HairQ Data Protection Policy

HairQ is a company registered in England and Wales. We are committed to complying with all requirements of the Data Protection Act 1998 (‘Act’) and the General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’) as it relates to our business. In summary, personal data shall be:

• collected and used for specified purposes
• processed lawfully, fairly and in a transparent manner;
• accurate and kept up to date;
• appropriately secured against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Overview

Maintaining the security of your data is a priority at HairQ and we are committed to respecting your privacy rights. We shall always observe all legal requirements when dealing with any aspect of the data of our customers and any business partners. And always disclose to them the data we collect about them and how we use it. This policy applies whether on mobile device, online or whatever other electronic method. While our service is primarily electronic the policy applies even to non-electronic data. We set out below:

• How the data is used
• Nature of personal data collected
• Respect and assurance of privacy
• Legal rights to personal data

How We Use Your Data

HairQ uses your personal data in order to provide online services to you, provide you with a unique web experience, manage your account details, to maintain your confidentiality and to facilitate our own internal research purposes

Personal Data Collected

HairQ collects the following information about you - name, phone number, postal address and e-mail address. Some data are collected directly when you set up your account or via emails or texts sent to our server.

Our Controls to Safeguard your Privacy

HairQ is committed to keeping your personal data safe and secure. We encrypt the data, carry out regular assessment of service partners, and use latest available software tools for data security and virus protection.

1. Our service providers and suppliers

While we endeavour not to share your data with any other party, we may only share your data with our service partners that provide us IT services. Such sharing is only for the sole purpose of their updating maintaining or servicing the hardware or software that we use. Our service partners are provided access subject to their data protection and security controls being reviewed and deemed to be in conformance with this policy.

2. Other third parties

Except as set out above HairQ will never disclose your personal data to any third party, unless required to do so by law, governmental bodies, regulators, law enforcement agencies

3. Transfer of Data outside the EU

We may from time to time share your data with service partners from outside the EU. We apply firstly the same rigour as for EU service partners and secondly that such transfer complies with all relevant EU laws and regulations.

Length of Data Retention

Data is retained only for the length of time that is necessary for the purpose for which it was collected, or longer if so required by any relevant law or regulation.

Your Legal Rights to Your Personal Data Held by Us

The law gives you legal rights about your personal data. Accordingly you have the following rights about your personal data in our possession:

• the right to restrict processing or use without your express authority
• the right of access - to ask for a copy of personal data that we hold about you. You exercise this right by asking for a copy of the data, which is commonly known as making a ‘subject access request’
• the right of rectification - to ask us to correct any errors
• the right to object or raise concern - to opt out of any marketing communications that we may send you, are concerned about its security, accuracy, confidentiality or any other aspect
• the right to data portability - to ask us to supply the data in a format accessible to you or other parties that you authorise. We must do this if the transfer is technically feasible
• the right to be forgotten - to request us to delete the data if we have no legal basis to retain it
• the right to object to automated individual decision-making and profiling or automated processing - decisions made about you without people involvement
• right to seek compensation if you suffer damage as a result of any breach

Your Role in Protecting your Own Data

We never ask for any bank account or credit card details via email. So any such emails must be duly deleted without being responded to.

Legal Basis for Using Data

We are required by law to set out the legal basis upon which we process personal data. Accordingly;
HairQ collects and uses customers’ personal data because it is necessary for the provision of the services that we provide to you, promoting, marketing and advertising our products and services; complying with our legal or regulatory obligations; administration of our customer loyalty programme; or maintaining customer contacts, queries, complaints or disputes.

Data Security Breaches

Despite our great efforts IT changes so fast that there is always an inherent risk that a data breach may still occur. In the event of a data security breach we will promptly notify our customers and service partners in order to minimise the damage and exposure that such breach occasions

Additional Information

For any further questions regarding how HairQ use your personal data or to exercise your legal rights stated above please contact us by email: customer@hairq.co.ukYou can also contact the Information Commissioner’s Office:
https://ico.org.uk/global/contact-us/ or by post Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF or Tel: 03031231113.

Last Update

HairQ last updated the policy in March 2021.