Privacy Notice & Advertising Platform Transparency

This Privacy Policy took effect on 2026-10-19 and governs all communications, catalog browsing sessions, inquiry form submissions, and chat consultations conducted on beautyrituals.click. All terms and disclosure schedules are active as of this date.

The data controller operating this website is Beautyrituals, trading at beautyrituals.click. You may contact the controller by mail, phone, or electronic transmission at the following registered business address:

The business operates as an inquiry-only cosmetic catalog and daily care curation studio. We do not operate customer login accounts, do not store credit card credentials, and do not process digital cart payments on this domain.

Beautyrituals collects only the precise data points required to respond to product inquiries, conduct support consultations, maintain server stability, and attribute paid ad visits. Specifically:

• Inquiry Form Entries: Full name, telephone number, email address, physical delivery or business address, category of inquiry, custom inquiry notes, and selected container specification submitted via jodu27e.php.
• Automated Transmission Metadata: Client IP address, browser user-agent string, referring URL, timestamp of form render, timestamp of submission, and honeypot field verification values.
• Consultation Chat Data: Real-time text dialogue submitted via midoea2.php, optional name, contact phone or email, and session token stored in browser localStorage.
• Consent Registry State: The record of your preference selection stored locally under the browser key site_consent_v2.
• Advertising Measurement Identifiers: Inbound URL parameters attached to arriving links from paid advertising campaigns, including Google click identifiers (gclid), Microsoft click identifiers (msclkid), and Meta click identifiers (fbclid).

We process your personal information exclusively for the following specified business purposes:

• Preparing and delivering direct, non-binding wholesale and retail price quotes for cosmetic sets and daily skincare items.
• Responding to container longevity questions, ingredient inquiries, and refill cartridge guidance through our direct studio desk.
• Fulfilling sample shipments and coordinating dispatch staging from our Charlotte facility.
• Measuring advertising channel efficiency and campaign attribution across paid ad networks without creating medical or behavioral profiles.
• Diagnosing server infrastructure errors, defending against automated bot submissions, and safeguarding network integrity.

Under applicable US and European data protection standards, each data processing operation relies on a defined lawful basis:

• Consent: Storing ad attribution parameters, analytics storage, marketing personalization signals, and optional cookie storage requires your explicit affirmative action via our cookie banner.
• Contractual / Pre-Contractual Steps: Processing your name, contact information, delivery destination, and product specifications submitted in the inquiry form is necessary to quote product orders and answer pre-purchase inquiries.
• Legitimate Interests: Logging IP addresses and technical server requests is necessary to maintain website security, prevent spam, and protect server performance.

This website is an active destination for paid commercial traffic. Today, campaigns run across major advertising networks to introduce our Charlotte skincare catalog to interested consumers and wholesale buyers. Specifically:

• Google Ads: We receive traffic directed through google ads campaigns. Inbound clicks carry the Google click identifier parameter (gclid) appended to the target URL for conversion tracking and campaign attribution.
• Microsoft Advertising: We receive traffic directed through microsoft advertising (Bing Ads). Inbound clicks carry the Microsoft click identifier parameter (msclkid) for ad attribution.
• Meta Ads: We receive traffic directed through Meta Ads platforms (Facebook and Instagram). Inbound links carry the Meta click identifier parameter (fbclid).

We do not use advertising tools to infer sensitive medical conditions, track health outcomes, or target individuals under 18 years of age. Neither Google, Microsoft, nor Meta has reviewed, approved, or verified the formulas, pricing, or statements displayed on this website.

Beautyrituals has deployed Google Consent Mode v2 in strict accordance with global technical specifications. Upon your initial arrival at beautyrituals.click, the following four consent signals are held denied by default before any advertising or analytical tag executes:

• ad_storage — set to denied until explicit consent is granted.
• ad_user_data — set to denied until explicit consent is granted.
• ad_personalization — set to denied until explicit consent is granted.
• analytics_storage — set to denied until explicit consent is granted.

If you click "Reject Optional" or dismiss the banner, these four parameters remain strictly denied. If you grant consent and subsequently withdraw it using the "Consent Preferences" control in the website footer, all four signals are immediately set back to denied, preventing future marketing storage or tracking cookie persistence.

We transmit personal data exclusively to trusted third-party service providers bound by strict confidentiality and data protection agreements:

• Google Ireland Ltd / Google LLC: Receives measurement signals and conversion pings via Google Ads in accordance with your consent status.
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Receives click identifiers via Microsoft Advertising. For comprehensive details regarding Microsoft’s data handling, review the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Receives ad event attribution data via Meta Ads where campaigns are active.
• Cloud Infrastructure & Hosting Provider: Manages web server hosting, SSL encryption, and secure inquiry database storage in US data center facilities.
• SMTP Email Delivery Relay: Routes inquiry submission notices to the studio inbox at office@beautyrituals.click under encrypted transmission protocols.

Beautyrituals operates its physical studio, web infrastructure, and primary databases in the United States. If you access our website from outside the United States, including from the European Economic Area or the United Kingdom, your information is transferred to and processed within the United States. Such transfers are safeguarded through Standard Contractual Clauses (SCCs), technical encryption protocols, and recipient compliance with recognized international data transfer frameworks.

We do not retain information indefinitely. Personal data is maintained strictly for defined, verifiable operational periods:

We maintain appropriate physical, procedural, and technological safeguards to shield your data from unauthorized disclosure, destruction, or interception. All transmissions between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3). Administrative access to server environments and inquiry archives requires multi-factor authentication, principle-of-least-privilege permissions, and routine security patch verification.

Visitors reaching our website from the European Economic Area or United Kingdom enjoy statutory rights under the General Data Protection Regulation (gdpr):

• Right of Access: You may request confirmation of whether we process your data and receive an export of your personal records.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal contact details.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your inquiry records where retention is no longer justified.
• Right to Restriction: You may request that we temporarily halt active processing of your data while an objection is verified.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to data processing based on legitimate interests at any time.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it freely with immediate prospective effect using our on-page consent controls.

Residents of California under the California Consumer Privacy Act (ccpa), as amended by the California Privacy Rights Act (CPRA), and consumers in other US states with active comprehensive privacy statutes (including Virginia, Colorado, Connecticut, and Utah) possess specific privacy entitlements:

• Right to Know & Access: You have the right to request the specific pieces and categories of personal information we have collected about you over the past twelve months.
• Right to Delete: You have the right to request deletion of personal information collected directly from you, subject to legal recordkeeping exemptions.
• Right to Correct: You have the right to request correction of inaccurate personal data.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal data for monetary payment. However, transmitting identifiers for cross-context behavioral advertising may constitute "sharing" under California law. You may opt out at any time using our cookie banner or by enabling Global Privacy Control.
• Right to Non-Discrimination: We will never deny services, alter prices, or deliver different service quality because you exercise statutory privacy rights.

Beautyrituals respects browser-level opt-out preference signals. When our website detects the global privacy control signal (the Sec-GPC HTTP header transmitted by compatible browsers or browser extensions), our consent engine automatically honors this directive as a universal opt-out of marketing tracking and ad sharing without prompting you again.

Our skincare catalog, commercial services, and products are directed exclusively toward adults aged 18 and older. We do not knowingly collect, solicit, or maintain personal information from individuals under 18 years of age. If we discover that an individual under 18 has submitted personal information through our inquiry form or chat system, we promptly delete those records from our servers.

If you believe our data processing violates applicable privacy laws, you possess the right to lodge a formal complaint with a competent supervisory body:

• In California, you may contact the California Privacy Protection Agency (CPPA) or the Office of the California Attorney General.
• In North Carolina and other US states, you may submit concerns to your state Attorney General’s Consumer Protection Division.
• In the European Union, you may contact the Data Protection Authority (DPA) in the member state of your habitual residence or workplace.

To submit a Data Subject Access Request (DSAR), opt out of communications, or request record erasure, email our privacy desk directly at office@beautyrituals.click or send postal mail to:

Response Deadline: In accordance with our documented compliance standards, your data request will be verified and answered within 5 days of receipt. We do not charge fees for standard statutory privacy inquiries.

We may revise this Privacy Policy periodically to reflect changes in regulatory mandates, studio procedures, or advertising platform criteria. Any modification will be posted directly to this page with an updated statutory effective date displayed in the header and left date rail. Material updates will be highlighted via a notice banner on our homepage.

If you have questions regarding this Privacy Policy, your advertising preferences, or data retention schedules, reach out directly to our Charlotte team:

• Direct Email: office@beautyrituals.click
• Studio Telephone: +1 (594) 555-2913
• Physical Office: 606 NC Music Factory Boulevard, Charlotte, North Carolina 28206, United States
• Assortment & Compliance Management: Maria Ivanova, Assortment Manager since 2022.