Privacy Policy

Introduction


 

We are an online haircare retailer operating via an eCommerce platform (including platforms such as Wix). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our online store, make a purchase, or interact with our services.

 

We comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

Information We Collect


 

When you use our website, we may collect the following personal data:

 

•Identity Data: Name, username.

​

•Contact Data: Email address, phone number, billing and shipping address.

​

•Transaction Data: Purchase details, order history.

​

•Payment Data: Payment details (securely processed via third-party providers integrated within the platform, such as Wix Payments, PayPal, or Stripe; we do not store full card details).

​

•Technical Data: IP address, browser type, device information, cookies, and analytics data collected via platform tools (e.g., Wix Analytics).

​

•Marketing Preferences: Your preferences for receiving promotional communications.

 

How We Use Your Information


 

We use your personal data to:

​

•Process and fulfil your orders, including shipping and returns.

 

•Manage your account and provide customer service.

 

•Communicate order updates and respond to enquiries.

 

•Personalise your shopping experience.

 

•Improve our website functionality and user experience using platform analytics tools•Send marketing communications where you have opted in.

 

•Prevent fraud and ensure platform security.

 

•Comply with legal and regulatory obligations.

 

eCommerce Platform and Third-Party Services

 


Our store is hosted on an eCommerce platform such as Wix, which provides us with the online infrastructure to sell our products. Your data may be stored through Wix’s data storage, databases, and general applications, which are secured on protected servers behind a firewall.

 

We may also use integrated third-party services, including:

 

•Payment gateways (e.g., Wix Payments, Stripe, PayPal).

 

•Shipping and logistics providers.

 

•Email marketing tools.

 

•Analytics services.

 

These providers process your data only as necessary and in accordance with applicable data protection laws.

 

Legal Basis for Processing


 

We process your personal data under the following lawful bases:

 

•Contractual necessity: To process orders and provide services.

 

•Legitimate interests: To improve our services and prevent fraud.

 

•Consent: For marketing communications and non-essential cookies.

 

•Legal obligation: To comply with applicable laws.

 

Data Sharing


 

We do not sell your personal data. However, we may share your data with:

 

•Platform providers (e.g., Wix).

 

•Payment processors and financial institutions.

 

•Delivery and logistics partners.

 

•IT and hosting service providers.

 

•Regulatory or legal authorities where required.

 

International Data Transfers

 


As Wix and some third-party providers may operate globally, your data may be transferred outside the UK. In such cases, appropriate safeguards (such as standard contractual clauses) are in place to ensure your data is protected.

 

Data Security


 

We implement appropriate technical and organisational measures to protect your data, including encryption, secure payment processing, and restricted access controls. However, no method of transmission over the internet is completely secure.

 

Data Retention


 

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, and reporting requirements.

 

Your Rights


 

Under UK GDPR, you have the right to:

 

•Access your personal data.

 

•Correct inaccurate or incomplete data.

 

•Request deletion of your data.

 

•Restrict or object to processing.

 

•Request data portability.

 

•Withdraw consent at any time

 

To exercise these rights, please contact us using the details in our contact us section.

 

Cookies and Tracking Technologies


 

Our website uses cookies and similar technologies provided by the eCommerce platform (e.g., Wix cookies) to:

 

•Enable website functionality.

 

•Analyse site traffic and performance.

 

•Personalise user experience.

 

You can manage cookie preferences via your browser settings.

 

Third-Party Links


 

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices.

 

Children’s Privacy

 


Our website is not intended for individuals under 16 years of age, and we do not knowingly collect personal data from children.

 

Changes to This Policy


 

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.

 

Contact Information

 


If you have any questions about this Privacy Policy or your personal data, please contact us at bloomandroot.support@gmail.com.