Urban Rituals

Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how Urban Rituals ("Urban Rituals," "we," "us," or "our") collects, uses, shares, and protects information when you visit urbanrituals.love (the "Site") or otherwise interact with us. Urban Rituals is a wellness studio and skincare-content publisher based in San Diego, California.

By using the Site, you agree to this Policy. If you do not agree, please do not use the Site.

1. Information we collect

Information you provide to us:

  • Contact form / email — your name, email address, and the contents of your message.
  • Bookings — appointments are booked through our third-party scheduling provider (Vagaro). Information you enter there is collected and processed by that provider under its own privacy policy; we receive booking details necessary to provide the service.

Information collected automatically:

  • Usage and device data — IP address, browser type, device information, pages viewed, referring pages, and interactions with the Site.
  • Cookies and similar technologies — see Section 3.
  • Session activity — via Microsoft Clarity, we may record page interactions such as mouse movements, clicks, scrolls, and heatmaps to understand how the Site is used. Clarity is configured to mask sensitive content; we do not use it to collect the contents of form fields.

We do not knowingly collect sensitive personal information, and we ask that you not submit health information or other sensitive details through the Site's contact form.

2. How we use information

We use information to: operate, maintain, and improve the Site; respond to your inquiries; measure and analyze traffic and content performance; deliver and measure advertising; detect and prevent fraud, abuse, and security issues; and comply with legal obligations.

3. Cookies, analytics, and advertising

We and our partners use cookies and similar technologies. The main third-party services we use are:

Where required by law (for example, for visitors in the EEA, UK, and Switzerland), these technologies load only after you provide consent through our cookie banner, and you can change your choices at any time. We honor the Global Privacy Control (GPC) signal as a valid opt-out of "sale"/"sharing" where applicable.

You can also control cookies through your browser settings and opt out of interest-based advertising through the DAA and NAI.

4. How we share information

We do not sell your personal information for money. We may share information with:

  • Service providers who operate the Site and tools on our behalf (hosting, analytics, scheduling, email).
  • Advertising and analytics partners (Google, Meta, Microsoft). Sharing information with these partners for cross-context behavioral advertising may be considered a "sale" or "sharing" under certain U.S. state privacy laws; you may opt out (see Section 5).
  • Affiliate partners — when you click an affiliate link, the retailer (e.g., Pomp) may set its own cookies and process your activity under its policy. See our Affiliate Disclosure.
  • Legal and safety — where required by law or to protect rights, safety, and property.

5. Your privacy rights

California residents (CCPA/CPRA). You have the right to: know and access the personal information we collect; delete it; correct it; and opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. You also have the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. To opt out, use our "Do Not Sell or Share My Personal Information" link [add link / mechanism] or enable GPC in your browser. You may also submit requests via the contact details in Section 11.

EEA, UK, and Switzerland (GDPR/UK GDPR). Our legal bases for processing are your consent (for non-essential cookies and marketing), our legitimate interests (to operate and improve the Site), and compliance with legal obligations. You have the right to access, rectify, erase, restrict, or port your data; to object to processing; and to withdraw consent at any time. You may lodge a complaint with your local data protection authority. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

Other U.S. states. Residents of states with applicable privacy laws may have similar rights; we honor them where required.

To exercise any right, contact us using Section 11. We will verify and respond within the timeframes required by law.

6. Data retention

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce our agreements, then delete or de-identify it.

7. Security

We use reasonable administrative and technical measures to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

The Site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

9. AI features

We may introduce AI-powered features — such as a chat assistant, educational tools, or shopping/"agentic commerce" helpers that can research or help you purchase products.

When you use these features: your inputs (such as questions or preferences) are processed to generate responses and may be shared with the third-party AI providers that power the feature, under their terms and privacy policies. If a feature can take actions on your behalf (for example, initiating a purchase through a retailer), it will do so only with your authorization, and such transactions are completed by the relevant retailer or payment provider under their own terms. We may log AI interactions to operate, secure, and improve the feature. AI outputs are generated by automated systems, may be inaccurate, and are not professional, medical, or financial advice. This Policy will be updated with feature-specific details before any such feature processes your data.

10. Third-party links

The Site links to third-party websites and retailers we do not control. Their privacy practices are governed by their own policies; please review them.

11. Contact us

Questions or requests regarding this Policy or your personal information:

Urban Rituals 3333 Midway Drive #104, San Diego, CA 92110 Email: wellnessbycandy@gmail.com

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date, and where required, we will seek your consent.