Residents of the European Economic Area (“EEA”), which includes the member states of the European Union (“EU”), should consult the sections of this policy relating to the “EEA Residents” and “International Data Transfers” for provisions that may apply to them. Residents in the United Kingdom should consult the section below headed “Residents of the United Kingdom.”
Personal Information: How we Collect it and Use it.
We collect Personal Information about you when you visit the Sites and subscribe to obtain more information about our Services. “Personal Information” is information that may be used to directly or indirectly identify an individual (which in some cases, may include certain device information). Personal Information may include (a) names, aliases, postal addresses, unique personal identifiers, online identifiers, Internet Protocol (IP) addresses, email addresses, phone numbers, geographical information, or other similar identifiers; or (b) Internet or other electronic network activity information. We may combine the Personal Information that we obtain about individuals from more than one source.
The majority of such Personal Information is collected when you register with the Site(s) to join our mailing list, set up an account, and join our loyalty program, or otherwise provide us with your contact information or participate in certain activities provided for on our Sites.
In general, the type of Personal Information we collect includes, but is not limited to:
Personal Information to keep in touch with you regarding features or matters of interest, including our programs or to participate in certain activities on our Site;
Personal Information necessary to submit to our third-party vendor if you apply to become part of our team;
Unidentifiable and aggregated Personal Information pertaining to your Site visits that help us maintain the appropriate features, functionality, and user experience
We and our partners may use that data to maintain regular communication with you as may be necessary to inform you of offers, updates, and other information regarding us.
Use of Personal Information
We use this Personal Information to (i) add you to our mailing list; (ii) contact you; (iii) provide information regarding our Services; (iv) provide our Services, including selling our products; (v) establish an account and join our loyalty program; (vi) provide answers to your inquiries or questions, and (vii) maintain regular communication with you as may be necessary to inform you about our Services and your account.
Non-Identifiable Data and Aggregated Personal Information
We or our service providers, including Google Analytics, may also collect web surfing data related to your use of the Sites. Such information may include your Internet Protocol (IP) address, browser type, and internet service provider (ISP); your operating system; which of our web pages you access and how frequently you access them; referral or exit pages; click stream data; and the dates and times that you visit the Sites. This data may be collected using cookies, web beacons, page tags or similar tools. As with cookies, the web surfing information is anonymous, “click stream” transactional data that is not associated with any users as individuals.
Web surfing data and similar information may be aggregated for administrative purposes. We may, for example, use this aggregated information in the administration of the Sites to improve its usability and to evaluate the success of particular marketing and advertising campaigns, search engine optimization strategies, and other marketing activities. We also use it to help optimize the Sites based on the needs of our users.
How and When Your Information Is Shared With Other Parties
We do not sell, trade or license Personal Information about our users for marketing purposes. We do not share your Personal Information unless it is necessary to fulfill our responsibilities, including providing information or Services.
Additional Sharing of Information
We work with a number of trusted partners who may perform vital functions as part of our operations of the Sites, including payment processors such as Woocommerce Payments, Stripe and PayPal. We do not share your Personal Information unless it is necessary to fulfill our responsibilities, including providing information or Services to you, including payment for our products. Our payment processors are subject to their own privacy policies.
We may share your Personal Information with law enforcement or other government agencies as required by law or for the purposes of limiting fraud. We reserve the right to disclose your Personal Information when we believe that disclosure is necessary to protect our rights or to comply with a judicial proceeding, court order or legal process. We further reserve the right to disclose any of your Personal Information that we believe, in good faith, appropriate or necessary to take precautions against liability, to investigate and defend against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the Sites or our services, or to protect the rights, property or personal safety of us, our users, issuers, or others.
We will not share your Personal Information if such sharing is prohibited by applicable privacy and data protection law, including, without limitation, the EEA’s General Data Protection Regulation effective May 25, 2018.
From May 25, 2018, all processing of the Personal Information of EEA Residents is performed by us in accordance with the General Data Protection Regulation (2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of Personal Information and on the free movement of such data (“GDPR”).
Although we are based and operated in the United States and do not provide our Services or Products to the EEA, except for residents of the United Kingdom, we may obtain the Personal Information of EEA Residents. Under the GDPR, we are the controller and co-processor of the Personal Information of EEA Residents. Our purpose for collecting and processing Personal Information from EEA Residents is to obtain contact information and to substantiate such information or, in the case of residents of the United Kingdom, to fulfill a contract for providing our products. The legal basis for collecting Personal Information is your consent or, in the case of residents of the United Kingdom, your consent. You may withdraw consent for obtaining communications by following the “Unsubscribe” instructions on any communication or by contacting us at email@example.com.
We will not share the Personal Information that we obtain about residents of the EEA with third parties except as described above regarding Personal Information.
Under the GDPR, EEA Residents may also have the right to: obtain confirmation that we hold Personal Information about the resident, request access to and receive information about the Personal Information we maintain about the resident, receive copies of the Personal Information we maintain about the resident, update and correct inaccuracies in Personal Information, object to the continued processing of Personal Information, and have the Personal Information blocked, anonymized or deleted, as appropriate. The right to access Personal Information may be limited in some circumstances by local law and by our legal obligations.
If you qualify, in order to exercise these rights, please contact us at firstname.lastname@example.org.
We may ask individuals making requests to provide additional information for identity verification purposes.
International Data Transfers
If you are a resident outside the United States, including in the EEA, we transfer the Personal Information provided by you for processing in the United States. Under the GDPR, we are considered a “controller” and a “co-processor” of the Personal Information of EEA Residents. By providing Personal Information to us for the purpose of subscribing to our mail lists, setting up an account or joining our loyalty program, you consent to the transfer of your Personal Information to the United States.
Please note that the United States does not have data protection laws equivalent to those in the EEA and other jurisdictions.
Residents of the United Kingdom
The following section applies to residents of the United Kingdom who order from us.
We will process the orders of residents of the United Kingdom pursuant to the “EEA Residents” section above, which also outlines your rights.
We use third parties to process orders from residents of the United Kingdom. These third parties include Woo Commerce, which processes your Personal Information to fulfill your orders, Stripe, which processes your payment card information, and Royal Mail / The Post Office which handles the logistics and delivery of your order. Each of these third parties may process and transfer your Personal Information in connection with your order. The actions of these third parties are governed by their privacy policies which may be found at https://www.woocommerce.com), https://stripe.com/gb/privacy (Stripe UK) and https://www.royalmail.com). If you have any questions regarding these third parties please contact them directly.
Notifications and Communications from Our Site
Communications Regarding Our Services
We will send you to email notifications and free newsletters from time to time with offers, suggestions and other information. Some notifications are communications relating to us and our Services, including confirmations of orders for our products. You may “opt-out” from receiving such communications by following the “Unsubscribe” instructions provided in the email.
Legal or Security Communications
Deleting Your Information
If you want us to delete your Personal Information and your account, please contact us at email@example.com with your request. We will take steps to delete your information as soon as we can, but some information may remain in archived/backup copies for our records or as otherwise required by law. You may not delete information relating to our communications relating to the specific Services that we are providing for you if you wish to continue receiving such Services, including orders of our products. Deletion of your Personal Information is subject to our obligations as set forth in the section relating to Personal Information Retention.
Personal Information Retention
Links to Other Sites
Privacy in Submitted Materials
If you submit any materials to us, either directly or through a social media platform, such as Instagram, such materials, including photos or comments, may be displayed on the Sites, including photos of yourself or other individuals. We may also display your first name in connection with the first initial of your last name in connection with comments submitted by you. By submitting such materials, you forego any privacy rights in such materials.
Please consult the Terms of Service for other conditions relating to the submission of materials to us directly or through social media sites.
We take commercially reasonable steps to protect our customers’ Personal Information against unauthorized disclosure or loss. However, no data transmission over the Internet can be guaranteed to be 100% secure. Therefore, while we strive to protect user information we cannot ensure or warrant the security of any information you transmit to us or from the Sites. You engage in such transmissions at your own risk.
If you believe your Personal Information is being improperly used by us or any third party, please immediately notify us via email at firstname.lastname@example.org.
Children Under 13
Our Sites are restricted to the use of individuals over the age of 13. We therefore will take measures to verify the age of our users. No portions of the Sites are directed to children under the age of 13. Consequently, we do not knowingly collect personal identifying information from any person we know is a child under the age of 13. If we learn that we have collected personal information from a child under age 13 we will delete that information as quickly as possible. If you are a parent or guardian of a child under 13 years of age and you believe your child has provided us with Personal Information, please contact us at email@example.com.
Your California Privacy Rights
The following section pertains to the rights of individuals or households in California (“California consumers”).
Civil Code Section 1798.83
Under certain circumstances, California Civil Code Section 1798.83 states that, upon receipt of a request by a California consumer, a business may be required to provide detailed information regarding how that business has shared that customer’s Personal Information with third parties for direct marketing purposes. However, the foregoing does not apply to businesses like ours that do not disclose Personal Information to third parties for direct marketing purposes without prior approval or give customers a free mechanism to opt out of having their Personal Information disclosed to third parties for their direct marketing purposes.
Rights under the CCPA
After January 1, 2020, the CCPA (California Civil Code Section 1798.100 et seq.) will provide California consumers with additional rights regarding Personal Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The categories of Personal Information we collect are generally described above but differ for individual consumers depending on the Services used by such consumers.
Under the CCPA, qualifying California consumers may have the following rights:
Right to Know and Right to Delete.
A California consumer has the right to request that we disclose what Personal Information we collect, use, disclose and sell. A California consumer also has the right to submit requests to delete Personal Information.
When we receive a request to know or delete from a California consumer, we will confirm receipt of the request within 10 days and provide information about how we will process the request, including our verification process. We will respond to such requests within 45 days.
Right for Disclosure of Personal Information.
A California consumer may also submit requests that we disclose specific types or categories of Personal Information that we collect.
Under certain circumstances, we will not provide such information, including where the disclosure creates a substantial, articulable and unreasonable risk to the security of that Personal Information, customers’ accounts with us, or the security of our systems or networks. We also will not disclose California consumers’ social security numbers, driver’s license numbers or other government-issued identification numbers, financial account numbers, any health insurance or medical identification numbers, or account passwords and security questions and answers.
If you are a California consumer and would like to make any requests under the CCPA, please direct them as follows:
Hair Loving Limited
If we receive any request we will use a two-step process for online requests where the California consumer must first, clearly submit the request and then second, separately confirm the request. We will use other appropriate measures to verify requests received by mail or telephone.
Although some browsers currently offer a “do not track (‘DNT’) option,” no common industry standard for DNT exists. We, therefore, do not currently commit to responding to browsers’ DNT signals.
Your Rights and Obligations
We ask that you keep the Personal Information that you provide to us currently and that you correct any information you have provided to us by contacting us at firstname.lastname@example.org. You represent and warrant that all Personal Information you provide us is true and correct and relates to you and not to any other person.
If you are a resident of the EEA and wish to access or correct the Personal Information that we have about you or have any questions relating to the processing of your Personal Information, please contact us at email@example.com with the subject line “GDPR Data.”
If you use the Sites, you are responsible for maintaining the confidentiality of your account and for restricting access to your computer or device, and you agree to accept responsibility for all activities that occur under your account.