Privacy Policy

Last Updated: 10.02.26

Onyx Rituals (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website https://www.onyxrituals.com/ (“Website”) and book our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Onyx Rituals
Email: onyxrituals@gmail.com
Location: Cornwall, United Kingdom

We are the “data controller” for the personal data we collect.

2. What Personal Data We Collect

We may collect and process the following information:

  • Name

  • Email address

  • Phone number

  • Billing and payment information (processed securely via third-party providers)

  • Appointment and booking details

  • Any information you voluntarily provide via contact forms or intake forms

  • Technical data such as IP address, browser type, and device information (via cookies)

3. Special Category (Health) Data

Some services may require you to share limited health or wellbeing information. This data is:

  • Provided voluntarily by you

  • Used only to deliver services safely and appropriately

  • Stored securely and confidentially

  • Never shared without your explicit consent unless legally required

4. How We Use Your Data

We use your personal data to:

  • Manage bookings and appointments

  • Process payments

  • Communicate with you about your sessions

  • Respond to enquiries

  • Maintain client records

  • Improve our Website and services

  • Meet legal and accounting obligations

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to provide booked services

  • Consent – where you have explicitly agreed (e.g. marketing emails, health information)

  • Legal obligation – for tax or record-keeping

  • Legitimate interests – to operate and improve our business responsibly

6. Payments

Payments are processed securely by third-party providers (e.g. Stripe, PayPal, booking platforms).
We do not store or have access to your full payment card details.

7. Sharing Your Data

We do not sell or rent your personal data.

We may share data only with:

  • Booking and payment service providers

  • Website hosting and email services

  • Accountants or legal professionals where required

  • Authorities if legally obligated

All third parties are required to handle your data securely and lawfully.

8. Data Retention

We keep personal data only for as long as necessary:

  • Client records: up to 7 years for legal/accounting purposes

  • Marketing data: until you withdraw consent

  • Enquiries: up to 12 months

9. Your Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Withdraw consent at any time

  • Restrict or object to processing

  • Request data portability

  • Lodge a complaint with the ICO

To exercise your rights, contact us at onyxrituals@gmail.com.

10. Cookies

Our Website uses cookies to improve functionality and user experience.
You can control cookies through your browser settings.

11. Data Security

We take reasonable technical and organisational measures to protect your data from loss, misuse, or unauthorised access.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our Website.

14. Contact

If you have questions about this Privacy Policy or how your data is handled, please contact:

Onyx Rituals
Email: onyxrituals@gmail.com