PRIVACY POLICY

Privacy Policy for Heavenly Wigs

Last Updated: 23/01/2025

At Heavenly Wigs, we deeply value the trust you place in us when you choose to shop with us, whether through our website or in-store. We understand that by sharing your personal information, you expect a high level of care and protection. Your trust forms the foundation of our relationship, and with that comes a significant responsibility. This is a responsibility we take very seriously, and we are committed to handling your personal data in a way that is transparent, secure, and respectful of your privacy.

This Privacy Policy aims to provide a clear explanation of how we collect, use, and share your personal information, as well as the rights you have concerning your data. We encourage you to review this policy thoroughly, especially if you want to better understand your rights and how to exercise them. For ease of access, more detailed information about your rights can be found in the Your Rights section of this document.

This Privacy Policy applies to any interaction you have with Heavenly Wigs Ltd, whether you are shopping on our retail websites, visiting any of our physical stores, or contacting us for queries, support, or marketing purposes. We regularly update our Privacy Policy to reflect changes in the way we manage personal information, so we advise you to check it from time to time. The last updated date is always displayed at the top of this document. In the event of significant changes, we will make efforts to notify you directly.

Who We Are

We are Heavenly Wigs Ltd, operating under the brand names Heavenly Wigs. When we mention "we", "us", or "our" throughout this document, we are referring to Heavenly Wigs Ltd. As the data controller, we are responsible for deciding how and why your personal information is processed and ensuring that your data is treated with the utmost care, security, and legal compliance.

We are committed to meeting the highest standards when it comes to protecting your personal data and maintaining your privacy. If you have any questions or concerns regarding the use of your personal information, or if you wish to exercise any of your rights, you can contact Heavenly Wigs via email at [email protected].

Your Rights

You have several rights under data protection law, and we want to ensure you are fully aware of these. These rights enable you to maintain control over how your personal information is handled:

- Right of Access: You have the right to request access to the personal data we hold about you. This request is free of charge, and we will provide you with a copy of your personal data in accordance with legal requirements.

- Right to Rectification: If you believe that any of the personal information we hold about you is incorrect or incomplete, you have the right to request that we update or correct it. We may ask for evidence to verify the inaccuracy of the information before making any changes.

- Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete or stop processing your personal information if it is no longer necessary for the purpose for which it was collected. If you exercise this right, we will cease processing your data, although we may retain a record of your name to ensure we honour your request. This will not prevent us from processing any new information you provide to us in the future.

- Right to Restriction of Processing: In certain situations, you can ask us to temporarily stop using your data, such as when you are contesting the accuracy of the information or objecting to its use.

- Right to Data Portability: You have the right to request that we electronically transfer, copy, or move your personal data to another company in a machine-readable format.

- Rights Regarding Automated Decision-Making and Profiling: We may use your personal information to make automated decisions, including profiling, to tailor your shopping experience, confirm your identity, and detect crime. While this is necessary for online shopping, you have the right to object to automated decisions. However, this may limit your ability to shop with us online and may require you to visit our stores.

- Right to Withdraw Consent: If we rely on your consent to process your personal data, you can withdraw or amend your consent at any time.

Please note that some rights may be restricted under certain circumstances. For example, if fulfilling your request would compromise another person’s privacy or if we are legally required to retain specific information. In such cases, we will explain why we cannot full fill your request and how we will continue using your data only for legitimate purposes.

If you have any general inquiries about your personal information or wish to exercise any of these rights, you can contact our Heavenly wigs via email at [email protected]. To ensure your privacy and security, we may require proof of identity before processing any requests related to your personal data.

If you have concerns about how we handle your data, we encourage you to contact us first. However, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK’s data protection authority. You can find further details on their website at www.ico.org.uk.

The Legal Basis We Use to Process Data

We only process your personal information when we have a valid legal basis to do so. The specific legal grounds we rely on include:

- Contractual Necessity: We process your data when it is necessary for fulfilling a contract with you, such as processing an order or managing your account.

- Consent: Where required by law, we will seek your explicit consent before processing your data for specific purposes, such as marketing communications. You can withdraw your consent at any time.

- Legitimate Interests: In certain cases, we process your data because it is in our legitimate interest to do so, provided that these interests are not overridden by your rights and interests. For example, we use your data to provide a seamless and secure shopping experience.

- Legal Obligation: We may need to process your data to comply with legal requirements, such as regulatory obligations or law enforcement requests.

The Information We Collect and How We Use It

We collect personal information from various sources, including directly from you, from your interactions with our website, and from third parties. Here’s how we use your data:

- Order Processing (Contractual Basis): We collect and process payment details when you place an order. These details are shared with payment processors like PayPal, and Klarna. We also use your delivery address to ensure your purchases reach you and to facilitate any returns.

- Account Management (Contractual Basis): When you register an account with us, we collect details such as your name, date of birth, contact details, and a password to manage your account securely. We also use this information for account maintenance and to provide the services you request.

- Customer Service (Legitimate Interest): If you contact our customer service team or interact with us on social media, we may record these interactions for training, quality control, and service improvement purposes.

- Personalization and Improvement (Legitimate Interest): We use data about how you interact with our website and marketing materials, combined with your purchase history and demographics, to show you tailored offers and content. This allows us to improve your overall shopping experience.

- Marketing and Communications (Legitimate Interest): We use cookies and similar technologies to show you personalized advertisements across various platforms, such as Facebook and Google. We share anonymized data with advertising partners to ensure that you see the most relevant ads.

- Website Functionality (Legitimate Interest): Cookies help us remember your preferences and ensure that the website functions properly. Additionally, we use cookies to understand how users interact with our site so that we can continually improve the experience.

- Fraud Prevention and Security (Legitimate Interest/Legal Obligation): We use account and transaction information to monitor for fraudulent activity.

How Long We Keep Your Data

We retain your personal data for as long as necessary for the purposes for which it was collected and processed. Generally, we will keep your data for a period of seven years, primarily for legal and regulatory compliance. After this period, we take steps to delete or anonymize the data when it is no longer needed.

Third Parties We Share Data With and Receive Data From

We work with several trusted third-party service providers to help us deliver high-quality services. We only share your personal information with these parties when it is necessary to perform a service, and we always ensure that your data is shared securely. Our partners include:

- Business Partners and Suppliers: This includes companies that provide professional services like legal advice, banking, insurance, and auditing.

- Delivery Partners: We work with delivery companies to ensure your orders reach you.

- IT Service Providers: These companies help us maintain our website and internal systems.

- Marketing and Advertising Providers: We work with companies that assist with email marketing, digital advertising, and analytics to show you relevant advertisements.

- Fraud Prevention Agencies: We use third-party services to monitor for fraudulent activity and share information with law enforcement when necessary.

Transferring Data Outside the EEA

Although our main operations are based in the UK, your data may be processed outside of the European Economic Area (EEA) in some cases. When this occurs, we take all necessary precautions to ensure your data