Privacy Policy.

01 / Who we are

Mirèl Partners is a med spa growth consultancy focused on strategy, patient acquisition, conversion, business workflows and retention. References to “Mirèl Partners”, “we” or “our” in this notice refer to the operator of this website and its services.

For questions about the person or legal entity responsible for particular processing activities, or to make a privacy request, contact delora@mirelmarketing.com.

Where data protection law applies, the person or entity determining the purposes and means of processing is generally described as the data controller. Different roles may apply when we act on a clinic's instructions under a separate service agreement.

02 / Information we may collect

Depending on how you interact with us, personal information may include:

• Your name, business email address, professional phone number, role and clinic or company name.
• Information you voluntarily share about your business, growth goals, marketing challenges and services of interest.
• Correspondence, meeting requests, scheduling preferences and related communications.
• Technical data, such as an IP address, browser type, device information and access logs, where generated by the website or its service providers.

Please do not send patient records, identifiable patient details or sensitive health information through general contact, booking or email channels.

03 / How information reaches us

We may receive information when you email us, schedule a meeting, discuss our services, access a resource, communicate with us on a professional platform or begin a client relationship.

Our website and the services used to operate it may also generate technical records. External platforms, such as appointment scheduling or file hosting services, may process information according to their own notices and arrangements.

04 / Why we use information

We may use relevant information to:

• Respond to business inquiries and arrange strategy discussions.
• Understand requested services and prepare relevant proposals or recommendations.
• Manage communications, client relationships, invoicing and administrative records.
• Operate and protect our website and business systems.
• Evaluate the usefulness of our website and resources where appropriate measurement tools are enabled.
• Meet applicable legal, accounting and regulatory obligations.

We do not treat general business contact details as permission to access private patient records.

05 / Lawful bases for processing

Where the UK GDPR, EU GDPR or similar legal requirements apply, the appropriate lawful basis depends on the specific activity. It may be consent, steps taken before or in performance of a contract, legitimate interests that are not overridden by individual rights, or compliance with a legal obligation.

Examples of legitimate interests may include responding to legitimate business inquiries, maintaining secure systems and administering professional client relationships. Marketing communications are subject to the additional rules applicable to the recipient and channel.

06 / Business communications and marketing

We may contact professionals about an inquiry, an existing relationship or relevant services where permitted by applicable law. Consent will be sought when legally required, and marketing preferences and applicable opt-out requests will be respected.

To object to direct marketing or request that communications stop, email delora@mirelmarketing.com. An opt-out from marketing does not necessarily prevent essential communications relating to an active service or legal obligation.

07 / Cookies and website technologies

Website hosting and any enabled analytics, preference or other tools may use cookies, logs or similar technologies. Some are needed to provide services; others may be optional and subject to consent or other requirements under relevant law.

Where non-essential technologies require consent, they should not be enabled until a suitable consent mechanism is in place. Browser controls may also allow you to manage certain cookies. The actual tools in use may change as the site develops.

08 / Sharing and external providers

Information may be handled by providers necessary to run the website and business, including web hosting, email, calendar scheduling, file hosting, client-management tools and professional advisers. Examples of public-facing services linked from this website include Google Calendar for appointment booking and Google Drive for certain resources.

When using another provider, its access, contractual role and handling of information should be assessed for the intended purpose. We may also disclose information where lawfully required. We do not offer personal information for sale as a business service.

External services have their own terms and privacy notices. Selecting a Google booking or Drive resource link may take you to that provider.

09 / International data transfers

We work with internationally located businesses and may rely on service providers operating in different countries. Information may therefore be processed outside your country of residence.

Where the applicable data protection regime requires safeguards for transfers, appropriate mechanisms should be put in place before the relevant processing occurs.

10 / Data retention and security

Information is kept only for periods that are reasonably necessary for the relevant purpose, subject to applicable legal, accounting and contractual requirements. Actual periods can differ for inquiries, client relationships, invoices and security records.

Reasonable organisational and technical precautions should be applied according to the sensitivity of the information and the services involved. No internet transmission or digital storage environment is completely risk-free.

11 / Your privacy rights

Your rights depend on the law that applies to the relevant information and processing. These may include requesting access, correction, deletion, restriction, portability or withdrawal of consent, and objecting to certain uses such as direct marketing.

Some rights have exceptions, including legal recordkeeping duties. We may need to verify your identity before responding to a request.

Contact delora@mirelmarketing.com to make a request. Where UK data protection law applies, you may also have the right to complain to the Information Commissioner's Office. Other jurisdictions may have their own competent privacy regulators.

12 / Client patient data, CRM and AI systems

This public website and its general booking process are intended for business inquiries, not medical care or the submission of identifiable patient data.

Any future client engagement involving protected health information, CRM records or AI-assisted communications requires a separate review of the actual purpose, access permissions, vendor arrangements, security safeguards, clinical responsibilities and applicable law. Client-specific contracts and data-processing or business-associate agreements may be necessary depending on the engagement.

Discuss such information only through an appropriately established process; do not send it unsolicited through an initial booking or inquiry.

13 / Changes and third-party links

We may update this notice as services, technology or legal requirements change. The updated date at the top indicates the date of the published revision.

Links to third-party websites are offered for convenience. We do not control the privacy practices of those websites; review the relevant provider's own information before submitting personal details.