Last updated: 2026-11-07
What we know about you, why, and how to stay in control. In plain words.
Youssef Azarkan (Fadha'il) decides how your personal data is used (the "controller"). Contact: contact@fadhail.com, 31 Stonefield Drive, Manchester M8 8YH, United Kingdom. Data protection registration: [to complete: ICO registration number].
For readers in the European Union, our representative is: [to complete: EU representative, if required].
Our host records technical data for each request (IP address, browser type, time and the address requested) to deliver the site and keep it secure. Legal basis: our legitimate interests (running a safe website).
The typefaces are loaded from Google Fonts, which receives your IP address to send them. Legal basis: our legitimate interests (the site's appearance). Google's own privacy policy applies to that request.
The anonymous "Was this helpful?" question records only the page, your answer and, if you choose one, a reason from a list. No account, no free text, nothing that identifies you.
We keep: your email address and an account number; the date you confirmed your email; the date you accepted the Terms and confirmed you are 18 or over; how much of the monthly allowance you used (complete pages unlocked, ingredient-list checks); the pages you saved; the Focus Guides you bought or chose; your choice about marketing emails. Legal basis: the contract between us (providing the account), and our legal obligation to keep a record of consents.
Sign-in works with a one-time code sent to your email by our sign-in provider. We keep no password.
Accounts whose email address is never confirmed are deleted after 30 days.
We keep: the reference Stripe gives your customer record, your plan, the status and dates of your subscription, the Focus Guides you bought (amount, currency, date), and your confirmation that Premium should start straight away or that a guide should open straight away. Legal basis: the contract, and our legal obligation to keep accounting records.
Stripe processes your payment details under its own privacy policy, as an independent controller. We never receive your card number.
Only if you tick the box in your account. You can untick it at any time, or use the unsubscribe link in each email. Legal basis: your consent. Emails about your account and payments (for example a renewal reminder) are not marketing and are sent whatever you choose.
If you join the beta circle with an invitation code, we also keep: your first name and language, the test tasks you tick, your reports (with the page concerned, the status we give them and our answer) and your final review. Legal basis: our agreement with you as a tester. Please never write health information in a report. These records are deleted within 3 months after the end of the beta.
The Mirror's questionnaire, your skin profile, your face map, your product trials and their photos, the medicines and supplements you type into the Interaction tracker and your cabinet are kept only in your browser, on your device. They are never sent to us and we cannot see or recover them.
The answers about your health (step 1) and your current routine (step 6) are not saved at all: they are asked again at each visit.
Clearing what this site keeps in your browser deletes all of it: see Cookies and storage.
Only the providers we need to run the service, each bound by a contract to use the data only for us:
We do not sell or rent personal data and we never share it for advertising. We would disclose data to an authority only where the law obliges us to.
Some of these providers are based in the United States or use servers there. Such transfers are made only with the safeguards the law requires (for example the UK Extension to the EU–US Data Privacy Framework, or standard contractual clauses with the UK Addendum). Ask us for details.
You can ask to see your data, correct it, delete it, limit or object to its use, receive it in a portable format, and withdraw a consent at any time. Two of these work directly in your account: Download my data and Delete my account. For anything else, write to contact@fadhail.com. We reply within one month.
You can also complain to the Information Commissioner's Office (ico.org.uk), or to the data protection authority of the country where you live (in France: the CNIL, cnil.fr). We would appreciate the chance to put things right first.
Accounts and purchases are for people aged 18 or over. Reading the site needs no account. If you think a younger person has created an account, tell us and we will delete it.
We make no decisions about you by automated means that have legal or similarly significant effects. The suggestions of The Mirror are calculated in your browser from your answers, and you decide what to do with them.
The site is served over HTTPS only. The members' content is sent only after the server has checked your access. Card details never reach us. Access to the database is limited to the server and to the people who run Fadha'il.
The date of the current version is shown at the top. If we change something important, we say so on the site and, if you have an account, by email before it applies.