Privacy Policy

📄 PRIVACY POLICY

Shines Hair – Privacy Policy
Last Updated: 03/March /2026

1. Who We Are

This website is operated by Shines Hair (“we”, “us”, “our”).

If you have any questions about this Privacy Policy, please contact us at:
📧 Email:  sales@shineshair.co.uk
📍 Address:  86 Red Ln, Coventry CV6 5EQ, UK

We are the Data Controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR).

2. What Information We Collect

We may collect and process the following data:

• Full name
• Billing and shipping address
• Email address
• Phone number
• Payment details (processed securely via third-party providers)
• IP address and browsing behaviour
• Order history

We do not store full payment card details.

3. How We Use Your Information

We use your personal data to:

• Process and fulfil orders
• Deliver products
• Respond to enquiries
• Send order confirmations and updates
• Improve website functionality
• Prevent fraud
• Send marketing emails (only if you opt in)

Legal basis under UK GDPR:

• Contractual necessity
• Legal obligation
• Legitimate interests
• Consent (for marketing)

4. Sharing Your Information

We may share your data with:

• Payment providers
• Delivery couriers
• Website hosting providers
• Email marketing services

We do not sell your personal data.

5. Data Retention

We retain personal data only as long as necessary for legal, accounting, and tax purposes (typically 6 years for financial records under UK law).

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

You can also lodge a complaint with the
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

7. Cookies

Our website uses cookies to:

• Improve user experience
• Analyse traffic
• Enable shopping cart functionality

You can manage cookie preferences through your browser settings.

8. Security

We implement appropriate technical and organisational measures to protect your personal data.