Privacy Policy

Last updated: 19 July 2026

At Sissa Rituals, we understand that information about your wellbeing, menstrual cycle and personal experiences can be deeply private.

This Privacy Policy explains how we collect, use, protect and share your personal data when you visit www.sissarituals.com, contact us, book a session, subscribe to our communications or use our services.

1. Who is responsible for your personal data?

The data controller is:

Business name: Sissa Rituals
Legal name: [TO COMPLETE – FULL LEGAL NAME]
Legal status: [TO COMPLETE]
Registered address: [TO COMPLETE]
Registration number: [TO COMPLETE]
Email for privacy requests: [TO COMPLETE]

The data controller determines why and how your personal data is processed.

2. Scope of this policy

This Privacy Policy applies to personal data collected through:

The Sissa Rituals website;
Contact and enquiry forms;
Appointment and booking forms;
Discovery calls and coaching sessions;
Client questionnaires or intake forms;
Newsletter subscriptions;
Purchases and payment records;
Workshops, webinars or online events;
Direct email or social media communications.

Separate third-party websites and platforms operate under their own privacy policies.

3. Personal data we may collect

Depending on how you interact with us, we may collect the following information.

Identity and contact information

This may include:

First and last name;
Email address;
Telephone number;
Country or time zone;
Billing address;
Date of birth or age range, where relevant;
Preferred method of communication.

Booking and transaction information

This may include:

Appointment date and time;
Service selected;
Booking history;
Payment status;
Amount paid;
Invoice and transaction references;
Cancellation or rescheduling information.

Complete payment card details are normally processed by the payment provider and are not stored directly by Sissa Rituals.

Communications

This may include:

Emails and contact form messages;
Questions and feedback;
Reviews or testimonials;
Records of consent;
Information you voluntarily share during a discovery call or coaching relationship.

Coaching and wellbeing information

If you choose to participate in coaching, you may voluntarily provide information concerning:

Menstrual cycles;
Menstrual pain or symptoms;
Diagnosed health conditions;
Medication or contraception;
Nutrition, sleep, stress and movement habits;
Personal wellbeing goals;
Relevant lifestyle history;
Other physical or emotional wellbeing information.

Some of this information may constitute sensitive health data.

We ask that you only provide information that is relevant to the coaching service and that you are comfortable sharing.

Technical and usage information

When you use the website, certain information may be collected automatically, including:

IP address;
Browser and device type;
Operating system;
Approximate location derived from your IP address;
Pages viewed;
Date and time of visits;
Referring website;
Cookie identifiers;
Website interactions and technical logs.

4. Sensitive health information

Information relating to your menstrual cycle, symptoms, diagnoses, medication or physical and mental wellbeing may be legally classified as health data or another special category of personal data.

Where required, Sissa Rituals will process this information only with your explicit consent.

You may withdraw that consent at any time by contacting us. Withdrawal does not affect processing that was lawfully carried out before your consent was withdrawn.

Withdrawing consent may mean that we can no longer provide a personalised coaching service where the information is necessary for that service.

Health-related information will not be used for advertising or unrelated marketing purposes.

5. Why we use your personal data

We may use personal data for the following purposes.

To respond to enquiries

We use your contact information and message to respond to questions or requests.

Legal basis: Our legitimate interest in responding to enquiries or taking steps requested before entering into a contract.

To manage bookings and deliver services

We use booking, contact and relevant coaching information to organise discovery calls, provide coaching sessions, deliver resources and communicate about your service.

Legal basis: Performance of a contract or steps taken at your request before entering into a contract.

To process health-related coaching information

We may use information you voluntarily provide to personalise a coaching service and understand your stated goals.

Legal basis: Explicit consent, together with the contractual basis for delivering the requested service where applicable.

To process payments and maintain records

We use transaction and billing information to collect payment, issue invoices, manage refunds and comply with accounting obligations.

Legal basis: Performance of a contract and compliance with legal obligations.

To send newsletters and marketing communications

We may send educational content, updates or offers where you have subscribed or where otherwise permitted by law.

Legal basis: Consent or, where legally permitted, our legitimate interest in communicating with existing clients about similar services.

You may unsubscribe at any time using the link in an email or by contacting us.

To improve and secure the website

We may use technical information to maintain the website, diagnose errors, prevent fraud, protect our systems and understand how the website is used.

Legal basis: Our legitimate interest in operating a secure, effective and user-friendly website. Consent will be requested where required for cookies or analytics.

To comply with legal obligations

We may retain or disclose information where necessary for accounting, tax, regulatory, legal or dispute-resolution purposes.

Legal basis: Compliance with a legal obligation or our legitimate interest in establishing, exercising or defending legal claims.

6. Is providing your information mandatory?

Information marked as required on a form is necessary to process your request or booking.

You are not required to provide optional information. However, we may not be able to provide a personalised service if you choose not to provide information that is reasonably necessary for that service.

You should avoid submitting unnecessary medical records, identification documents or detailed information that has not been requested.

7. How we obtain personal data

We may receive personal data:

Directly from you;
Through website forms;
Through the appointment-booking system;
Through payment providers;
Through email, video calls or social media;
Automatically through cookies and technical logs;
From a parent or guardian where services are provided to a minor with appropriate consent.

8. Who may receive your personal data?

Personal data may be accessed only by Sissa Rituals and service providers that need the information to perform a specific function.

These providers may include:

Website hosting providers;
WordPress and website administration providers;
Appointment and calendar services, including Timetics where enabled;
Video-conferencing services, such as Google Meet;
Email and newsletter providers;
Secure cloud storage providers;
Payment processors;
Accountants and professional advisers;
Analytics and website security providers;
Public authorities where disclosure is legally required.

Before publication, the following providers should be confirmed:

Website host: [TO COMPLETE]
Booking provider: Timetics / [CONFIRM OR UPDATE]
Video-call provider: Google Meet / [CONFIRM OR UPDATE]
Email provider: [TO COMPLETE]
Newsletter provider: [TO COMPLETE]
Payment provider: [TO COMPLETE]
Analytics provider: [TO COMPLETE]
Cookie-consent provider: [TO COMPLETE]

Service providers are permitted to process personal data only for the relevant service and subject to appropriate contractual and confidentiality obligations.

We do not sell or rent personal data to third parties.

9. International data transfers

Some service providers may process personal data outside the European Economic Area, the United Kingdom or your country of residence.

Where legally required, we use appropriate safeguards for international transfers, which may include:

An adequacy decision;
Standard contractual clauses;
Additional contractual, organisational or technical protections;
Another legally recognised transfer mechanism.

You may contact us for more information about the safeguards relevant to your data.

10. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal obligations.

Unless a different period is required, our intended retention periods are:

General enquiries: Up to three years after the last meaningful contact;
Discovery-call records: Up to three years after the call or last contact;
Client and contractual records: For the duration of the relationship and up to five years afterwards where necessary for legal claims;
Invoices and accounting documents: Up to ten years where required by applicable accounting law;
Coaching questionnaires and notes: For the duration of the coaching relationship and normally no longer than three years after it ends, unless a shorter period is appropriate or a longer period is legally necessary;
Health-related information: Only for as long as necessary to provide the service or address a legal claim, taking account of the sensitive nature of the information;
Newsletter information: Until you unsubscribe, withdraw consent or remain inactive for three years;
Records of marketing objections: For the period necessary to respect your request;
Technical and security logs: Normally no longer than 12 months, unless longer retention is required to investigate a security incident;
Cookie preferences: Normally six months before your choice may be requested again;
Audience-measurement information: According to the configuration of the relevant tool and applicable cookie requirements.

Data may be securely archived where necessary to comply with a legal obligation or establish, exercise or defend a legal claim.

11. Cookies and similar technologies

The website may use cookies and similar technologies.

Essential cookies

These cookies are required for functions such as:

Website security;
Form submission;
Appointment booking;
Remembering privacy preferences;
Maintaining basic website functionality.

Essential cookies may not require consent where they are strictly necessary.

Optional cookies

With your consent, we may use optional cookies for:

Audience measurement;
Website analytics;
Embedded video or social media content;
Advertising or marketing;
Personalisation.

Optional cookies should not be activated before you have provided consent where consent is legally required.

You can accept, refuse or customise optional cookies through the cookie banner. You should also be able to change your choice later through a permanent cookie-settings link.

Refusing optional cookies will not prevent you from accessing the main content of the website, although some external or embedded features may not work.

12. Your data-protection rights

Depending on applicable law, you may have the right to:

Ask whether we process your personal data;
Request access to your personal data;
Request correction of inaccurate or incomplete information;
Request deletion of your data;
Request restriction of processing;
Object to processing based on legitimate interests;
Object to direct marketing at any time;
Request data portability;
Withdraw consent at any time;
Provide instructions regarding your data after death where applicable;
Submit a complaint to a competent data-protection authority.

These rights may be subject to legal limitations. For example, we may need to retain certain invoices or contractual records even after receiving a deletion request.

To exercise your rights, contact:

Email: [TO COMPLETE]
Postal address: [TO COMPLETE]

We may ask for reasonable information to verify your identity before responding.

If you are located in France, you may submit a complaint to the Commission Nationale de l’Informatique et des Libertés — CNIL. If you live elsewhere, you may contact the data-protection authority responsible for your place of residence.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against:

Unauthorised access;
Accidental loss;
Misuse;
Alteration;
Unlawful disclosure;
Destruction.

Measures may include access controls, secure passwords, software updates, restricted access, encrypted connections, backups and confidentiality obligations.

No online system is completely secure. You should avoid sending highly sensitive information through ordinary email unless specifically requested and an appropriate secure method has been provided.

14. Confidentiality of coaching sessions

Information shared during a private coaching session will be treated confidentially, subject to applicable law and the limitations described in these Terms.

Information may be disclosed where:

You have given permission;
Disclosure is required by law or a valid legal order;
It is reasonably necessary to protect someone from a serious and immediate risk of harm;
It is required to establish, exercise or defend a legal claim;
A service provider needs limited access to perform an agreed function.

Sissa Rituals is a coaching and educational service and should not be understood as providing the same professional confidentiality protections that may apply to regulated medical or mental-health professionals.

15. Children and minors

The website is not designed to intentionally collect sensitive personal information directly from children without appropriate consent.

If a person under 18 wishes to participate in coaching, we may require verifiable consent from a parent or legal guardian and may limit the information collected.

If you believe that a minor has provided personal data without appropriate permission, please contact us so that we can review and, where appropriate, delete it.

16. Automated decision-making

Sissa Rituals does not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

17. Third-party websites

The website may contain links or embedded content from other websites.

Sissa Rituals does not control the privacy practices of independent third parties. You should review their privacy policies before providing personal information or activating external content.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, tools or legal obligations.

The latest version will be published on this page with the updated date.

Where a change materially affects how we use sensitive information, we may provide an additional notice or request new consent where required.

19. Contact us

For questions, requests or concerns relating to this Privacy Policy or your personal data, contact:

Sissa Rituals
Legal name: [TO COMPLETE]
Email: [TO COMPLETE]
Postal address: [TO COMPLETE]