Privacy Policy

1. Information We Collect and Why

We collect the following categories of personal data to provide and improve our services, process transactions, fulfil orders, and tailor our communication with you:

• Personal Identification Information: Such as your name and email address. These are used to provide customer support.
• Marketing Preferences: Your subscription settings, expressed interests, and engagement with our marketing communications (such as clicks within emails). These help us customise what we share with you and respect your communication choices.
• Website and Usage Data: This includes your IP address, browser type, device details, and behaviour on our website (pages viewed, time spent, actions taken). We use this information to analyse performance, detect fraud, and optimise user experience.
• Cookies and Tracking Technologies: We use cookies and similar tools from services like Google Analytics, Meta Pixel, TripleWhale, Klaviyo, and Google Search Console to understand how users interact with our site, measure advertising effectiveness, and improve our offerings. These tools may collect usage data across sessions and devices.

This information is therefore used to enhance your experience, keep you informed, analyse performance, and also meet legal, regulatory, and fraud prevention obligations.

2. Legal Basis for Data Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent: Where you have provided explicit consent, such as when subscribing to our newsletter or marketing communications.
• Contractual Necessity: To fulfil our contractual obligations to process orders, payments, and provide customer support.
• Legitimate Interests: To enhance our website, improve our products, and provide personalised services.
• Legal Obligation: For compliance with laws or regulations.

3. Data Storage and Protection

We store your personal data securely using industry-standard encryption and security measures. Access to your data is restricted to authorized personnel only. We regularly update our security systems to ensure the safety of your information.

4. Sharing Your Information

We may share your personal data with trusted third-party service providers who assist us in running our business. These may include:

• Marketing Platforms: Email marketing and analytics services like Klaviyo and Google Analytics, etc.
• Legal & Regulatory Authorities: To comply with laws or respond to legal requests.

We ensure that these third parties only process your data in accordance with our instructions and have appropriate safeguards in place to protect your information.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. After this period, we securely delete or anonymise your data.

6. Your Rights

Under the UK GDPR, you have the following rights concerning your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct any inaccuracies in your personal data.
• Deletion: You can request that we delete your personal data under certain circumstances.
• Objection: You can object to the processing of your personal data, including for direct marketing.
• Portability: You can request to receive your personal data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected]

If you are not satisfied with how we handle your personal data or if you believe we have violated your data protection rights, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK's supervisory authority for data protection issues.

To file a complaint, you can visit the ICO's website: https://www.ico.org.uk

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. These technologies help us remember your preferences, improve site functionality, and analyse traffic. For more information, see our Cookie Policy.

8. Marketing Communications

We will only send marketing communications to you if you have opted in to receive them. You can opt out at any time by:

• Clicking the unsubscribe link in any marketing email.
• Contacting us directly at [email protected]

9. Children’s Data

Our website and services are intended for use by individuals aged 18 and over, and we do not knowingly collect personal data from anyone under this age. If we become aware that we have inadvertently collected information from someone under 18, we will delete it promptly.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last modified on" date. We encourage you to review this policy regularly to stay informed about how we are protecting your information.

11. Contact Information

For any questions about this Privacy Policy, or to exercise your data protection rights, please contact us at:

HAIR LABS AI LTD

96 Kensington High Street, London, England, W8 4SG

Email: [email protected]

Phone: +44 (0)203 7272 691