not cover the practices of third-party companies or individuals that we do not own or control.
When you visit the Website, our servers automatically gather data sent by your browser. This may include details such as your device's IP address, browser type and version, operating system type and version, language settings, the webpage you were on before visiting the Website, the pages you visit on the Website, the time spent on those pages, search queries, access dates and times, and other usage statistics. This automatically collected information is used solely to detect potential abuse and to generate statistical data regarding the Website's traffic and usage patterns. These statistics are not aggregated in a way that would identify any specific User.
You can browse and use the Website and Services without providing us with personal information that identifies you. However, if you wish to use certain features of the Website, you may be asked to provide specific Personal Information (such as your name and email address).
We collect and store any information you voluntarily submit to us when making a purchase or filling out forms on the Website. This may include, when applicable:
- Contact information (such as email address, phone number, etc.)
- Basic personal details (such as name, residence address, etc.)
- Payment information (such as credit card or bank details)
While you are free to withhold your Personal Information, please note that doing so may limit your ability to access certain features of the Website. If you're unsure about which information is required, feel free to contact us for clarification. We act as both a data controller and a data processor when handling your Personal Information, depending on the circumstances. If we enter into a data processing agreement with you, you would be the data controller, and we would be the data processor.
- As a Data Controller: We act as a data controller when we request your Personal Information to provide you with access to the Website and Services. In this case, we determine the purposes and methods of processing your Personal Information.
- As a Data Processor: We act as a data processor when you submit Personal Information through the Website and Services. In this role, we do not control or make decisions regarding the information. We process your Personal Information strictly based on your instructions. In these instances, you (the user) are considered the data controller.
To provide the Website and Services or fulfill a legal obligation, we may need to collect and use certain Personal Information. If you do not provide the requested information, we may not be able to deliver the requested products or services. The information we collect may be used for the following purposes:
- Sending administrative information
- Sending marketing and promotional communications
- Sending product and service updates
- Responding to inquiries and offering support
- Requesting user feedback
- Posting customer testimonials
- Operating the Website and Services
The processing of your Personal Information depends on how you interact with the Website and Services, your location, and whether any of the following apply:
- You have given consent for one or more specific purposes (note: this does not apply when processing is subject to the California Consumer Privacy Act).
- Providing information is necessary for the performance of an agreement with you or pre-contractual obligations.
- Processing is necessary for compliance with a legal obligation.
- Processing is related to a task carried out in the public interest or in the exercise of official authority vested in us.
- Processing is necessary for the legitimate interests pursued by us or a third party.
In some jurisdictions, we may process your information without consent, provided you have the option to object to such processing by opting out. We will be happy to clarify the specific legal basis for processing your Personal Information, including whether providing your information is a statutory or contractual requirement or necessary for entering into a contract. We do not knowingly collect Personal Information from children under the age of 13. If you are under 13, please refrain from submitting any Personal Information through the Website and Services. If you believe that a child under 13 has provided Personal Information to us, please contact us so we can delete that information from our records.
We encourage parents and legal guardians to supervise their children’s internet usage and to help enforce this policy by teaching their children not to share Personal Information through the Website and Services without their permission. We also ask that parents and guardians take appropriate steps to ensure their children understand the importance of not providing Personal Information online without prior consent.
For certain Services that require payment, you may be asked to provide credit card or other payment account details, which will be used exclusively for processing your payments. We partner with third-party payment processors ("Payment Processors") to securely handle your payment information.
These Payment Processors follow the latest security protocols set by the PCI Security Standards Council, which includes major payment brands like Visa, MasterCard, American Express, and Discover. All sensitive data exchanges are encrypted and occur over an SSL-secured communication channel, ensuring the protection of your information. Additionally, both the Website and Services comply with rigorous security standards to maintain a safe environment for our Users.
We will share your payment information with Payment Processors only as needed to process your payments, issue refunds, and address any inquiries or disputes related to payments and refunds.
Please note that Payment Processors may collect personal data, such as your email, address, credit card details, and bank account number, to facilitate the payment process. The use of this personal information is subject to the Payment Processors' own privacy policies, which may differ from ours. We recommend reviewing their privacy policies to understand how they handle your data.
To provide the Services you’ve requested or to complete transactions, we may share your information with our affiliates, partner companies, and service providers (collectively, “Service Providers”) who help operate the Website and Services. These Service Providers are either bound by privacy policies that align with ours or have agreed to comply with our privacy standards regarding Personal Information. We will not share personally identifiable information with third parties or unaffiliated entities.
Service Providers are only authorized to use or disclose your information as necessary to perform their services on our behalf or to meet legal obligations. They are provided with only the information required to fulfill their designated tasks and are prohibited from using or disclosing this information for any purposes other than those related to their work for us.
We may also disclose your Personal Information if required or permitted by law, such as in response to a subpoena or other legal processes. Additionally, we may disclose it when we believe, in good faith, that such disclosure is necessary to protect our rights, ensure your safety or the safety of others, investigate fraud, or respond to a government inquiry.
If we undergo a business transition, such as a merger, acquisition, or sale of all or part of our assets, your Personal Information may be transferred as part of that transition.
In compliance with the California Online Privacy Protection Act (CalOPPA), we are committed to protecting the privacy rights of California residents. CalOPPA requires operators of commercial websites or online services to post a privacy policy that meets certain requirements.
Under CalOPPA, we are required to provide the following information:
- California Residents' Privacy Rights: California residents have the right to request information about the types of personal data we collect, how we use it, and whether we disclose it to third parties. If you are a California resident and would like to request such information, you may contact us using the contact details provided in this privacy policy.
- Do Not Track: Our Website may track visitors’ behavior over time and across different websites. However, at this time, we do not honor “Do Not Track” (DNT) signals from your browser. Please be aware that third-party services may have different policies regarding the collection of data.
- Third-Party Disclosure: We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it's appropriate to comply with the law, enforce our site policies, or protect our or others' rights, property or safety.
- Your Rights Under CalOPPA: California residents can request to review, update, or delete their personal information that we have collected. If you wish to exercise these rights, please contact us using the information provided in this policy.
If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) regarding your personal information. The CCPA provides California residents with the right to request information about the collection, use, and sharing of their personal data.
As part of our commitment to transparency, we outline your rights under the CCPA below:
- Right to Know: You have the right to request information about the personal data we have collected about you, including the categories of personal information, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Deletion: You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions (for example, if we need to retain your information for legal or business purposes).
- Right to Opt-Out: You have the right to opt-out of the sale of your personal information. We do not sell your personal information to third parties, but if we were to do so in the future, you would have the right to opt-out.
- Right to Non-Discrimination: You have the right to exercise your CCPA rights without fear of discrimination. We will not discriminate against you for exercising any of your rights under the CCPA, including denying you services or charging you different prices.
- Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
To exercise any of your rights under the CCPA, you may contact us using the information provided below. We will respond to your request within the timeframes required by the CCPA.
California residents are also entitled to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you would like to make such a request, please contact us using the contact information provided below.
In accordance with the CCPA, we may collect the following categories of personal information:
- Identifiers (such as name, email address, IP address, etc.)
- Commercial information (such as records of products or services purchased)
- Internet or other electronic network activity information (such as browsing history and interaction with our Website)
- Geolocation data
- Professional or employment-related information (if applicable)
We use Google Analytics, a web analytics service provided by Google, Inc. ("Google") to help us understand how visitors interact with our Website and Services. Google Analytics collects information about your use of the Website, such as your IP address, browser type, pages viewed, time spent on those pages, and other similar information. This data is transmitted to and stored by Google on servers in the United States.
Google Analytics uses cookies and similar technologies to collect and analyze information. The data collected by Google Analytics is used to evaluate the performance of our Website, improve user experience, and gather insights to enhance our Services. Google may also transfer this data to third parties if required to do so by law, or where such third parties process the information on Google’s behalf.
You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at Google Analytics Opt-out. For more information about how Google collects and processes data, please visit Google's Privacy Policy.
We may use your email address and/or phone number to send you promotional or informational communications about our products, services, updates, or special offers, which we believe may be of interest to you. By providing us with your contact information, you consent to receiving email and/or text marketing messages from us.
- Email Marketing: You can opt-out of receiving email marketing communications at any time by clicking the "unsubscribe" link in the email or by contacting us directly. After opting out, you may still receive transactional or service-related communications (e.g., appointment confirmations, account updates).
- Text Marketing: If you opt-in to receive marketing text messages, you consent to receiving promotional messages from us. Standard message and data rates may apply. You can opt-out of receiving marketing text messages by replying "STOP" to any text message you receive, or by contacting us directly. After opting out, you will no longer receive promotional text messages from us, but you may still receive transactional or service-related communications (e.g., appointment confirmations, account updates).
We may use third-party email and text marketing services to manage and send these communications. These services may collect information about your interactions with emails or text messages, such as whether you opened an email or clicked on links, or whether you responded to a text message. This information is used to improve our marketing efforts and better serve our customers.
Our Website and Services use "cookies" to enhance and personalize your online experience. A cookie is a small text file that is stored on your device by a web server. Cookies cannot run programs or introduce viruses to your computer. Each cookie is uniquely assigned to you and can only be read by the web server that issued it.
We may use cookies to collect, store, and track information for purposes such as security, personalization, and statistical analysis. Please be aware that you have the option to accept or decline cookies. While most web browsers accept cookies by default, you can adjust your browser settings to refuse cookies if you prefer.
Some web browsers feature a "Do Not Track" (DNT) function that signals to websites that you do not wish to have your online activity tracked. It's important to note that tracking, in this context, refers specifically to the collection of personally identifiable information as you navigate across different websites over time, rather than the use or collection of information related to a specific website.
Currently, there is no uniform standard for how browsers communicate the DNT signal. As a result, our Website and Services are not yet equipped to recognize or respond to DNT signals from your browser. However, as outlined throughout this Policy, we are committed to limiting the collection and use of your Personal Information.
We may allow third-party companies to assist us in personalizing advertisements that we believe may interest Users, as well as to gather and utilize data about User activity on the Website. These companies may serve ads that use cookies and other tracking technologies to monitor User behavior.
Our Website and Services may include social media features, such as buttons for Facebook, Instagram, TikTok, "Share This," and others (collectively, "Social Media Features"). These features may collect your IP address, the page you are visiting on our Website, and may set cookies to ensure proper functionality. Social Media Features may be hosted either by their respective providers or directly on our Website. Your interactions with these features are subject to the privacy policies of the respective social media providers.
We reserve the right to modify this Policy or its terms related to the Website and Services at any time at our discretion. When we do, we will revise the updated date at the bottom of this page, send you an email to notify you. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided.
If you have any questions, concerns, or complaints about this Policy, please feel free to reach out to us by email at: info@ritualssalon.net
We are committed to addressing your concerns and resolving any disputes. We will make every reasonable effort to respect your rights and respond as promptly as possible, and in any case, within the timeframes required by applicable data protection laws. Collection of Personal Information
Use and Processing of Collected Information
Privacy of Children
Payment Processing
Disclosure of Information
California Online Privacy Protection Act (CalOPPA)
California Consumer Privacy Act (CCPA)
How to Exercise Your CCPA Rights
Shine the Light Law
Categories of Personal Information We Collect
Google Analytics
Email and Text Marketing
Cookies
Do Not Track Signals
Advertisements
Social Media
Changes
Contact Us
This document was last updated March 7, 2025.
Automatic Information Collection