hairgrover.co.uk

Privacy Policy

Privacy Policy for HairGrover.co.uk

1. Introduction

At HairGrover.co.uk, we prioritize the protection of your personal data. Unless otherwise specified, providing your personal information is not legally or contractually required, nor is it necessary to enter into a contract. You are not obligated to share your data, and choosing not to provide it will have no consequences unless explicitly stated in this policy.

“Personal data” refers to any information related to an identified or identifiable natural person.


2. Server Log Files

You can browse our website without submitting personal data. However, when you visit HairGrover.co.uk, certain user data is transmitted to us or our hosting and IT service providers via your internet browser and stored in server log files. This data includes:

  • The name of the accessed website
  • Date and time of the request
  • IP address
  • Amount of data transferred
  • The requesting service provider

This data is processed based on our legitimate interest in ensuring the smooth operation and security of our website, in accordance with Article 6(1)(f) GDPR.

International Data Transfers: Your data may be transferred to Canada and other countries. Transfers to Canada are covered by an adequacy decision from the EU Commission.


3. Contact Information

Responsible Party

For any inquiries regarding data processing, please refer to our legal notice for contact details.

Proactive Contact via Email

If you contact us via email, we collect personal data such as your name, email address, and message content. The purpose of this processing is to respond to your request.

  • If your request relates to pre-contractual measures (e.g., inquiries before purchasing) or an existing contract, data processing occurs under Article 6(1)(b) GDPR.
  • If the contact is for other reasons, it is processed under Article 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.

You have the right to object to this processing at any time. Your data will only be used to handle your request and will be deleted according to statutory retention periods unless you consent to further processing.

Contact Form Usage

If you contact us through our website’s contact form, we collect your personal data (name, email, message text) only to the extent provided by you. Data processing follows the same principles outlined in Proactive Contact via Email.


4. Order Processing

When you place an order, we collect and use personal data only as necessary to fulfill and process your order and respond to queries.

Providing your data is necessary for contract fulfillment. Failure to provide it means we cannot process your order.

Legal Basis:

  • Data is processed under Article 6(1)(b) GDPR for contract fulfillment.
  • We share data with shipping companies, payment providers, and IT service providers as needed. Data transfers follow legal requirements and are kept to a minimum.

International Data Transfers: Your data may be transferred to Canada and other countries under EU adequacy decisions.


5. Comments and Reviews

When you leave a comment or review on our website, we collect your personal data (name, email, comment text) to facilitate and display the comment.

  • Legal Basis: Processing is based on your consent (Article 6(1)(a) GDPR).
  • You can withdraw your consent at any time, and we will delete your data.

Upon posting a comment:

  • Your name and email address may be publicly visible.
  • Your IP address will be stored temporarily to prevent misuse.

6. Marketing and Direct Communication

Postal Advertising

We may use your name and address for postal marketing if you have previously purchased goods or services from us.

  • Legal Basis: Article 6(1)(f) GDPR – Our legitimate interest in direct marketing.
  • You can object at any time by contacting us.

Email Marketing

We may use your email address to send promotional offers for similar products/services if you have previously purchased from us.

  • Legal Basis: Article 6(1)(f) GDPR – Our legitimate interest in direct marketing.
  • You can unsubscribe anytime by contacting us or using the unsubscribe link in marketing emails.

7. Payment Services

We integrate third-party payment providers to facilitate secure transactions. These providers process data under their own privacy policies.

PayPal

Transactions made via PayPal are covered by PayPal’s Data Privacy Statement.

PayPal Express

Using PayPal Express requires PayPal to collect data such as your IP address, device type, browser type, and location.

  • Legal Basis: Article 6(1)(f) GDPR – Our legitimate interest in providing diverse payment options.
  • You may object to this processing if you have reasons based on your situation.

Amazon Payments

We offer Amazon Payments for order processing. Amazon may collect IP addresses, device information, and cookies when you visit our site.

  • Legal Basis: Article 6(1)(f) GDPR – Our legitimate interest in offering various payment methods.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device to recognize your browser and provide personalized features.

Managing Cookies

You can control or disable cookies in your browser settings.

Essential Cookies:

  • Some cookies are necessary for website functionality.
  • Processing is based on Article 6(1)(f) GDPR to ensure smooth operation.
  • You can object to this processing if it conflicts with your situation.

9. Data Retention and Your Rights

How Long We Keep Your Data

We store your data for the necessary duration to fulfill contractual obligations, plus any legal retention periods (e.g., tax laws). Data is then deleted unless you consent to further processing.

Your Rights

Under GDPR, you have the right to:

  • Access your stored data (Article 15)
  • Rectify inaccurate data (Article 16)
  • Erase your data (Article 17)
  • Restrict processing (Article 18)
  • Data portability (Article 20)

If we process your data based on legitimate interest (Article 6(1)(f) GDPR), you may object at any time.

Complaints

If you believe your data is processed unlawfully, you have the right to file a complaint with a regulatory authority under Article 77 GDPR.

Objection to Direct Marketing

You can opt out of direct advertising by notifying us at any time. Once we receive your objection, we will stop using your data for marketing purposes.


10. Updates to This Policy

Last Updated: [13.02.2025]
We may update this privacy policy to reflect legal changes or service updates. Please check regularly for updates.

For any inquiries, please contact us via contact@hairgrover.co.uk.