Privacy policy

This Privacy Policy explains how luxyhairx.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, make purchases, communicate with us or otherwise interact with our online store.

For privacy-related enquiries:

Email: info@luxyhairx.shop

We aim to process personal information lawfully, fairly and transparently and in accordance with applicable United Kingdom data-protection requirements.

UK GDPR transparency requirements include informing individuals about purposes of processing, lawful bases, retention and recipients of personal data.

1. Scope of This Privacy Policy

This policy applies to personal information processed in connection with:

• Visiting luxyhairx.shop;
• Browsing products;
• Creating or using customer functionality where available;
• Placing an order;
• Making a payment;
• Receiving an order;
• Contacting customer support;
• Requesting a return or refund;
• Subscribing to marketing where available;
• Participating in promotions; and
• Interacting with website functionality, cookies or similar technology.

2. Personal Information We May Collect

Depending on your interaction with us, we may collect information including:

Identity Information

Such as:

• Name;
• Customer identifier; and
• Account information where applicable.

Contact Information

Such as:

• Email address;
• Telephone number where supplied;
• Billing address; and
• Delivery address.

Order Information

Such as:

• Products ordered;
• Product selections;
• Quantities;
• Order value;
• Order date;
• Order number;
• Delivery status;
• Return information; and
• Refund information.

Payment and Transaction Information

Payment transactions may be processed using third-party payment providers.

We may receive information such as:

• Payment status;
• Transaction identifiers;
• Payment method category;
• Billing details; and
• Fraud-prevention information.

We do not necessarily receive or store complete payment-card credentials where payment information is processed directly by an authorised payment provider.

Device and Technical Information

Depending on website configuration and user choices, information may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Approximate location derived from technical information;
• Website activity;
• Referring pages;
• Pages viewed;
• Session information; and
• Cookie or similar identifiers.

Communications

If you contact us, we may process information contained in your correspondence, including:

• Email messages;
• Customer-service requests;
• Complaints;
• Return requests;
• Refund requests; and
• Other information voluntarily supplied to us.

3. How We Collect Information

Personal information may be collected:

• Directly from you;
• Automatically when you interact with the website;
• Through Shopify or ecommerce infrastructure;
• Through payment providers;
• Through delivery and logistics providers;
• Through fraud-prevention providers;
• Through analytics technology; and
• Through other service providers involved in operating the store.

4. Purposes for Which We Use Personal Information

We may process personal information for purposes including:

Processing Orders

To:

• Receive and confirm orders;
• Process payments;
• Verify transactions;
• Prepare orders;
• Arrange delivery;
• Provide tracking information; and
• Complete transactions.

Customer Support

To:

• Respond to questions;
• Investigate complaints;
• Process cancellations;
• Manage returns;
• Process refunds; and
• Resolve order issues.

Store Administration

To:

• Maintain customer records;
• Maintain transaction records;
• Manage products and inventory;
• Operate the website;
• Detect technical problems; and
• Improve website functionality.

Security and Fraud Prevention

To:

• Detect suspicious transactions;
• Prevent fraud;
• Protect customer accounts;
• Protect our systems;
• Enforce our terms; and
• Investigate misuse.

Legal and Regulatory Compliance

To comply with applicable:

• Tax obligations;
• Accounting obligations;
• Consumer-protection obligations;
• Data-protection requirements;
• Court orders;
• Regulatory requirements; and
• Other lawful obligations.

Marketing

Where legally permitted, we may use contact information to communicate about products, services or promotions.

Where consent is required, marketing will be based on appropriate consent.

Customers may unsubscribe from direct electronic marketing using the unsubscribe functionality provided or by contacting info@luxyhairx.shop.

5. Lawful Bases for Processing

Depending on the processing activity, we may rely on one or more lawful bases permitted under applicable data-protection law.

These may include:

Contract

Processing may be necessary to enter into or perform a contract with a customer.

Examples include:

• Processing an order;
• Taking payment;
• Arranging delivery; and
• Handling contract-related customer service.

Legal Obligation

Processing may be necessary to comply with legal duties, including certain tax, accounting, consumer-protection or regulatory obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests and where those interests are not overridden by the individual's rights and interests.

Examples may include:

• Fraud prevention;
• Website security;
• Business administration;
• Service improvement; and
• Establishing or defending legal claims.

Consent

Where consent is required, we may rely on consent for particular activities, such as certain marketing communications or non-essential technologies.

Consent may be withdrawn at any time, although withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ICO guidance requires organisations to identify and disclose the lawful basis relied upon for processing.

6. Cookies and Similar Technologies

luxyhairx.shop may use cookies and similar technologies to:

• Keep the website functioning;
• Maintain shopping-cart functionality;
• Remember preferences;
• Support checkout;
• Maintain security;
• Understand website usage;
• Measure performance; and
• Support advertising or marketing functionality where configured.

Some technologies are necessary for the website to function.

Other technologies may require user consent under applicable law.

Where consent is legally required, we aim to obtain appropriate consent before using the relevant non-essential technology.

Users may also be able to control cookies through browser settings.

Disabling certain technologies may affect website functionality.

7. Shopify and Ecommerce Providers

Our store uses Shopify ecommerce technology.

Shopify and related service providers may process personal information as necessary to provide ecommerce infrastructure, hosting, checkout functionality, security and other services supporting the operation of the store.

We may also use third parties for:

• Payment processing;
• Fraud detection;
• Hosting;
• Customer communications;
• Analytics;
• Order management;
• Delivery;
• Logistics; and
• Technical support.

Service providers may receive information only to the extent reasonably necessary for their relevant functions and subject to applicable legal requirements.

8. Payment Providers

Payment details may be collected or processed by payment providers made available through checkout.

Those providers may process information according to their own legal obligations and privacy practices.

We encourage customers to review relevant payment-provider information displayed during checkout where appropriate.

9. Delivery and Logistics Providers

We may share information necessary to deliver orders, including:

• Customer name;
• Delivery address;
• Telephone number where necessary;
• Email address where necessary;
• Order or parcel reference; and
• Relevant delivery instructions.

This information is shared for order fulfilment and delivery purposes.

10. Fraud Prevention and Security

We may use transaction, device and order information to detect, investigate and prevent:

• Fraud;
• Unauthorised transactions;
• Payment abuse;
• Account misuse;
• Cybersecurity threats; and
• Other unlawful activity.

This processing may involve specialised service providers.

11. Disclosure Required by Law

We may disclose personal information where reasonably necessary to:

• Comply with legal obligations;
• Respond to lawful requests from public authorities;
• Comply with court orders;
• Protect legal rights;
• Investigate fraud;
• Protect users or third parties; or
• Establish, exercise or defend legal claims.

12. Business Changes

If the operation of luxyhairx.shop is reorganised, transferred, merged or sold, relevant personal information may be transferred as part of that transaction where permitted by law and subject to appropriate protections.

13. International Data Transfers

Some ecommerce, hosting, payment, analytics or other service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally and applicable law requires safeguards, we aim to use legally recognised safeguards or other lawful transfer mechanisms appropriate to the circumstances.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, regulatory, accounting, security and dispute-resolution requirements.

Factors used to determine retention periods may include:

• The nature of the information;
• The purpose for which it was collected;
• Whether an active customer relationship exists;
• Legal record-keeping requirements;
• Tax and accounting obligations;
• Fraud-prevention requirements;
• Limitation periods for legal claims; and
• The need to resolve disputes.

When information is no longer reasonably required, it may be deleted, anonymised or securely disposed of, subject to applicable legal obligations.

15. Data Security

We take reasonable technical and organisational measures intended to protect personal information from:

• Unauthorised access;
• Accidental loss;
• Improper disclosure;
• Alteration;
• Destruction; and
• Misuse.

However, no internet transmission or electronic-storage method is completely secure.

Customers should also protect account credentials and avoid sharing passwords or sensitive information unnecessarily.

16. Your UK Data-Protection Rights

Depending on the circumstances and applicable exemptions, individuals may have rights including:

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restrict processing;
• The right to data portability;
• The right to object; and
• Rights relating to certain automated decision-making.

These rights are recognised within the UK GDPR framework.

Not every right applies in every circumstance.

17. Direct Marketing Objections

Individuals have the right to object to processing of their personal data for direct-marketing purposes.

Where a valid objection applies to direct marketing, the relevant personal information will no longer be processed for that direct-marketing purpose.

Marketing preferences can be changed through available unsubscribe tools or by contacting:

info@luxyhairx.shop

18. Exercising Your Rights

To submit a privacy request, contact:

info@luxyhairx.shop

Please clearly describe your request.

We may request reasonable information necessary to verify identity before disclosing or changing personal information.

This is intended to prevent personal information from being disclosed to an unauthorised person.

19. Children

luxyhairx.shop is intended for general online retail use and is not specifically directed at children.

We do not knowingly seek to collect personal information from children in circumstances where parental consent or another lawful basis would be required and absent.

If you believe that a child has provided personal information improperly, please contact info@luxyhairx.shop.

20. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independently operated third-party websites.

Users should review the applicable privacy information before supplying personal information to another organisation.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes in our operations;
• Changes to website functionality;
• New service providers;
• Legal or regulatory developments; or
• Security and operational requirements.

The revised version will be published through luxyhairx.shop with an updated revision date where appropriate.

22. Contact

For privacy enquiries or data-protection requests:

Email: info@luxyhairx.shop