Privacy policy
Last Updated: September 7, 2025
That Hair Ltd. operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
Personal Information We Collect
When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. This may include:
-
Contact details: name, billing/shipping address, phone number, and email.
-
Financial information: payment details, transaction confirmations, account numbers.
-
Account information: login credentials, preferences, settings.
-
Transaction information: items viewed, added to cart, wishlist activity, purchase/return history.
-
Communications: messages and inquiries you send us.
-
Device & usage information: IP address, browser type, cookies, interaction with our Services.
Sources of Personal Information
We collect information:
-
Directly from you (when you create an account, make a purchase, or contact us).
-
Automatically (via cookies and device interactions with our site).
-
From our service providers (e.g. Shopify, payment processors, shipping carriers).
-
From business partners or third parties.
How We Use Personal Information
We may use your information to:
-
Provide and improve the Services (fulfill orders, process payments, manage accounts, ship products, customize your shopping experience).
-
Marketing & advertising (send promotional emails/SMS, show you relevant ads based on purchases or browsing).
-
Fraud prevention & security (protect accounts, detect unauthorized activity).
-
Customer communication (respond to inquiries, provide updates about orders).
-
Legal compliance (meet obligations under applicable laws, respond to lawful requests).
Disclosure of Personal Information
We may share personal information with:
-
Shopify (as our ecommerce platform).
-
Service providers (payment processors, shipping partners, IT providers).
-
Business partners (for advertising and marketing, in accordance with their privacy policies).
-
Legal authorities (when required to comply with law or protect rights).
-
Affiliates (within our corporate group).
Relationship with Shopify
Our Services are hosted by Shopify. Shopify may process your personal information in order to operate and improve the platform. For details on how Shopify handles data, see the Shopify Consumer Privacy Policy.
Your Rights
Depending on your location, you may have rights such as:
-
Access / Know – request the personal data we hold about you.
-
Delete – request deletion of your data.
-
Correct – request correction of inaccurate data.
-
Portability – request a copy of your data in portable format.
-
Withdraw consent – if we rely on consent for processing.
-
Opt out of marketing – unsubscribe from promotional emails or texts at any time.
We will honor requests as required by law and may require verification of your identity.
Children’s Data
Our Services are not intended for children. We do not knowingly collect personal data from individuals under 16. If you believe a child has provided us with their data, please contact us so we can remove it.
Data Security & Retention
While no system is completely secure, we implement safeguards to protect your personal information. We retain data only as long as necessary to provide Services, comply with legal obligations, resolve disputes, or enforce agreements.
International Data Transfers
Your information may be transferred to and processed outside of your country of residence, including in jurisdictions that may not provide the same level of data protection. Where required, we use lawful mechanisms to ensure adequate protection.
Changes to This Policy
We may update this Privacy Policy to reflect changes in practices, law, or operations. Updates will be posted here with a revised “Last Updated” date.
Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, please email us at: