Last updated: 12 February 2026
This Privacy Policy explains how Icon Hair (“we”, “us”, “our”) collects, uses, stores and shares your personal data when you use our website and services, including when you browse, place an order, create an account, subscribe to marketing, or contact us.
1) Who we are
Website: iconhair.co.uk
Business name: Icon Hair
Contact email: [INSERT PRIVACY EMAIL]
Registered/Trading address: [INSERT ADDRESS]
2) The data we collect
We may collect, use, store and transfer different kinds of personal data, including:
- Identity Data (e.g. name)
- Contact Data (e.g. billing/delivery address, email address, phone number)
- Account Data (e.g. login details if you create an account)
- Transaction Data (e.g. orders, payment status, returns/refunds)
- Technical Data (e.g. IP address, device identifiers, browser type/version, time zone and location, operating system)
- Usage Data (e.g. pages viewed, clicks, time on site)
- Marketing & Communications Data (e.g. your preferences in receiving marketing from us)
3) How we collect your data
- Direct interactions: you provide data when you order, create an account, sign up to emails, request support, or contact us.
- Automated technologies: as you browse, we collect Technical and Usage Data via cookies, pixels and similar tech.
- Third parties: we may receive data from payment providers, shipping carriers, analytics providers and advertising networks.
4) How we use your data (lawful bases)
We only use your personal data when the law allows us to. Most commonly, we use it where:
- We need to perform a contract with you (e.g. process and deliver your order, manage returns/refunds, provide customer support).
- It is necessary for our legitimate interests (e.g. improve our website, prevent fraud, measure marketing performance), provided your interests and fundamental rights do not override those interests.
- We need to comply with a legal obligation (e.g. tax, accounting, consumer law).
- You have given consent (e.g. certain marketing and cookie choices where required).
5) Orders, payments and customer service
When you place an order, we use your data to:
- confirm your order and take payment
- deliver products to you
- send order updates (e.g. dispatch notifications)
- handle returns, refunds and complaints
Payment card details: we do not store full payment card details. Payments are processed by our payment providers who handle your card details securely.
6) Marketing emails (Mailchimp)
If you choose to subscribe, we send marketing emails using Mailchimp. This may include product launches, offers and updates. Mailchimp may use tracking technologies in emails (such as pixel tags) to help us understand engagement (e.g. opens and clicks) and improve our communications.
You can unsubscribe at any time using the link in our emails. You can also contact us to update your preferences.
7) Analytics and advertising (Google & Meta/Facebook)
We use analytics and advertising tools to understand site performance, measure conversions, and improve our ads. These tools may use cookies/pixels and collect browsing and device information.
- Google Analytics: helps us understand how visitors use our website (pages visited, time on site, interactions).
- Google Ads conversion tracking: helps us measure whether ads lead to actions like purchases.
- Meta Pixel (Facebook/Instagram): helps us measure ad performance and understand actions taken on our site after viewing/clicking ads.
Depending on your cookie choices, these tools may also allow us to build audiences (e.g. people who visited certain pages) and show more relevant ads.
8) Cookies
Cookies are small text files stored on your device. We use cookies and similar technologies for:
- Strictly necessary: core site features like basket/checkout, fraud prevention and security.
- Functional: remembering preferences (where used).
- Analytics: understanding site usage and improving performance.
- Marketing: measuring ads and showing relevant advertising.
You can control cookies via your browser settings and (where available) via our cookie banner/preferences tool.
9) Who we share your data with
We may share your personal data with trusted service providers where necessary to operate our business, including:
- E-commerce platform providers (e.g. WooCommerce/WordPress plugins needed to run the store)
- Payment processors (to take payments securely)
- Delivery and logistics partners (to ship orders)
- Email marketing provider (Mailchimp)
- Analytics and advertising providers (Google and Meta)
- Professional advisers (accountants, insurers, legal advisers) where required
We require service providers to respect the security of your personal data and to treat it in accordance with the law.
10) International transfers
Some of our service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place, such as using recognised legal transfer mechanisms (for example, contractual protections) to protect your data.
11) Data security
We use reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
12) How long we keep your data
We only keep your personal data for as long as necessary for the purposes we collected it for, including legal, accounting or reporting requirements. Typical retention periods can vary depending on the type of data and our legal obligations.
13) Your legal rights (UK GDPR)
Depending on your circumstances, you may have rights including:
- access to your personal data
- correction of inaccurate or incomplete data
- erasure of your data (in certain situations)
- restriction of processing (in certain situations)
- data portability (in certain situations)
- object to processing (in certain situations, including some marketing)
- withdraw consent at any time (where we rely on consent)
To exercise your rights, contact us using the details above.
14) Complaints
If you have concerns about how we use your data, please contact us first and we’ll do our best to resolve it. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
15) Children
Our website is not intended for children and we do not knowingly collect data relating to children.
16) Third-party links
Our site may include links to third-party websites. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy
