Privacy notice

This notice explains what personal information RRYL LLC, trading as RRYL Skin Spa (“RRYL”, “we”, “us”), collects and how we use it. It covers our website, rrylskinspa.com, bookings, visits to our studio in New York, and messages you exchange with us.

Mindbody, Attentive, ClassPass, Klaviyo, Google, Meta, Instagram and TikTok have their own privacy notices. This notice describes how RRYL handles information, including information we receive through those services. It does not describe every use those companies make of it themselves.

1. Information we collect

Information you give us

• Bookings and purchases. Your name and contact details, the services, products, packages or gift cards you choose, appointment times, and your booking, payment and visit history. We use Mindbody to manage online booking and payments.
• Photo ID for card payments. When you pay by card, we may ask to see a photo ID that matches the card. For a gift or a booking paid for by someone else, the cardholder may instead send written authorization with a copy of their ID, as our policies explain. We use ID only to confirm the payment, and we do not keep copies of ID documents.
• Health and skin information. Before a treatment, we may ask about skin conditions, allergies, pregnancy, medications or recent procedures, so that we can decide whether a treatment is suitable for you. We do not record this information.
• Inquiries. When you use the contact form on our website, we collect your name, your email address, your phone number if you choose to give it, and your message. Please do not include health details in the form. We also receive the information you share when you call or email us, or reply to messages we send. If you message us on WhatsApp using the link on our website, we receive your phone number and your messages; WhatsApp is provided by Meta. Our website had a Mindbody chat window until October 1, 2026.
• Email and text sign-ups. Our email sign-up page, provided by Attentive through Mindbody, asks for your email address. Until October 2026 our website linked to a newsletter sign-up page provided by Klaviyo, which asked for your email address and, if you chose, your name and mobile number. The email box on our Policies page sends your email address to the studio by email so that we can keep you updated. It is not connected to Klaviyo. Your Mindbody booking account holds your email and text marketing preferences. You can ask us to change them at any time.

Information collected automatically when you use our website

• The pages you view and how you interact with them, for example scrolling, link clicks, video views, and starting or sending forms.
• Steps in the online booking flow, such as viewing a service, starting checkout and a checkout-completion signal, with related service and amount information where available. These signals do not by themselves confirm an appointment or a completed treatment.
• How you reached us, for example a search, a social link or an ad click.
• Device and browser information, and approximate location derived from your IP address.

This information is collected through cookies and similar technologies (see section 4).

Information from others

• Booking platforms. If you book through a platform or app such as ClassPass or the Mindbody app, that platform sends us the booking details.

2. How we use your information

• Providing your appointments and purchases: booking, payment, check-in, gift cards, packages and product purchases.
• Communicating about your appointments: confirmations, reminders and changes.
• Treating you safely: using what you tell us about your skin and health at your appointment to decide whether and how to treat you.
• Checking card payments: looking at photo ID that matches the payment card.
• Answering your questions: replying to form messages, emails, calls, WhatsApp messages and replies to our messages.
• Marketing: a thank-you email after some appointments, occasional studio news by email, and a welcome text for people who sign up for our text messages. Section 3 explains which service sends each and how to stop them.
• Understanding how our website and booking work: website analytics (section 4).
• Measuring our advertising: understanding visits and checkout steps that follow an ad click.
• Running and protecting our website: hosting, backups and security.
• Legal and accounting records: keeping records we need for tax, accounting and legal purposes.

3. Email and text messages

• Marketing emails. If news and promotions emails are switched on in your booking account, Mindbody, our booking system, may send you a thank-you email after an appointment, with a link to book again. We may also send occasional studio news by email through Attentive, a marketing service connected to Mindbody. You can also choose to receive our marketing emails by entering your email address on our email sign-up page, reached from our website or a QR code in the studio. That page is provided by Attentive through Mindbody, and records your address and the date you signed up. You can unsubscribe at any time using the link in any email.
• Text messages. If you sign up to receive our text messages, Attentive is set up to send two texts: first a confirmation that states that message frequency varies, that message and data rates may apply, and how to get help or stop; then a welcome message with a link to our booking page. We do not currently send other marketing texts. Message frequency varies, and message and data rates may apply. Consent to receive marketing texts is not a condition of purchase.
• Appointment messages. Booking confirmations, reminders and changes are sent by email and text through Mindbody. They are not marketing.
• Klaviyo. Klaviyo holds details entered on our earlier newsletter sign-up page and contact details added to it in the past. We do not currently send emails or texts through Klaviyo.
• Stopping messages. To stop marketing texts, reply STOP. For help, reply HELP. To stop marketing emails, use the unsubscribe link in the email, or write to spa@rrylskinspa.com.
• Our mobile messaging terms are at rryl.myklpages.com/p/mobile-terms-of-service.

4. Cookies, analytics and advertising tools

These tools run on our website. Some use cookies or similar identifiers, or receive information about your visit.

• Google Analytics (Google): measures visits, page interactions and booking-flow steps. Our Analytics account is linked to our Google Ads account, so that we can relate ad clicks to website visits and checkout steps.
• Meta Pixel (Meta): sends information about page visits to Meta.
• Klaviyo: its script loads on our pages, for our email and text sign-ups.
• Metricool: a website analytics tracker that sends information about visits to Metricool.
• Mindbody: the booking widget and online payments.

In Google Analytics, Google signals and the collection of user-provided data (such as email addresses) are turned off. Our event-data retention setting is 14 months. Google may keep aggregated reports for longer. To learn how Google uses information from sites that use its services, see policies.google.com/technologies/partner-sites. You can opt out of Google Analytics with the Google Analytics opt-out browser add-on.

You can block or delete cookies in your browser settings. Some features, such as online booking, may not work without them. The Mindbody booking window may show its own cookie choices. We have not set up our website to respond to Do Not Track or Global Privacy Control signals.

5. Who we share information with

These providers support the services described above:

• Mindbody: booking, payments, the client app, and appointment and follow-up emails and texts.
• Attentive: text messages to people who sign up for them, and marketing emails.
• Google: analytics, advertising measurement and business email.
• Meta: website measurement, and WhatsApp if you message us there.
• Klaviyo: our earlier newsletter sign-up page, and contact details held there.
• Hostinger: website hosting and backups, and delivery of the emails our website sends to the studio.
• Metricool: website analytics.
• Font and content-delivery services used to display the website.

If you book through ClassPass or another platform, that platform shares booking information with us. We may also disclose information if the law requires it, or to protect our rights, clients or staff.

6. How long we keep information

• Client, booking and payment records: we do not delete these on a fixed schedule. They are kept until we delete them.
• Website form messages and email sign-ups: kept by our website until we delete them.
• Google Analytics event data: 14 months, under our retention setting.
• Health and skin information: we do not record it.
• ID documents: we do not keep copies.
• Website backups: copies of website data can remain in backups on our hosting for some time after the original is deleted.
• Marketing lists: unsubscribing stops marketing messages. It does not by itself delete every record about you.

7. Your choices and requests

• Marketing: reply STOP to texts, or use the unsubscribe link in emails.
• Cookies and analytics: see section 4.
• Your information: you can ask us what personal information we hold about you, or ask us to correct or delete it, by emailing spa@rrylskinspa.com. Some records, such as payment and tax records, may need to be kept.

8. Security

Our website uses an encrypted (HTTPS) connection. No website, email or storage system is completely secure.

9. Children and teenagers

We treat clients aged 13 to 17 only with a parent’s or guardian’s consent. We do not knowingly collect personal information through our website from children under 13. If you believe a child under 13 has sent us information, please contact us.

10. Comments

Our Journal does not show a comment form. Comments sent earlier are held for review and are not displayed. WordPress records the name, email address, IP address and browser type sent with a comment.

11. Changes and contact

We may update this notice. The effective date at the top will change when we do.

Questions or requests: spa@rrylskinspa.com · RRYL Skin Spa, Suite 707, 501 Fifth Avenue, New York, NY 10017 · +1 929 293 5538