Effective Date: March 1, 2026
This Privacy Policy describes how Taimlesshairco ("we", "us", or "our") collects, uses, and discloses your personal information when you visit or make a purchase from our website. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Taimlesshairco is the data controller responsible for your personal data. If you have any questions regarding this policy or our privacy practices, please contact us at: Email: [Insert Email Address]
We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:
Identity Data: Name, username, or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Payment card details (processed securely via PCI-compliant third parties; we do not store full card numbers).
Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting, and location.
Under the UK GDPR, we only process your data when we have a legal basis to do so. Most commonly, we use your data in the following circumstances:
Performance of a Contract: To process and deliver your order of hair bundles, wigs, or accessories.
Legitimate Interests: To improve our website, manage our relationship with you, and prevent fraud.
Consent: To send you direct marketing communications via email or text (which you can withdraw at any time).
Legal Obligation: Where we need to comply with a legal or regulatory obligation in the UK.
We do not sell your personal data. We share your information with trusted third parties to perform specific functions:
Service Providers: Including IT and administration services, and UK-based logistics providers (e.g., Royal Mail, DPD, EVRi) for order delivery.
Payment Providers: To facilitate secure financial transactions.
Professional Advisers: Including lawyers, bankers, auditors, and insurers.
HM Revenue & Customs (HMRC): Regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances.
If we transfer your data outside the UK (for example, to a cloud storage provider), we ensure a similar degree of protection is afforded to it by ensuring at least one of the specific safeguards approved by the UK Information Commissioner’s Office (ICO) is implemented.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 6 years for UK tax purposes).
Under UK data protection laws, you have rights including:
Right of Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your data where there is no good reason for us continuing to process it.
Right to Withdraw Consent: Where we are relying on consent to process your data.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.
