Privacy policy

Thank you for joining the Hairstory™ community ("Company," "we," "us," or "our"). We are committed to protecting your privacy and safeguarding your personal information. If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at info@hairstory.com.

By visiting our website, www.hairstory.com (the "Website"), or using any of our services (the "Services," which include the Website), you entrust us with your personal information. We take this responsibility seriously and aim to clearly explain what information we collect, how we use it, and your rights concerning it. Please read this policy carefully as it is important. If you disagree with any of the terms in this policy, we ask that you discontinue use of our Services immediately.

This Privacy Policy covers all information collected through our Services (including the Website), as well as any related services, sales, marketing, or events. Please take the time to review how we handle your information.

What Data Do We Gather?
Personal Information You Provide
In short: We collect the information you provide to us.

We gather personal information that you voluntarily provide when you register on our Website, show interest in our products or services, participate in website activities, or contact us directly.

The specific personal information we collect may vary depending on how you interact with us, your choices, and the products and features you use. This information may include:

Personal Information: Names, email addresses, debit/credit card numbers, contact preferences, passwords, usernames, and other similar details.
Payment Data: Information required to process payments, such as your payment instrument number (e.g., credit card number) and associated security codes. All payment data is securely stored by our payment processors. Please ensure the information you provide is true, complete, and accurate, and inform us of any changes.
Information Automatically Collected
In short: We automatically collect certain information when you visit our Website.

We automatically collect certain information when you visit, use, or navigate our Website. This information does not reveal your specific identity (such as your name or contact information) and may include device and usage data such as IP address, browser/device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical details. This data helps maintain the security and operation of our Website and is also used for internal analytics and reporting.

We collect information through cookies and similar technologies, including:

Log and Usage Data: Information related to your service-related usage, diagnostics, and performance is automatically collected when you access or use our Website.
Device Data: Information about the devices you use to access our Website, which may include IP address, device identification, browser type, operating system, location, and other technical details.
How Do We Handle and Use Your Information?
In summary, we process your information based on legitimate business interests, fulfilling our contract with you, complying with legal obligations, and/or your consent.

We use the information we collect for various business purposes, including but not limited to:

Fulfilling and managing your orders, payments, returns, and exchanges through the Website.
Administering prize draws and competitions when you choose to participate.
Providing and facilitating the services you request.
Responding to user inquiries and offering support for any issues related to our Services.
Will Your Information Be Disseminated to Any Parties?
In brief: We only share your information with your consent, to meet legal requirements, to provide services, protect your rights, or fulfill business obligations.

We process and share your data in accordance with various legal grounds, including:

Consent: We process your data if you have provided specific consent for a particular purpose.
Legitimate Interests: We may process your data when it is reasonably necessary to pursue our legitimate business interests.
Performance of a Contract: If we have a contractual agreement with you, we process your information to fulfill those obligations.
Legal Obligations: Information may be disclosed when legally required to comply with laws, governmental requests, judicial proceedings, court orders, or legal processes.
Vital Interests: Information may be disclosed if necessary to investigate, prevent, or address potential policy violations, fraud, threats to safety, or illegal activities.
We may also need to process or share your data in the following scenarios:

Business Transfers: In the event of a merger, asset sale, financing, or acquisition of our business, your information may be shared or transferred.
Do We Use Cookies or Tracking Mechanisms?
In summary: Yes, we use cookies and similar tracking technologies to collect and retain your data.

We use cookies and other tracking technologies like web beacons and pixels to gather data. You can learn more about our use of these technologies in our Cookie Notice.

How Long Do We Retain Your Information?
We retain your information only as long as necessary for the purposes outlined in this Privacy Policy, unless required by law. We will not hold onto your personal data longer than needed, and when no longer required, we will delete or anonymize it.

If deletion is not immediately possible (e.g., in backup systems), we will securely store your data and cease processing until deletion is feasible.

How Can You Contact Us Regarding This Policy?
If you have any questions or concerns about this Privacy Policy, please feel free to reach out to us at info@hairstory.com.

How Can You Modify, Review, or Erase Your Data?
In accordance with applicable regulations, you may request access to, modification of, or deletion of your personal data. To inquire about reviewing, updating, or deleting your data, please contact us via email at info@hairstory.com. We will respond to your request within 30 days.