Privacy policy

Privacy policy

Last updated:

Jun 12, 2025

1. Who We Are

Riyma Ltd ("Riyma", "we", "our", "us") provides independent facial analysis reports created by qualified experts. We are registered in England and Wales and operate in compliance with international data protection laws, including the UK GDPR, EU GDPR, CCPA (California), and PDPA (Singapore).

2. Information We Collect

Personal Information
When you use our site or services, we may collect:

  • Your name

  • Email address

  • Optional phone number

  • Payment or billing information

  • Any information you provide when contacting us

Facial Images
We collect facial photographs you upload for the purpose of creating your report. These images may be considered biometric data and are handled with special care.

Technical and Usage Data
We may also collect non-personal information automatically, such as:

  • IP address

  • Browser type and version

  • Device type and operating system

  • Pages visited, time spent on the site

  • Referring URL

  • Cookies and analytics identifiers

3. How We Use Your Information

We use your data to:

  • Generate and deliver your facial report

  • Respond to your messages and support requests

  • Improve our services and user experience

  • Monitor site usage and prevent fraud

  • Comply with legal obligations

We do not use your data for automated decision-making and we do not sell your personal information.

4. Who We Share It With

We only share your information when necessary and only with trusted parties, including:

  • Licensed aesthetic professionals who review and write your report

  • Service providers who assist with hosting, analytics, and secure payments

  • Legal authorities, if required by law

  • A successor entity in the event of a merger or acquisition (you will be notified if this happens)

5. International Transfers

We may transfer your information to servers or service providers outside your country. Where we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (for UK/EU residents) or other legally approved mechanisms.

6. Data Retention

  • Facial photos are deleted 30 days after your report is delivered.

  • Reports and account information are kept for up to 24 months to allow re-downloads or follow-ups, after which they are anonymised.

  • Basic usage analytics are retained only in aggregated form.

7. Security

We use encryption and access controls to protect your data. All information is transmitted over secure (TLS) connections and stored using encrypted storage.
While we do our best to protect your data, no internet transmission is completely secure. You use our service at your own risk.

8. Cookies

We use cookies and similar tracking technologies for site functionality and analytics. You can control cookie settings in your browser or decline non-essential cookies via the banner when you first visit the site.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you

  • Request correction or deletion

  • Object to or restrict processing

  • Request a copy of your data in portable format

  • Withdraw consent at any time

  • Opt out of marketing communications

To make a request, email us at contact@riyma.com. We will respond within 30 days.

10. Children

Riyma is not intended for users under 16. We do not knowingly collect data from minors. If you believe we have, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date. Continued use of the Site means you accept the updated policy.

12. Contact Us

If you have any questions or concerns about how your data is handled, please contact us at contact@riyma.com.