MARBL Privacy Policy

This Privacy Policy explains how MYNT Ltd ("we," "us," or "MARBL") collects, uses, and protects your personal information when you use the MARBL Marketplace. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

By using MARBL, you agree to the practices described in this Policy.

1. Who We Are

• Data Controller: MYNT Ltd, registered in England & Wales.
• Contact: support@getmarbl.com
• Address: Flat 23 Highbury House, 5 Highbury Crescent, London, England, N5 1RN

2. The Data We Collect

We may collect the following information when you use MARBL:

• Personal details: name, phone number, email, date of birth (if provided).
• Booking details: service requested, clinic selected, appointment date/time.
• Payment details: deposit payments processed securely via Stripe (we do not store your card details).
• Communications: messages sent via WhatsApp, SMS, or email with MARBL or clinics.
• Marketing preferences: consent to receive promotions or updates.
• Technical data: IP address, device, and browser type (for security and analytics).

3. How We Use Your Data

We use your personal data to:

• Process and manage your bookings.
• Collect deposits and process refunds where applicable.
• Share booking details with your chosen clinic so they can confirm and deliver your treatment.
• Send appointment reminders, confirmations, and updates.
• Provide customer support.
• Improve and personalise MARBL services.
• Send marketing communications (only if you consent).
• Comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: to provide booking and payment services you request.
• Consent: for marketing communications.
• Legitimate interests: to improve our services, prevent fraud, and keep our systems secure.
• Legal obligation: where required by law or regulation.

5. Who We Share Your Data With

We only share your data with:

• Clinics you book with (so they can deliver your appointment).
• Service providers (e.g. Stripe for payments, communication tools like WhatsApp).
• Regulators or legal authorities where required by law.

We do not sell your data to third parties.

6. Data Retention

We keep your personal data for as long as necessary to provide services and meet legal obligations.

• Booking and payment records are generally retained for 6 years (for tax and accounting purposes).
• Marketing data is retained until you withdraw consent.

7. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Withdraw consent for marketing at any time.
• Request transfer of your data to another provider.

To exercise your rights, contact us at support@getmarbl.com.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption and secure servers. However, no system is completely secure, and we cannot guarantee 100% security of your data.

9. Marketing Communications

• If you opt in, we may send you marketing via email, SMS, or WhatsApp.
• You can opt out at any time via unsubscribe links or by contacting us.

10. International Transfers

We primarily process your data in the UK. If data is transferred outside the UK (e.g. via service providers), we ensure appropriate safeguards (such as Standard Contractual Clauses).

11. Updates to this Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via email or the MARBL platform.

12. Complaints

If you have concerns, please contact us first at support@getmarbl.com.

You also have the right to complain to the UK Information Commissioner's Office (ICO): www.ico.org.uk.

By using MARBL, you confirm that you have read and understood this Privacy Policy.